VisaPublicECCRoot.crt: CN=Visa Public ECC Root CA,OU=Visa International Service Association,O=VISA,C=US (Root Certificate, Expiring 2041-03-15) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://enroll.visaca.com/VisaPublicECCRoot.crt" --output cert.crt

Download certificate through wget:

wget -q "http://enroll.visaca.com/VisaPublicECCRoot.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3e:96:00:00:00:dc:d3:06:98:8c:72:9c:fa:65
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=VISA, OU=Visa International Service Association, CN=Visa Public ECC Root CA
        Validity
            Not Before: Mar 16 00:00:00 2021 GMT
            Not After : Mar 15 00:00:00 2041 GMT
        Subject: C=US, O=VISA, OU=Visa International Service Association, CN=Visa Public ECC Root CA
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:84:56:f8:3f:39:fd:e7:1c:cf:61:e6:c9:2e:3f:
                    1e:08:03:ec:79:9d:ef:1f:00:02:a1:b2:50:db:f9:
                    5e:85:8f:6c:66:e9:97:9f:0f:27:3c:54:17:d6:71:
                    6b:7f:52:15:7d:f1:06:59:74:e4:33:91:2c:8b:0e:
                    1b:f6:31:9b:c8:2c:da:31:f1:b2:90:e6:a9:8b:59:
                    0a:c0:d7:ed:5b:96:76:03:0c:22:ac:15:21:a1:8f:
                    ee:45:d4:ce:54:6b:4d
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                97:0D:03:2B:00:A2:EB:91:EF:E7:99:03:12:4E:20:83:2D:E9:47:EE
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:30:50:50:ac:9e:fc:cd:44:f3:e6:92:73:70:35:57:
         7c:2c:5a:d3:58:84:4c:5b:a3:4e:ee:ef:1d:16:0e:f8:84:93:
         ff:c9:44:0e:a6:14:16:f1:ea:c1:29:89:1c:18:4e:cd:02:31:
         00:ea:f2:c5:98:f9:63:cf:5f:ed:c8:f5:8e:31:1f:26:c8:58:
         96:2f:64:dd:29:4a:17:ac:ba:d5:56:46:7f:ca:c7:ce:89:85:
         c1:63:f9:50:97:2a:8d:9d:a0:b2:4a:8a:fd

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIICWjCCAeCgAwIBAgIPUT6WAAAA3NMGmIxynPplMAoGCCqGSM49BAMDMG8xCzAJ
BgNVBAYTAlVTMQ0wCwYDVQQKDARWSVNBMS8wLQYDVQQLDCZWaXNhIEludGVybmF0
aW9uYWwgU2VydmljZSBBc3NvY2lhdGlvbjEgMB4GA1UEAwwXVmlzYSBQdWJsaWMg
RUNDIFJvb3QgQ0EwHhcNMjEwMzE2MDAwMDAwWhcNNDEwMzE1MDAwMDAwWjBvMQsw
CQYDVQQGEwJVUzENMAsGA1UECgwEVklTQTEvMC0GA1UECwwmVmlzYSBJbnRlcm5h
dGlvbmFsIFNlcnZpY2UgQXNzb2NpYXRpb24xIDAeBgNVBAMMF1Zpc2EgUHVibGlj
IEVDQyBSb290IENBMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEhFb4Pzn95xzPYebJ
Lj8eCAPseZ3vHwACobJQ2/lehY9sZumXnw8nPFQX1nFrf1IVffEGWXTkM5Esiw4b
9jGbyCzaMfGykOapi1kKwNftW5Z2AwwirBUhoY/uRdTOVGtNo0IwQDAdBgNVHQ4E
FgQUlw0DKwCi65Hv55kDEk4ggy3pR+4wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8B
Af8EBAMCAQYwCgYIKoZIzj0EAwMDaAAwZQIwUFCsnvzNRPPmknNwNVd8LFrTWIRM
W6NO7u8dFg74hJP/yUQOphQW8erBKYkcGE7NAjEA6vLFmPljz1/tyPWOMR8myFiW
L2TdKUoXrLrVVkZ/ysfOiYXBY/lQlyqNnaCySor9
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06