VCIICA.crt: CN=VCIICA,DC=visa,DC=com (Intermediate Certificate, Expiring 2027-05-07) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://enroll.visaca.com/VCIICA.crt" --output cert.crt

Download certificate through wget:

wget -q "http://enroll.visaca.com/VCIICA.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ad:48:80:32:12:61:d1:e8:cc:de:31:71:de:0c:ce:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=VISA, OU=Visa International Service Association, CN=Visa Corporate Sub CA
        Validity
            Not Before: Jul 13 20:26:30 2017 GMT
            Not After : May  7 17:34:30 2027 GMT
        Subject: DC=com, DC=visa, CN=VCIICA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:a2:1d:42:b5:e0:1a:fd:8b:bc:3b:b8:52:
                    58:aa:50:38:b4:2c:28:99:37:75:17:61:08:b5:f6:
                    78:45:f4:30:a8:85:4e:7f:c7:86:66:a4:78:ba:36:
                    e5:39:b4:ef:c9:ef:39:cd:1b:e7:a4:49:80:34:59:
                    81:48:e7:92:2e:20:c3:f5:15:20:5c:57:02:06:e6:
                    3f:c4:80:d7:fa:b8:5d:76:6a:33:6d:d9:93:82:9c:
                    b9:ab:04:f5:fb:b5:a0:1a:30:8e:fe:d4:09:f7:d0:
                    1c:42:17:34:c6:70:30:3a:6d:cb:93:1e:50:fe:0a:
                    35:fd:6c:e0:eb:8e:68:53:44:4e:67:e1:55:7b:8e:
                    d5:3f:e1:67:d7:d5:a5:89:14:89:dd:c0:70:25:d9:
                    95:9e:c2:7f:a1:27:c8:92:83:02:78:f7:1f:4a:94:
                    a4:f5:42:57:ea:54:28:2a:03:9d:7c:ef:45:cf:fc:
                    4b:7e:6e:e6:ee:33:0f:82:60:a1:fe:9b:fe:8b:ea:
                    9a:8b:67:c5:7d:dd:cb:4d:9b:63:82:c5:92:d0:f5:
                    1b:72:78:9b:57:36:aa:a6:96:98:3b:b6:9c:2d:5e:
                    1f:ab:ca:59:51:9f:70:6c:b9:30:8e:37:74:bd:f9:
                    98:b3:2e:4f:5d:76:e4:18:7b:6c:d5:f2:61:04:22:
                    52:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Authority Key Identifier: 
                keyid:22:79:06:22:53:BC:E9:25:14:4D:7E:55:C7:FB:54:6E:AB:93:1E:80

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                E3:27:AC:32:03:D3:8D:CA:40:3F:2E:79:C4:06:AA:31:9C:F4:DE:A3
            Authority Information Access: 
                CA Issuers - URI:http://drjc1.visa.com/drjc/VisaCorporateSubCA.crt.cer
                CA Issuers - URI:http://drjc2.visa.com/drjc/VisaCorporateSubCA.crt.cer

            X509v3 Certificate Policies: 
                Policy: 2.23.131.3.1
                  CPS: http://www.visa.com/pki
                  User Notice:
                    Organization: Replace This Text
                    Number: 1
                    Explicit Text: Replace This Text

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://drjc1.visa.com/drjc/VisaCorporateSubCA.crl

                Full Name:
                  URI:http://drjc2.visa.com/drjc/VisaCorporateSubCA.crl

    Signature Algorithm: sha256WithRSAEncryption
         83:72:2a:2f:33:2a:1a:b3:d5:6b:0c:d9:1e:91:16:61:56:7a:
         bf:98:44:a1:79:f2:6c:87:45:b4:fa:21:04:1e:6a:87:7a:b7:
         5b:ab:12:20:2f:f8:24:cf:dc:23:f1:6c:f7:5e:ca:51:a1:22:
         78:07:2c:db:41:a6:bf:60:72:3d:8b:09:fc:2d:05:48:f2:ec:
         b0:ba:e0:37:34:03:0e:a3:4f:e7:7b:2c:84:50:48:36:97:bc:
         4b:f3:2a:48:e6:c7:c5:14:2c:a9:74:4c:f2:8f:1f:ae:f9:b0:
         0d:15:8d:7f:c7:bb:90:11:01:23:7b:33:e6:05:75:25:d3:e5:
         a8:29:c3:f6:8c:8b:59:dd:f7:55:2d:89:23:e3:cb:2e:d5:0e:
         43:0a:d3:76:a8:af:9b:2d:a0:43:00:ed:c0:66:17:8f:f8:e0:
         db:47:96:f1:54:f6:82:a7:d3:07:b9:ec:b9:db:da:25:31:eb:
         65:9b:d6:46:5e:43:ac:85:30:c2:e0:20:38:91:9c:84:a5:32:
         a0:c9:6d:f4:94:d6:18:a3:9f:2e:d3:f2:04:0e:cc:21:ec:4e:
         aa:2d:5d:16:80:8c:ca:12:f5:23:7f:28:23:37:3c:3d:04:80:
         41:f3:a8:d8:ca:f0:19:2f:d4:1e:f4:9c:70:51:30:c3:d2:c6:
         03:ad:de:15

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06