Comparação de Páginas

...

• shall not use punctuation signs, umlauts or cedilla;

• in addition to alphanumeric characters, only the following special characters may be used:

Algorithms

All certificates issued by ICP-Brasil must have the following characteristics:

...

The Client Certificate must be issued through the V10 chain, and must contain the following attributes:

Distinguished Name, as per the sequence bellow (details available in section 9.2):

• businessCategory (OID 2.5.4.15): Type of business category, which must contain: "Private Organization" or "Government Entity" or "Business Entity" or "Non-Commercial Entity"

• jurisdictionCountryName (OID: 1.3.6.1.4.1.311.60.2.1.3): BR

• serialNumber (OID 2.5.4.5): CNPJ

• countryName (OID 2.5.4.6): BR

• organizationName (OID 2.5.4.10): Company Name

• stateOrProvinceName (OID 2.5.4.8): Federation unit of the certificate holder's physical address

• localityName (OID 2.5.4.7): City of the holder's physical address

• organizationIdentifier (OID 2.5.4.97): Participant Code associated with the CNPJ listed in the Directory Service of Open Finance Brasil. *For certificates issued until August 31: organizationalUnitName (OID 2.5.4.11): Participant Code associated with the CNPJ listed in the Directory Service of Open Finance Brasil*

• UID (OID 0.9.2342.19200300.100.1.1): Software Statement ID generated by Open Finance Brasil Directory

• commonName (OID 2.5.4.3): FQDN or Wildcard

...

• UID (OID 0.9.2342.19200300.100.1.1): Participant Code associated with the CNPJ listed in the Directory Service of Open Finance Brazil

• countryName (OID 2.5.4.6): BR

• organizationName (OID 2.5.4.10): ICP-Brasil

• organizationalUnitName (OID 2.5.4.11): Certificate Authority Name

• organizationalUnitName (OID 2.5.4.11): CNPJ of the Registration Authority

• organizationalUnitName (OID 2.5.4.11): Type of identification used (in person, videoconference or digital certificate)

• commonName (OID 2.5.4.3): Company Name

Certificate Extensions

keyUsage: critical,digitalSignature,nonRepudiation

...

ASPSP may choose the certificate that should be adopted for Open Data endpoints, which, by nature, are publicly accessible.

9. Open Finance Client Certificate Subject DN Pattern - After January 19, 2023 {#subjectDNtemplates}

...

• check the JWKS of your software-id application

• check the KID of the certificate you want the Subject DN for, customize the URL and access: https://keystore.directory.openbankingbrasil.org.br/<org-id>/<software-ID>/transport.jwks

• search for the certificate’s KID, then search for the Claim: x5dn

...

9.1.1. JWKS with certificate’s information:

Example: https://keystore.directory.openbankingbrasil.org.br/d7384bd0-842f-43c5-be02-9d2b2d5efc2c/bc97b8f0-cae0-4f2f-9978-d93f0e56a833/transport.jwks

9.1.2. Public Key Certificate Example:

...

The table below presents the sequence in Relative Distinguished Name as per item 9.5. In order to check the sequential order of the subjectDN, refer to itens 9.2 and 5.2.2.1