testacs.3dsecure.net
- VISA -
Issued by Visa eCommerce Issuing CA
About this certificate
This digital certificate with serial number fb:fd:a0:dd:91:a2:c4:ad:c3:10:df:ac:91:86:0e:2b was issued on by VISA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
- Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
- Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
- Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
- Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
- The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
VISA
Organization:
VISA
Organization unit: Visa International Service Association
Organization unit: Visa International Service Association
State / Province:
Colorado
Locality: Highlands Ranch
Country: US
Locality: Highlands Ranch
Country: US
VISA
Organization:
VISA
Organization unit: Visa International Service Association
Organization unit: Visa International Service Association
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): fb:fd:a0:dd:91:a2:c4:ad:c3:10:df:ac:91:86:0e:2bSerial Number (int): 334953140787255796604606179897980096043
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 56:c4:09:6d:88:95:6e:68:fa:9d:04:3c:c9:50:80:36:a5:82:24:c7
AuthorityKeyId: df:c3:2a:55:2e:2f:42:3a:7a:40:9d:92:a0:f7:47:79:d7:8f:87:8a
Fingerprint (sha1): f9:ec:17:26:91:fd:ce:20:1e:0d:41:d2:8a:70:7b:91:81:67:8a:13
Fingerprint (sha256): 42:70:0e:09:c3:77:5d:bf:11:23:c9:2c:67:90:9b:7c:c5:ac:0e:11:1d:4f:de:dc:48:de:43:56:6a:85:74:74
Revocation information
CRL Distribution Point: http://Enroll.visaca.com/eComm.crlCRL Distribution Point: ldap://Enroll.visaca.com:389/cn=Visa eCommerce Issuing CA,c=US,ou=Visa International Service Association,o=VISA?certificateRevocationList
Check the revocation status for certificate testacs.3dsecure.net
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for testacs.3dsecure.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Key Encipherment
Data Encipherment
Key Agreement
Extended Key Usages
Extensions
6 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name 3dsecure.net
(limited to 100 certificates)
pit.3dsecure.net
testacs.3dsecure.net
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
sl55vstswbp001.visa.com
sni.cloudflaressl.com
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
sni.cloudflaressl.com
dropit.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
mpi1.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
mpi2.3dsecure.net
mpi1.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
sl55vstswbp001.visa.com
visasecuretestsuite.3dsecure.net
mpi2.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net
dropit.3dsecure.net
v3dstestsuite.3dsecure.net
testacs.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
sl55vstswbp001.visa.com
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
sl55vstswbp001.visa.com
sni.cloudflaressl.com
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
sni.cloudflaressl.com
dropit.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
mpi1.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
mpi2.3dsecure.net
mpi1.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
sl55vstswbp001.visa.com
visasecuretestsuite.3dsecure.net
mpi2.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net
dropit.3dsecure.net
v3dstestsuite.3dsecure.net
testacs.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
sl55vstswbp001.visa.com
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net
Certificate
