dropit.3dsecure.net

- Visa International Service Associations -

Issued by e-Visa

About this certificate

This digital certificate with serial number 8c:9a:96:d9:b5:b5:2c:5a:9f:04:a1:e8:ff:b3:f5:9a was issued on by VISA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage contains an inefficient encoding wherein the number of 'unused bits' is declared to be 7, but it should be 11. Raw Bytes: [3 3 7 56 0], Raw Binary: [00000011 00000011 00000111 00111000 00000000] RFC 5280 Section 4.2.1.3 describes the value of a KeyUsage to be a DER encoded BitString, which itself defines that all trailing 0 bits be counted as being "unused". (Where ITU-T Rec. X.680 | ISO/IEC 8824-1, 21.7, applies, the bitstring shall have all trailing 0 bits removed before it is encoded.)
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • KeyUsage contains superfluous trailing 00 byte. Bytes: [3 3 7 56 0], Binary: [00000011 00000011 00000111 00111000 00000000] RFC 5280 Section 4.2.1.3 describes the value of a KeyUsage to be a DER encoded BitString, which itself must not have unnecessary trailing 00 bytes. (1.2.2 Where Rec. ITU-T X.680 | ISO/IEC 8824-1, 22.7, applies, the bitstring shall have all trailing 0 bits removed before it is encoded.)

Visa International Service Associations

Organization: Visa International Service Associations
Organization unit: VISA
State / Province: Texas
Locality: Austin
Country: US

VISA

Organization: VISA
Organization unit: Visa International Service Associations
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8c:9a:96:d9:b5:b5:2c:5a:9f:04:a1:e8:ff:b3:f5:9a
Serial Number (int): 186894592736290210814055914352766350746
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5d:87:09:31:c3:06:24:77:9a:50:ec:cf:54:24:f4:eb:4c:14:61:fc
AuthorityKeyId: e5:2c:42:6b:17:28:77:43:51:4f:cf:92:b5:48:7d:24:e7:d4:cc:6e

Fingerprint (sha1): fb:f8:c1:a1:4d:9a:c9:f7:22:a9:67:be:91:93:c5:c4:f4:89:eb:31
Fingerprint (sha256): 5f:1f:4b:05:41:33:1d:96:73:8a:b0:44:e9:57:2c:69:71:3a:c8:e8:a1:d8:25:fc:35:9b:5f:c3:eb:32:36:2a


Revocation information

CRL Distribution Point: http://Enroll.visaca.com/eVISACA.crl
CRL Distribution Point: http://www.intl.visaca.com/crl/eVISACA.crl
CRL Distribution Point: ldap://Enroll.visaca.com:389/cn=e-Visa,o=VISA,ou=Visa International Service Association?certificateRevocationList

Check the revocation status for certificate dropit.3dsecure.net

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dropit.3dsecure.net

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Key Encipherment
Data Encipherment
Key Agreement

Extended Key Usages

Extensions

6 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name 3dsecure.net

(limited to 100 certificates)
pit.3dsecure.net
testacs.3dsecure.net
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
sl55vstswbp001.visa.com
sni.cloudflaressl.com
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
sni.cloudflaressl.com
dropit.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
mpi1.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
mpi2.3dsecure.net
mpi1.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
sl55vstswbp001.visa.com
visasecuretestsuite.3dsecure.net
mpi2.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net
dropit.3dsecure.net
v3dstestsuite.3dsecure.net
testacs.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
sl55vstswbp001.visa.com
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net

Certificate

The complete raw certificate details for dropit.3dsecure.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDV43p2ct8E3HV/rFzy4txKXtOd
uw3kwo2XjPl+LTD+KO2PpXlhrLmKzRMyzKTn68WMhmyBOPYRM1tPu4WjApJmr92C
WIzL4de9Dzix3nHUsU2nDy0/kZM0nZ6wCLmnbioCW48ZYybjO3cP+G8MrQMxu3XV
NmT+NTNsHQqsXMRAMQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 186894592736290210814055914352766350746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VISA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa International Service Associations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'e-Visa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2007-04-03 19:56:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-04-03 19:56:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa International Service Associations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VISA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dropit.3dsecure.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 150197673891666313863211414512984855574681393996459476902272758493700465341044622562013195622605969313177355985718692322662183522880775338035688474239727987788785212476484975476125871195533303183861641388332791113193765473773970381039107129275298371557352896749179695917843318802014489489324187883037434069041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (9 bits)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:24|true] GeneralizedTime 

 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e52c426b17287743514fcf92b5487d24e7d4cc6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.131.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.visa.com/pki'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (218 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://Enroll.visaca.com/eVISACA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.intl.visaca.com/crl/eVISACA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://Enroll.visaca.com:389/cn=e-Visa,o=VISA,ou=Visa International Service Association?certificateRevocationList'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d870931c30624779a50eccf5424f4eb4c1461fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (1024 bits)
		009a32f1627074fb841b780edc574dd8c560ad497a50f021667426afe2e4cbcedacefc777bf7ffd36c6c7dfc6d44a49f05221b113a1e7a1fa01889b631a803085d6d098adee8ac7fbe8f1fa2eb0da2bfe4d758666eee20dfda229d4915080a25f97affd5e453fabac7c0d556221793718ebbc75c592685c243bd223e96b25ed684