canary.visa.com

- Visa International Service Association -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:a7:fa:f6:9d:2e:62:11:8d:60:a7:69:2f:e3:07:f7 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Visa International Service Association

Organization: Visa International Service Association
State / Province: California
Locality: Foster City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a7:fa:f6:9d:2e:62:11:8d:60:a7:69:2f:e3:07:f7
Serial Number (int): 2201431712334343758852180409342691319
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c1:e9:5f:80:67:48:86:11:6c:9e:b9:df:2e:9d:b1:ad:6d:d5:6c:95
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 96:88:6a:76:22:26:3e:89:c0:b2:41:5b:80:ab:60:4b:dd:cf:b1:a3
Fingerprint (sha256): 03:e3:35:77:ea:75:c8:6a:f5:40:d5:4c:42:78:dc:8b:7b:d7:80:b4:b6:a4:d5:01:4c:14:94:9a:6b:49:60:a6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl

Check the revocation status for certificate canary.visa.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canary.visa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canary.visa.com
*.visa.com

Other certificates including the domain name visa.com

(limited to 100 certificates)
origin.icl.visa.com
myvisacard.stage.visa.com
reward.qa.paris.visa.com
SW730CPAPRODWEB00.visa.com
card.visa.com
intellilink.spendmanagement.visa.com
cert.tgs-credential-collection.visa.com
qa-mas.vpl.visa.com
www.bd.visa.com
baas.vbs.visa.com
sandbox.alias.visa.com
epm.lacbenefits.visa.com
pit.3dsecure.net
multinationalpremiumsolutions.visa.com
cte.mobileapp.apcemea.visa.com
GlobalCustomerAssistanceService.trusted.visa.com
ocsp.visa.com
qa.promotions.visa.com
hn.review.visa.com
qa.vis.informationmanagement.visa.com
resource.message.card.visa.com
international.visa.com
vis.tdp.visa.com
ag.review.visa.com
sni.cloudflaressl.com
gimt.cte.visaonline.com
sbx.purchasealerts.visa.com
global.review.visa.com
intellilink.spendmanagement.visa.com
qa02.rtm.visa.com
privacy.visa.com
mte.rtm.visa.com
viva.visa.com
o365auth.visa.com
globalpage.visa.com
sandbox.checkout.visa.com
api.intellilink.spendmanagement.visa.com
portal1i.visa.com
mssip.visa.com
xpollens.prod.paris.visa.com
impactlabtest.visa.com
smailexp.trusted.visa.com
merchantsignageap.visa.com
carddesigner.visa.com
bb.review.visa.com
sandbox.cloudpos.digital.visa.com
publicsearch.visa.com
mtf-mastercard-visatokenservicesout.visa.com
adfs.trusted.visa.com
cert.conferma.visa.com
merchantsignageglobal.visa.com
ai.review.visa.com
admin.dev.paris.visa.com
conferma.visa.com
africa.visa.com
ipservicescert.visa.com
alertsadm.visa.com
servicesgateway.visa.com
jm.review.visa.com
sni.cloudflaressl.com
design.visa.com
isa.sandbox.consumerapi.digital.visa.com
drp.visaonline.com
cemea.review.visa.com
vdnagateway.cte.visa.com
staging.mobileapp.apcemea.visa.com
travel.visa.com
*.corpdev.visa.com
qa.informationmanagement.visa.com
v3dstestsuite.3dsecure.net
www.africa.visa.com
barclays.qa.intellilink.visa.com
azuressomerrillProd.trusted.visa.com
www.myanmar.visa.com
ar.review.visa.com
sbx.notification-services.visa.com
globalclient.visa.com
members.visa.com
aacert.alias.visa.com
visa.com.br
www.bm.visa.com
hn.review.visa.com
canary.visa.com
federation.checkout.visa.com
assets.secure.checkout.visa.com
sw720mtgplc6.trusted.visa.com
verifiapitest.visa.com
ics2wstesta.ic3.com
myanmar.visa.com
staging.mepa.visa.com
merchantsignageglobal.visa.com
filexchange.visa.com
do.review.visa.com
loyalty.visa.com
qa02.rtm.visa.com
ics2wsa.ic3.com
cert.alias.visa.com
barclays.qa.intellilink.visa.com
www.visa.com
*.myvisacard.stage.visa.com

Certificate

The complete raw certificate details for canary.visa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYII9djpVNR6TQgg4/rB
ko4DB1IFdrpmNGo/rGaO/GO0KBx3BH8V5tlnmy1Si1YoJxO/Uud4LduN0byGwLJV
godX2ZaIkq5z/PTRAFlSTMqh0mjmdYFHWvgORBVCfkClCo4JKavlULnAC7wds9Ya
6gAmvkW1x9M8hH8NDgXqGQss6JAz7KtwxP9m8jaTumG+o9i3h2IJT9fAjFXMup2a
nw7bZ1tVnW1X90EWdWqZe9N/lLRWO380/HHbIHtgqc5HfG/3FW1c5enkFkz5IKfi
oyGJ9YSpb/Ja0IyoSJ/Fwr4tXRyYFhC7JJq3uXt8nckIuRSHB0B41sW5xLsaRY4D
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2201431712334343758852180409342691319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Foster City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa International Service Association'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canary.visa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18368676869119291047779352778025801332528185357453382425708555365363265421421943978838327146663753481715423068499437491944301459653928230401928390827041929261212243231547752799587335698267033151069128543083089311308295752563443750350761112414084373960738342349435771349714449325276852147622725202124321941608429530082012628101317378099604872501835419445671055347490473622565856274745555888055125760518948835843349938234087387404802974085492200747050198592555945150782509616913575737534195196462490414689998811304267153262552843907128763017150321626456841010621825587019260951223102714991556530852532333215144391607199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1e95f80674886116c9eb9df2e9db1ad6dd56c95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary.visa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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