eCommG2.crt: CN=Visa eCommerce Issuing CA - G2,OU=Visa International Service Association,O=VISA,C=US (Intermediate Certificate, Expiring 2041-03-11) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://enroll.visaca.com/eCommG2.crt" --output cert.crt

Download certificate through wget:

wget -q "http://enroll.visaca.com/eCommG2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3e:96:00:00:00:e5:a3:6d:84:f4:dd:e4:80:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=VISA, OU=Visa International Service Association, CN=Visa Public RSA Root CA
        Validity
            Not Before: Jun  3 00:00:00 2021 GMT
            Not After : Mar 11 00:00:00 2041 GMT
        Subject: C=US, O=VISA, OU=Visa International Service Association, CN=Visa eCommerce Issuing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:8f:44:92:90:3f:3c:2b:3c:45:bc:fc:fd:64:e5:
                    54:ac:57:be:3f:58:e4:12:17:ea:75:47:57:6d:48:
                    11:46:9f:35:80:2f:0a:a2:f5:a3:d8:6d:ad:da:e6:
                    52:36:67:e9:c8:b9:63:58:3d:7c:61:de:91:37:e2:
                    6c:3a:2e:0a:19:24:c7:28:95:b3:69:73:f0:9a:04:
                    1a:e2:5f:b8:32:7f:52:35:09:45:17:ec:e4:b9:47:
                    0a:f5:a2:6e:13:22:5f:f0:2d:74:56:33:6d:53:d0:
                    3a:d5:a9:c8:f9:9f:fd:f6:54:47:06:bd:b4:bb:65:
                    00:41:eb:e9:ea:c0:52:a2:d6:8e:6e:fb:a7:2a:1f:
                    41:67:32:1d:3f:7e:52:0f:04:06:c1:52:dd:14:40:
                    5b:a2:0b:36:22:97:09:5f:59:48:73:4b:2d:61:66:
                    92:06:ef:7f:2b:c1:13:b5:66:00:96:af:60:5d:9c:
                    14:83:82:b4:1a:d7:0d:9b:15:fd:cc:45:cc:e6:c2:
                    fc:43:02:c9:9a:7d:3a:86:b4:89:84:85:c4:b6:b2:
                    b5:2c:7c:a7:09:88:d2:c8:65:78:54:47:2a:87:3b:
                    e9:e5:5c:a2:84:fb:62:6d:77:86:b8:77:f3:c1:a7:
                    83:70:b8:65:1e:14:22:e6:a8:36:58:52:2d:f5:27:
                    a0:59:4d:44:32:0f:c2:4c:b9:28:2e:b6:ba:e3:c1:
                    87:a6:87:94:a9:8c:3a:ca:74:fb:34:df:ab:cb:b5:
                    b2:33:32:ce:e1:72:26:79:3f:0f:5d:a4:90:b3:e3:
                    4e:90:01:4a:fd:73:79:58:e5:2b:1c:ef:96:b5:4d:
                    95:e3:e0:63:89:52:3e:fb:48:6c:b7:01:9f:66:07:
                    12:54:de:e1:8a:19:2b:5d:87:f1:11:a5:86:e1:43:
                    cc:d9:b8:21:60:df:a8:81:62:3c:3e:ca:60:55:8a:
                    a7:4e:bd:03:a1:06:03:c2:fd:de:64:a8:3c:8b:3d:
                    48:22:30:8b:6a:b7:b2:14:01:38:c8:de:2c:a8:4b:
                    00:1d:4d:81:12:35:bd:c2:fc:fd:d7:ae:a6:97:b2:
                    ee:c8:8a:87:ed:79:38:0d:13:e2:fb:5c:2c:8c:2d:
                    bb:74:85:c8:cb:c3:cc:c7:22:41:5d:58:6c:66:66:
                    c8:85:80:67:01:a5:aa:d1:f4:86:49:10:c9:e5:82:
                    ac:2b:e2:21:c5:59:dc:c5:fa:76:ff:a8:44:4d:58:
                    84:8f:65:5d:92:1b:a6:48:5f:f8:83:5b:01:6e:d5:
                    80:4c:ca:03:04:eb:b8:07:a6:7b:b4:cb:07:55:2f:
                    a1:82:55:de:65:02:43:42:90:68:07:a2:fd:16:1e:
                    13:db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:4B:4D:A6:0E:FB:A0:11:E8:AD:0B:E2:F0:F3:0A:00:2F:AC:8B:16:FB

            X509v3 Subject Key Identifier: 
                BD:27:63:28:A4:AE:54:B7:C8:23:B7:C1:35:42:17:E9:C6:78:5F:85
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: Policy Qualifier CPS
                  CPS: https://www.visa.com/pki
                Policy: 2.23.140.1.2.2
                Policy: 2.23.131.1.1.1
                Policy: 2.23.131.1.1.2

