partnernetwork.visa.com

- Visa International Service Association -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 3d:ec:41:b9:ba:a1:8a:74:ff:2a:f4:44:d9:d4:8e:0c was issued on by Symantec Corporation.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Visa International Service Association

Organization: Visa International Service Association
Organization unit: VPN
State / Province: California
Locality: Foster City
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:ec:41:b9:ba:a1:8a:74:ff:2a:f4:44:d9:d4:8e:0c
Serial Number (int): 82309622873087892793457302834288823820
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): d1:a9:94:dc:4d:5a:c2:d6:f6:72:3f:e7:40:60:fe:06:bb:03:7b:09
Fingerprint (sha256): 47:c4:94:b9:de:10:5b:53:99:35:d7:60:5a:9e:e4:ad:a8:df:bc:12:f9:7e:71:d1:a7:2b:89:21:97:6c:89:84

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate partnernetwork.visa.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for partnernetwork.visa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.myvisainfinite.com
vppcms.visaonline.com
www.myvisacardportal.com
www.partnernetwork.visa.com
partnernetwork.visa.com

Other certificates including the domain name visa.com

(limited to 100 certificates)
origin.icl.visa.com
myvisacard.stage.visa.com
reward.qa.paris.visa.com
SW730CPAPRODWEB00.visa.com
card.visa.com
intellilink.spendmanagement.visa.com
cert.tgs-credential-collection.visa.com
qa-mas.vpl.visa.com
www.bd.visa.com
baas.vbs.visa.com
sandbox.alias.visa.com
epm.lacbenefits.visa.com
pit.3dsecure.net
multinationalpremiumsolutions.visa.com
cte.mobileapp.apcemea.visa.com
GlobalCustomerAssistanceService.trusted.visa.com
ocsp.visa.com
qa.promotions.visa.com
hn.review.visa.com
qa.vis.informationmanagement.visa.com
resource.message.card.visa.com
international.visa.com
vis.tdp.visa.com
ag.review.visa.com
sni.cloudflaressl.com
gimt.cte.visaonline.com
sbx.purchasealerts.visa.com
global.review.visa.com
intellilink.spendmanagement.visa.com
qa02.rtm.visa.com
privacy.visa.com
mte.rtm.visa.com
viva.visa.com
o365auth.visa.com
globalpage.visa.com
sandbox.checkout.visa.com
api.intellilink.spendmanagement.visa.com
portal1i.visa.com
mssip.visa.com
xpollens.prod.paris.visa.com
impactlabtest.visa.com
smailexp.trusted.visa.com
merchantsignageap.visa.com
carddesigner.visa.com
bb.review.visa.com
sandbox.cloudpos.digital.visa.com
publicsearch.visa.com
mtf-mastercard-visatokenservicesout.visa.com
adfs.trusted.visa.com
cert.conferma.visa.com
merchantsignageglobal.visa.com
ai.review.visa.com
admin.dev.paris.visa.com
conferma.visa.com
africa.visa.com
ipservicescert.visa.com
alertsadm.visa.com
servicesgateway.visa.com
jm.review.visa.com
sni.cloudflaressl.com
design.visa.com
isa.sandbox.consumerapi.digital.visa.com
drp.visaonline.com
cemea.review.visa.com
vdnagateway.cte.visa.com
staging.mobileapp.apcemea.visa.com
travel.visa.com
*.corpdev.visa.com
qa.informationmanagement.visa.com
v3dstestsuite.3dsecure.net
www.africa.visa.com
barclays.qa.intellilink.visa.com
azuressomerrillProd.trusted.visa.com
www.myanmar.visa.com
ar.review.visa.com
sbx.notification-services.visa.com
globalclient.visa.com
members.visa.com
aacert.alias.visa.com
visa.com.br
www.bm.visa.com
hn.review.visa.com
canary.visa.com
federation.checkout.visa.com
assets.secure.checkout.visa.com
sw720mtgplc6.trusted.visa.com
verifiapitest.visa.com
ics2wstesta.ic3.com
myanmar.visa.com
staging.mepa.visa.com
merchantsignageglobal.visa.com
filexchange.visa.com
do.review.visa.com
loyalty.visa.com
qa02.rtm.visa.com
ics2wsa.ic3.com
cert.alias.visa.com
barclays.qa.intellilink.visa.com
www.visa.com
*.myvisacard.stage.visa.com

Certificate

The complete raw certificate details for partnernetwork.visa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lG3Oo3piLx1G5yfkGkA
mI9fcHz7yT3PuCXYAQN7BI7hJSV6seHwQhn/hZZwxLkhnAwhLO6QA4WWrkIqlBrI
jWdPapmM+fXNaCMn1/ZHL2OIkWBDntpUc1IKTCHJGrp4UoqKIIaszCLy3pBdNwzo
YNMd2rCO1060UewJ4Vb0VInLtFzMyEtcj4oZSeA/bls6hA+Ek1R+BAE54kGqFQYN
wLUbUT5dk6b+XniDz1MYGwdcmPBGEbIUT+H8KB9ttX6oVm5evJVLQnSSa+KoUCpb
BMH82hba/NYwqDPUk1ykV7HxLRYQDwoPusHcZ+V8tj8eZzSpI+io7tcGxoPzNBJ+
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 82309622873087892793457302834288823820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Foster City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Visa International Service Association'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VPN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'partnernetwork.visa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29580058893915147236246862428551310122987334096177722033745099145912181217018498238861175704685861972699427032143800317107529680572113745825283079779448238487923868299668433883084979622156708492154493907718700254925353308589973427954111737860034941804968986142979271570278788354613097258023803399934909111528124724171470877144302049754491775419761505385664221753937341829913934508061310322799547827820705431135074263780959972818484160800596792582991297454884748045340785421991014674442405510169028036880462497050566417233439474564565526571175966322815262132156834857945083161443527618561688904339571466702539893931603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myvisainfinite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vppcms.visaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myvisacardportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partnernetwork.visa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnernetwork.visa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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