The complete raw certificate details for testacs.3dsecure.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIRAPv9oN2RosStwxDfrJGGDiswDQYJKoZIhvcNAQEFBQAw cTELMAkGA1UEBhMCVVMxDTALBgNVBAoTBFZJU0ExLzAtBgNVBAsTJlZpc2EgSW50 ZXJuYXRpb25hbCBTZXJ2aWNlIEFzc29jaWF0aW9uMSIwIAYDVQQDExlWaXNhIGVD b21tZXJjZSBJc3N1aW5nIENBMB4XDTEzMDkxMTIzMTkzM1oXDTE0MDMxMDIzMTkz NFowgZkxGDAWBgNVBAcTD0hpZ2hsYW5kcyBSYW5jaDERMA8GA1UECBMIQ29sb3Jh ZG8xCzAJBgNVBAYTAlVTMQ0wCwYDVQQKEwRWSVNBMS8wLQYDVQQLEyZWaXNhIElu dGVybmF0aW9uYWwgU2VydmljZSBBc3NvY2lhdGlvbjEdMBsGA1UEAxMUdGVzdGFj cy4zZHNlY3VyZS5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7 235PJmrX9wX/QLLI69YckOTXHejzNo4jH3YDTd5BxHVrRxanjHDR1aLFbsMRGI3Y 3XCPTe/2oyD8mGYEXyV69khaZP7lhQdbjeqiWvVnNBswrW/H/WNijVycLajWYPsA FSOsHrdoE5AYvVPY0Sb/SraCPgAC1N95fAodCMaKKmVf6lWonF9x27PUdGxrk8XP x1RU2bZ6SbirJtrmHFryMEmPOnxETG8I458B7cIYg4T94YV7LYu5lwGE5AU+fzRm XliPxfOhlniml9xHxmPGSfIr6wIlHsXizga5oxho816LND2iOu4kayPMGBQcCYMy ouv+HzJOK8CgOY/Gz3dzAgMBAAGjggFqMIIBZjAfBgNVHSMEGDAWgBTfwypVLi9C OnpAnZKg90d514+HijAMBgNVHRMBAf8EAjAAMIHKBgNVHR8EgcIwgb8wKKAmoCSG Imh0dHA6Ly9FbnJvbGwudmlzYWNhLmNvbS9lQ29tbS5jcmwwgZKggY+ggYyGgYls ZGFwOi8vRW5yb2xsLnZpc2FjYS5jb206Mzg5L2NuPVZpc2EgZUNvbW1lcmNlIElz c3VpbmcgQ0EsYz1VUyxvdT1WaXNhIEludGVybmF0aW9uYWwgU2VydmljZSBBc3Nv Y2lhdGlvbixvPVZJU0E/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDAOBgNVHQ8B Af8EBAMCAzgwHQYDVR0OBBYEFFbECW2IlW5o+p0EPMlQgDalgiTHMDkGA1UdIAQy MDAwLgYFZ4EDAQEwJTAjBggrBgEFBQcCARYXaHR0cDovL3d3dy52aXNhLmNvbS9w a2kwDQYJKoZIhvcNAQEFBQADggEBAB4Uw3NI8ttMUC+yXC0tj1izN8lse85atort PpnCCYVrcD6kdHttLXWR+iW2LHCjy7O3VoImosowusrJnx/VZ+AVm8SbV+1aRJE6 Ln/dr9K85mgKoTPKLL9Bwlsv+0cJC4GI5LsaCmFCp0Yg02H4Fbl9B6CZDLiGPrf0 P9hxL5jnEX/x1FZtUMx/283gpJGCAtOlvBQxdTw1Nfgs9mh55G/K0GNWDDzN9QKc fycdvxvvMVVWlaaledoF9iZusUNcveZvSktWG7oSvTCst6a2lwGtylp31ZmOXN+W AoGBdoHKnB4bchN+RUNSalsjwNTKor72HbL+5V4BdOKIBfMFGuM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9t+TyZq1/cF/0CyyOvW HJDk1x3o8zaOIx92A03eQcR1a0cWp4xw0dWixW7DERiN2N1wj03v9qMg/JhmBF8l evZIWmT+5YUHW43qolr1ZzQbMK1vx/1jYo1cnC2o1mD7ABUjrB63aBOQGL1T2NEm /0q2gj4AAtTfeXwKHQjGiiplX+pVqJxfcduz1HRsa5PFz8dUVNm2ekm4qyba5hxa 8jBJjzp8RExvCOOfAe3CGIOE/eGFey2LuZcBhOQFPn80Zl5Yj8XzoZZ4ppfcR8Zj xknyK+sCJR7F4s4GuaMYaPNeizQ9ojruJGsjzBgUHAmDMqLr/h8yTivAoDmPxs93 cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334953140787255796604606179897980096043 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VISA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa International Service Association' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa eCommerce Issuing CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-11 23:19:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-10 23:19:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Highlands Ranch' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VISA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa International Service Association' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testacs.3dsecure.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23714799255862373213122876856690725943883823209631347651596819225114131933260645016355806380501310116994833131197853059862218846858476880491306266193916798691145977133700430620614058369204557328554184664824768432486055156173522825880542354856521038459831976294092773046455683892014124411385693101161533889894495723105595597508672616084916253328287141104531524950498956403101929402116325414613856514608964897622341965576452750847209992719477035329605158063487956791906002718852712975087834099876262074464561558065753948146102073640049084184755501479759605868032421073091939255758831175020589638208354686620759585945459 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dfc32a552e2f423a7a409d92a0f74779d78f878a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (194 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://Enroll.visaca.com/eComm.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://Enroll.visaca.com:389/cn=Visa eCommerce Issuing CA,c=US,ou=Visa International Service Association,o=VISA?certificateRevocationList' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 0338 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 56c4096d88956e68fa9d043cc9508036a58224c7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.131.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.visa.com/pki' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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