            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://enroll.visaca.com/VisaPublicRSARoot.crl

            Authority Information Access: 
                CA Issuers - URI:http://enroll.visaca.com/VisaPublicRSARoot.crt

    Signature Algorithm: sha256WithRSAEncryption
         81:59:56:c2:85:0c:e6:5c:28:ce:c2:af:54:9a:80:cb:fc:c4:
         63:7c:29:21:d5:af:85:f7:e6:37:14:6f:a6:74:8d:c4:6c:ff:
         6a:d1:4f:5d:80:7d:ac:49:03:3a:58:58:77:37:93:de:01:46:
         75:8e:a0:3c:77:72:f5:9f:24:b5:a3:df:db:95:1c:8c:da:f8:
         84:cd:82:f1:43:28:80:1e:5c:33:03:0b:c2:cf:82:f2:1f:d3:
         ab:34:9f:4b:51:7a:5a:e0:b3:65:d8:a9:00:af:c1:c7:0b:99:
         51:50:25:ff:8a:00:25:11:74:9e:40:ff:e1:31:be:c2:25:78:
         bb:ad:c6:63:4b:b1:10:8e:88:2f:98:18:cb:da:a1:f4:e0:63:
         76:91:49:6e:39:6e:5d:21:f1:aa:4f:1c:4a:36:6f:71:3a:06:
         82:1b:2d:66:46:7a:f5:00:f7:0f:75:83:b8:74:c0:7f:7c:47:
         10:e9:91:74:38:d3:02:7a:cc:4d:db:0c:c7:c5:24:2c:08:01:
         6e:00:7e:32:05:5b:ac:7c:f0:db:c7:bb:12:91:3f:6c:62:6b:
         2e:3f:42:a3:dc:cc:56:5d:ee:af:b5:f9:13:f8:f2:ce:7f:8a:
         e6:17:bf:75:ca:a8:41:6c:fe:13:2a:33:c8:f4:59:2a:cb:45:
         79:10:36:cf:02:41:4d:03:79:50:a4:82:78:1b:6b:11:f1:d5:
         e2:69:72:68:c2:30:96:df:41:f3:16:50:54:bd:b5:09:38:1f:
         48:43:00:69:7e:e3:33:ba:f4:95:66:5f:3d:7b:23:84:db:a9:
         6f:35:b4:74:ce:61:03:3b:6b:7a:15:91:8e:70:5e:57:c1:48:
         a1:62:28:29:72:ca:ee:0e:e9:44:46:de:f1:7d:70:f9:0c:72:
         4f:53:fc:c2:c2:bd:36:46:c0:58:d4:7b:6f:63:60:f1:c9:cb:
         c0:d5:b6:d5:bd:9a:38:7a:6c:f6:13:34:39:55:97:7b:aa:56:
         fc:87:b5:5a:ab:a0:89:cc:79:5f:88:af:12:30:96:3c:c3:01:
         6f:d1:c4:77:84:fe:eb:63:39:4f:18:d9:5f:53:fd:84:1a:de:
         03:3a:ef:74:a3:98:1e:67:a0:c7:c4:3d:6c:e6:21:17:48:46:
         ef:88:bc:cf:be:05:f4:06:07:ef:cc:5a:c1:05:0e:a9:cb:2e:
         52:82:54:b9:91:c1:50:be:a8:cd:08:5f:7d:15:ef:7a:f6:db:
         73:fb:b2:36:fa:0e:aa:c5:a3:96:1f:3d:2b:35:2a:00:43:f0:
         70:d2:f0:91:3b:ae:c4:a7:5e:aa:bd:5a:32:a3:99:39:e4:c7:
         fa:df:27:85:c4:58:b7:11

