# ITI (Brazil): root certificates and root store status

> ITI (Brazil) operates 1 root certificate(s) trusted for TLS by at least one major root store (CCADB owner: Government of Brazil, Instituto Nacional de Tecnologia da Informação (ITI); country: BR). See fingerprints, expiry and Chrome, Mozilla, Apple and Microsoft status.

Source: https://ssl.sh/cas/iti-brazil/
Last updated: 2026-11-10

ITI (Brazil) operates 1 root certificate(s) trusted for TLS by at least one major root store (CCADB owner: Government of Brazil, Instituto Nacional de Tecnologia da Informação (ITI); country: BR). See fingerprints, expiry and Chrome, Mozilla, Apple and Microsoft status.


## Root certificates (CCADB)

ITI (Brazil) has 1 root certificate(s) in the CCADB TLS report. Together they have signed 5 intermediate CA certificates, 5 of them still valid.

| Root certificate | Key | Expires | Chrome | Mozilla | Apple | Microsoft | Intermediates | SHA-256 |
|---|---|---|---|---|---|---|---|---|
| Autoridade Certificadora Raiz Brasileira v10 | RSA 4096 | 2032-07-01 | Not included | Not included | Not included | Included | 5 | 6E0BFF069A26994C15DE2C4888CC54AF84882E5495B7FBF66BE9CCFFEC7489F6 |

## CAA records

The CCADB lists no recognized CAA domain for the valid intermediates of ITI (Brazil). Section 4.2 of a CA's CP/CPS has to state the issuer domain names it accepts in CAA records, so check that document.

## Audits

Audit data the CCADB records for the TLS roots of ITI (Brazil). Auditor(s): Ernst & Young, LLP. The most recent audit period ended on 2022-09-08.

- Standard audit: WebTrust 2021-09-09 – 2022-09-08 (https://www.cpacanada.ca/api/getPDFWebTrust?attachmentId=1ee4abfb-6162-4025-aa4e-89cc9f1be04a)
- TLS Baseline Requirements: WebTrust 2021-09-09 – 2022-09-08 (https://www.cpacanada.ca/api/getPDFWebTrust?attachmentId=274068b4-bede-4ad1-97c4-030c33d76449)
- TLS EV Guidelines: WebTrust 2021-09-09 – 2022-09-08 (https://www.cpacanada.ca/api/getPDFWebTrust?attachmentId=0abf2866-b939-42fb-803a-6dc257509562)

## CP/CPS documents

Certificate Policy and Certification Practice Statement links that ITI (Brazil) has disclosed in the CCADB for its TLS roots, with effective dates:

- CP/CPS: http://acraiz.icpbrasil.gov.br/DPCacraiz.pdf

## Report a certificate problem

To report a mis-issued certificate, a compromised private key or other abuse, use the channels ITI (Brazil) lists in the CCADB (replace [at] and [dot] in addresses):

- cgope[at]iti[dot]gov[dot]br
- maciel[at]iti[dot]gov[dot]br
- fernandes[at]iti[dot]gov[dot]br

## Incident reports

CAs in Mozilla's root program file compliance incident reports in Mozilla's Bugzilla (product CA Program, component CA Certificate Compliance). This search lists the bugs whose title contains the words “ITI”: https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&product=CA+Program&component=CA+Certificate+Compliance&short_desc_type=allwords&short_desc=ITI&order=changeddate+DESC

## FAQ

**What CAA record allows ITI (Brazil) to issue certificates?**

The CCADB lists no recognized CAA domain for ITI (Brazil); check section 4.2 of its CP/CPS.

**Who audits ITI (Brazil)?**

Ernst & Young, LLP, according to the CCADB. The latest TLS Baseline Requirements audit (WebTrust) covers 2021-09-09 to 2022-09-08; the statement is dated 2023-01-30.

**How do I report a problem certificate to ITI (Brazil)?**

Use the channel(s) listed in the CCADB: cgope[at]iti[dot]gov[dot]br, maciel[at]iti[dot]gov[dot]br, fernandes[at]iti[dot]gov[dot]br.

**How many root certificates does ITI (Brazil) have?**

1 in the CCADB TLS report. Trusted for TLS: Chrome 0, Mozilla 0, Apple 0, Microsoft 1. They have signed 5 intermediates, 5 of them still valid.

Sources: CCADB All Certificate Information (V5), List of CAA Identifiers, List of CA problem reporting mechanisms and TLS Server Authentication report (ccadb.org/resources).