dropit.3dsecure.net

- VISA -

Issued by Visa eCommerce Issuing CA

About this certificate

This digital certificate with serial number 30:11:32:7a:3c:cb:a5:77:8b:e3:6b:71:36:fa:22:fe was issued on by VISA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)

VISA

Organization: VISA
Organization unit: Visa International Service Association
State / Province: Colorado
Locality: Highlands Ranch
Country: US

VISA

Organization: VISA
Organization unit: Visa International Service Association
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 30:11:32:7a:3c:cb:a5:77:8b:e3:6b:71:36:fa:22:fe
Serial Number (int): 63892236649402357219212851739811783422
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 66:bc:27:18:6b:13:6b:ee:f4:20:f4:74:4b:5a:4e:f5:13:d1:7c:c7
AuthorityKeyId: df:c3:2a:55:2e:2f:42:3a:7a:40:9d:92:a0:f7:47:79:d7:8f:87:8a

Fingerprint (sha1): 0c:06:d8:f1:a7:bc:87:d1:14:ce:82:7d:20:77:12:dc:7f:57:ae:be
Fingerprint (sha256): 81:43:d6:72:5c:84:23:7b:89:73:ae:ee:89:48:ac:a1:19:36:70:00:4d:7a:b3:5d:21:a1:dd:ec:b0:9f:7e:0a

Issuing Certificate URL: http://enroll.visaca.com/ecomm.cer

Revocation information

OCSP Server: http://ocsp.visa.com/ocsp
CRL Distribution Point: http://Enroll.visaca.com/eComm.crl
CRL Distribution Point: ldap://Enroll.visaca.com:389/cn=Visa eCommerce Issuing CA,c=US,ou=Visa International Service Association,o=VISA?certificateRevocationList

Check the revocation status for certificate dropit.3dsecure.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dropit.3dsecure.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Key Encipherment
Data Encipherment
Key Agreement

Extended Key Usages

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dropit.3dsecure.net

Other certificates including the domain name 3dsecure.net

(limited to 100 certificates)
pit.3dsecure.net
testacs.3dsecure.net
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
sl55vstswbp001.visa.com
sni.cloudflaressl.com
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
sni.cloudflaressl.com
dropit.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
mpi1.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
mpi2.3dsecure.net
mpi1.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
sl55vstswbp001.visa.com
visasecuretestsuite.3dsecure.net
mpi2.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net
dropit.3dsecure.net
v3dstestsuite.3dsecure.net
testacs.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
sl55vstswbp001.visa.com
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net

Certificate

The complete raw certificate details for dropit.3dsecure.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHgBy2dC5m/FBPGc1Usz
LI5SPQtg5rxWlseKTFG+OvDszxBf4GCf/hieNjmrK9enwkS90qpIZczQiPIjL8uH
NIw8/Z/JX6XIqVW59UzVQy/Exjz9t4OdTIbJpHfVpEAAek3Ukvne02ACjnTUvsLp
UCpkJSsszSnhcbhvTqKdPVTxM1RDXoBwzmBIjbQ1eGnuX1bRV62PnQVrr6hxDNK3
xwQiXx9oIRXICKXh3My9NJL/NW+Ihuu6pULF/PVW1TLWxzOCV0wK61dsavD2zWt7
TibIvx3W1YPulVF+oPkPVdlOrCHyxT97XF0s5snNMbydr6R9QRCpcW0PMeFt+yr3
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 63892236649402357219212851739811783422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VISA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa International Service Association'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa eCommerce Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-06 02:37:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-06 02:37:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Highlands Ranch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VISA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa International Service Association'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dropit.3dsecure.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23287025775937398472796062712895364398425990235335320888552358422084435048239868525497441098243417520654502120252890831216063420072527805835739540351169528947638552689183404835029980681728922161730993155355416264356530204750343225162070832493069503503227497430411876966113589373662507297063427508218467800988098433313134054700529820418227358056533842264061086320577191834699500572829434021304614814570571630366095117424826130302542562807517495779960776005258328116666295712798242849703377102506441712958722715432017518550720328405630479070972415176984539073029020998225470575833155794452700689148316308957686294837121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dropit.3dsecure.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.visa.com/ocsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://enroll.visaca.com/ecomm.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dfc32a552e2f423a7a409d92a0f74779d78f878a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://Enroll.visaca.com/eComm.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://Enroll.visaca.com:389/cn=Visa eCommerce Issuing CA,c=US,ou=Visa International Service Association,o=VISA?certificateRevocationList'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0338
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66bc27186b136beef420f4744b5a4ef513d17cc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.131.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.visa.com/pki'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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