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIG4TCCBMmgAwIBAgIPUT6WAAAA5aNthPTd5IBlMA0GCSqGSIb3DQEBCwUAMG8x
CzAJBgNVBAYTAlVTMQ0wCwYDVQQKDARWSVNBMS8wLQYDVQQLDCZWaXNhIEludGVy
bmF0aW9uYWwgU2VydmljZSBBc3NvY2lhdGlvbjEgMB4GA1UEAwwXVmlzYSBQdWJs
aWMgUlNBIFJvb3QgQ0EwHhcNMjEwNjAzMDAwMDAwWhcNNDEwMzExMDAwMDAwWjB2
MQswCQYDVQQGEwJVUzENMAsGA1UECgwEVklTQTEvMC0GA1UECwwmVmlzYSBJbnRl
cm5hdGlvbmFsIFNlcnZpY2UgQXNzb2NpYXRpb24xJzAlBgNVBAMMHlZpc2EgZUNv
bW1lcmNlIElzc3VpbmcgQ0EgLSBHMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAI9EkpA/PCs8Rbz8/WTlVKxXvj9Y5BIX6nVHV21IEUafNYAvCqL1o9ht
rdrmUjZn6ci5Y1g9fGHekTfibDouChkkxyiVs2lz8JoEGuJfuDJ/UjUJRRfs5LlH
CvWibhMiX/AtdFYzbVPQOtWpyPmf/fZURwa9tLtlAEHr6erAUqLWjm77pyofQWcy
HT9+Ug8EBsFS3RRAW6ILNiKXCV9ZSHNLLWFmkgbvfyvBE7VmAJavYF2cFIOCtBrX
DZsV/cxFzObC/EMCyZp9Ooa0iYSFxLaytSx8pwmI0shleFRHKoc76eVcooT7Ym13
hrh388Gng3C4ZR4UIuaoNlhSLfUnoFlNRDIPwky5KC62uuPBh6aHlKmMOsp0+zTf
q8u1sjMyzuFyJnk/D12kkLPjTpABSv1zeVjlKxzvlrVNlePgY4lSPvtIbLcBn2YH
ElTe4YoZK12H8RGlhuFDzNm4IWDfqIFiPD7KYFWKp069A6EGA8L93mSoPIs9SCIw
i2q3shQBOMjeLKhLAB1NgRI1vcL8/deuppey7siKh+15OA0T4vtcLIwtu3SFyMvD
zMciQV1YbGZmyIWAZwGlqtH0hkkQyeWCrCviIcVZ3MX6dv+oRE1YhI9lXZIbpkhf
+INbAW7VgEzKAwTruAeme7TLB1UvoYJV3mUCQ0KQaAei/RYeE9tFAgMBAAGjggFx
MIIBbTAfBgNVHSMEGDAWgBRLTaYO+6AR6K0L4vDzCgAvrIsW+zAdBgNVHQ4EFgQU
vSdjKKSuVLfII7fBNUIX6cZ4X4UwEgYDVR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8B
Af8EBAMCAQYwWwYDVR0gBFQwUjAyBggrBgEFBQcCATAmMCQGCCsGAQUFBwIBFhho
dHRwczovL3d3dy52aXNhLmNvbS9wa2kwCAYGZ4EMAQICMAgGBmeBAwEBATAIBgZn
gQMBAQIwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1UdHwQ4MDYw
NKAyoDCGLmh0dHA6Ly9lbnJvbGwudmlzYWNhLmNvbS9WaXNhUHVibGljUlNBUm9v
dC5jcmwwSgYIKwYBBQUHAQEEPjA8MDoGCCsGAQUFBzAChi5odHRwOi8vZW5yb2xs
LnZpc2FjYS5jb20vVmlzYVB1YmxpY1JTQVJvb3QuY3J0MA0GCSqGSIb3DQEBCwUA
A4ICAQCBWVbChQzmXCjOwq9UmoDL/MRjfCkh1a+F9+Y3FG+mdI3EbP9q0U9dgH2s
SQM6WFh3N5PeAUZ1jqA8d3L1nyS1o9/blRyM2viEzYLxQyiAHlwzAwvCz4LyH9Or
NJ9LUXpa4LNl2KkAr8HHC5lRUCX/igAlEXSeQP/hMb7CJXi7rcZjS7EQjogvmBjL
2qH04GN2kUluOW5dIfGqTxxKNm9xOgaCGy1mRnr1APcPdYO4dMB/fEcQ6ZF0ONMC
esxN2wzHxSQsCAFuAH4yBVusfPDbx7sSkT9sYmsuP0Kj3MxWXe6vtfkT+PLOf4rm
F791yqhBbP4TKjPI9Fkqy0V5EDbPAkFNA3lQpIJ4G2sR8dXiaXJowjCW30HzFlBU
vbUJOB9IQwBpfuMzuvSVZl89eyOE26lvNbR0zmEDO2t6FZGOcF5XwUihYigpcsru
DulERt7xfXD5DHJPU/zCwr02RsBY1HtvY2DxycvA1bbVvZo4emz2EzQ5VZd7qlb8
h7Vaq6CJzHlfiK8SMJY8wwFv0cR3hP7rYzlPGNlfU/2EGt4DOu90o5geZ6DHxD1s
5iEXSEbviLzPvgX0BgfvzFrBBQ6pyy5SglS5kcFQvqjNCF99Fe969ttz+7I2+g6q
xaOWHz0rNSoAQ/Bw0vCRO67Ep16qvVoyo5k55Mf63yeFxFi3EQ==
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06