ecc3dsG2.crt: CN=Visa ECC 3DS Issuing CA - G2,OU=Visa International Service Association,O=VISA,C=US (Intermediate Certificate, Expiring 2041-03-11) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://enroll.visaca.com/ecc3dsG2.crt" --output cert.crt

Download certificate through wget:

wget -q "http://enroll.visaca.com/ecc3dsG2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3e:96:00:00:00:e7:ed:a9:6c:7a:09:7e:21:d9
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=VISA, OU=Visa International Service Association, CN=Visa Public ECC Root CA
        Validity
            Not Before: Jun  3 00:00:00 2021 GMT
            Not After : Mar 11 00:00:00 2041 GMT
        Subject: C=US, O=VISA, OU=Visa International Service Association, CN=Visa ECC 3DS Issuing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:71:d5:57:6f:0e:2b:b4:9f:bb:4c:a8:aa:a4:6e:
                    df:04:1f:21:85:64:f7:41:6e:3a:6a:65:6f:27:ed:
                    ca:8e:43:a5:ce:95:50:6b:6b:99:04:88:2d:61:1b:
                    b3:8e:80:a6:0e:33:cb:c9:77:55:1f:03:71:8e:a6:
                    2e:43:dc:67:89:79:39:6a:d6:be:e9:f5:71:9b:78:
                    24:13:86:b9:6d:a5:24:33:ad:5d:38:76:1c:b1:8d:
                    e4:19:df:8f:07:cb:65
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:97:0D:03:2B:00:A2:EB:91:EF:E7:99:03:12:4E:20:83:2D:E9:47:EE

            X509v3 Subject Key Identifier: 
                F8:66:0D:DF:37:0C:08:7E:58:DD:2B:27:2E:62:B6:35:D8:37:F5:54
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: Policy Qualifier CPS
                  CPS: https://www.visa.com/pki
                Policy: 2.23.140.1.2.2
                Policy: 2.23.131.1.1.2
                Policy: 2.23.131.1.1.3

            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://enroll.visaca.com/VisaPublicECCRoot.crl

            Authority Information Access: 
                CA Issuers - URI:http://enroll.visaca.com/VisaPublicECCRoot.crt

    Signature Algorithm: ecdsa-with-SHA384
         30:64:02:30:78:3f:20:9b:20:60:a5:13:24:05:f5:38:19:90:
         4d:99:26:f0:51:bf:7c:27:35:70:38:72:86:c0:d0:c9:54:57:
         e9:13:a6:31:75:eb:2e:3f:84:76:0a:e4:01:49:88:00:02:30:
         42:25:65:1d:91:f5:dd:74:da:f9:e4:88:b7:72:11:68:1d:3a:
         60:bd:23:00:6c:0f:b4:8d:da:0f:05:31:e9:b1:d6:7b:50:6c:
         82:7a:b6:a6:d2:99:bb:3a:eb:b8:bd:1d

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06