testacs.3dsecure.net

- VISA -

Issued by e-Visa

About this certificate

This digital certificate with serial number 49:51:45:cb:67:5b:9f:5d:db:35:13:3f:99:1f:bb:43 was issued on by VISA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage contains an inefficient encoding wherein the number of 'unused bits' is declared to be 7, but it should be 11. Raw Bytes: [3 3 7 56 0], Raw Binary: [00000011 00000011 00000111 00111000 00000000] RFC 5280 Section 4.2.1.3 describes the value of a KeyUsage to be a DER encoded BitString, which itself defines that all trailing 0 bits be counted as being "unused". (Where ITU-T Rec. X.680 | ISO/IEC 8824-1, 21.7, applies, the bitstring shall have all trailing 0 bits removed before it is encoded.)
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • KeyUsage contains superfluous trailing 00 byte. Bytes: [3 3 7 56 0], Binary: [00000011 00000011 00000111 00111000 00000000] RFC 5280 Section 4.2.1.3 describes the value of a KeyUsage to be a DER encoded BitString, which itself must not have unnecessary trailing 00 bytes. (1.2.2 Where Rec. ITU-T X.680 | ISO/IEC 8824-1, 22.7, applies, the bitstring shall have all trailing 0 bits removed before it is encoded.)

VISA

Organization: VISA
Organization unit: Visa International Service Association
State / Province: Colorado
Locality: Highlands Ranch
Country: US

VISA

Organization: VISA
Organization unit: Visa International Service Associations
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 49:51:45:cb:67:5b:9f:5d:db:35:13:3f:99:1f:bb:43
Serial Number (int): 97455635339407542969605670346965367619
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 09:0d:6f:2d:b2:be:87:a6:dd:37:19:42:52:7e:06:27:60:c1:59:af
AuthorityKeyId: e5:2c:42:6b:17:28:77:43:51:4f:cf:92:b5:48:7d:24:e7:d4:cc:6e

Fingerprint (sha1): fd:43:1e:0d:54:ec:98:7e:84:8b:31:82:10:ee:d7:8d:1a:69:2c:ec
Fingerprint (sha256): 64:4c:cf:df:9e:31:57:b7:9d:2e:07:9d:b4:96:d5:6d:85:69:c3:32:1c:8a:b5:23:73:31:e9:4a:cd:99:64:19


Revocation information

CRL Distribution Point: http://Enroll.visaca.com/eVISACA.crl
CRL Distribution Point: ldap://Enroll.visaca.com:389/cn=e-Visa,o=VISA,ou=Visa International Service Association?certificateRevocationList

Check the revocation status for certificate testacs.3dsecure.net

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for testacs.3dsecure.net

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Key Encipherment
Data Encipherment
Key Agreement

Extended Key Usages

Extensions

6 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name 3dsecure.net

(limited to 100 certificates)
pit.3dsecure.net
testacs.3dsecure.net
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
sl55vstswbp001.visa.com
sni.cloudflaressl.com
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
sni.cloudflaressl.com
dropit.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
mpi1.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
mpi2.3dsecure.net
mpi1.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
sl55vstswbp001.visa.com
visasecuretestsuite.3dsecure.net
mpi2.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net
dropit.3dsecure.net
v3dstestsuite.3dsecure.net
testacs.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
sl55vstswbp001.visa.com
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net

Certificate

The complete raw certificate details for testacs.3dsecure.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEVf3qkV0cCIFBwqWy3Xb8qNjO
qp5BvG+6ldmWFbAO6tChp/rggflCqFpIR4nPosvtaLgjl9LTpOsI2kJsE85JUsmt
I2SaSBH6TpMUjRwXEd0mjcEIOcIMs6WupSK+22cFEkjkX0b0MVFspiv0uEtPCUiu
f9Esl+jOKYr7DKDwowIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 97455635339407542969605670346965367619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VISA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa International Service Associations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'e-Visa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-11-04 18:25:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-11-04 18:25:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Highlands Ranch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VISA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa International Service Association'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testacs.3dsecure.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 137871761645621192950542854211233195444616101650814602216309377591730152461430725475021885742227441501760352510484733957295835016094173757548343653723952578080581212263568583558992838445246616760563612584449931338397982794473198698982989014928438148780462702780341600455602228698706842978645275737879461556387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (9 bits)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:24|true] GeneralizedTime 

 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e52c426b17287743514fcf92b5487d24e7d4cc6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.131.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.visa.com/pki'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://Enroll.visaca.com/eVISACA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://Enroll.visaca.com:389/cn=e-Visa,o=VISA,ou=Visa International Service Association?certificateRevocationList'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							090d6f2db2be87a6dd371942527e062760c159af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (1024 bits)
		0023d583f91fb0bc0cd8e7c95fd13e3adab967e447daa8649538f60ac19e279421521ac985a02b3277dc53996fcc20f6d4983ac34404af86e68d6016de08f8921dece157dc538f3a2352f68362e26f80460fbb42f385f8edf1603d6f20ea35ad4422467fdd23141566916921804becc6554b166e23ca6c2719f9060a3e0498a837