testacs.3dsecure.net
- VISA -
Issued by Visa eCommerce Issuing CA
About this certificate
This digital certificate with serial number 41:f8:22:02:a2:f9:f8:bf:84:3c:34:c5:13:ca:72:09 was issued on by VISA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
- Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
- Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
- Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
- Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
- The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
VISA
Organization:
VISA
Organization unit: Visa International Service Association
Organization unit: Visa International Service Association
State / Province:
Colorado
Locality: Highlands Ranch
Country: US
Locality: Highlands Ranch
Country: US
VISA
Organization:
VISA
Organization unit: Visa International Service Association
Organization unit: Visa International Service Association
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 41:f8:22:02:a2:f9:f8:bf:84:3c:34:c5:13:ca:72:09Serial Number (int): 87688199157757786975832473882608693769
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: e2:8d:00:78:5a:68:6d:f3:10:d1:12:55:57:d2:05:ea:d9:c1:9a:d7
AuthorityKeyId: df:c3:2a:55:2e:2f:42:3a:7a:40:9d:92:a0:f7:47:79:d7:8f:87:8a
Fingerprint (sha1): 16:68:84:9d:8f:35:fd:95:d9:12:da:2e:11:28:ff:8a:e8:fc:f8:d2
Fingerprint (sha256): b2:8f:c8:35:47:17:20:8f:1a:9d:52:22:49:25:2b:34:e5:a0:a4:7b:38:cd:b1:97:a6:aa:77:b4:15:e0:31:17
Revocation information
CRL Distribution Point: http://Enroll.visaca.com/eComm.crlCRL Distribution Point: ldap://Enroll.visaca.com:389/cn=Visa eCommerce Issuing CA,c=US,ou=Visa International Service Association,o=VISA?certificateRevocationList
Check the revocation status for certificate testacs.3dsecure.net
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for testacs.3dsecure.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Key Encipherment
Data Encipherment
Key Agreement
Extended Key Usages
Extensions
6 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name 3dsecure.net
(limited to 100 certificates)
pit.3dsecure.net
testacs.3dsecure.net
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
sl55vstswbp001.visa.com
sni.cloudflaressl.com
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
sni.cloudflaressl.com
dropit.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
mpi1.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
mpi2.3dsecure.net
mpi1.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
sl55vstswbp001.visa.com
visasecuretestsuite.3dsecure.net
mpi2.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net
dropit.3dsecure.net
v3dstestsuite.3dsecure.net
testacs.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
sl55vstswbp001.visa.com
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
sl55vstswbp001.visa.com
sni.cloudflaressl.com
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
sni.cloudflaressl.com
dropit.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
mpi1.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
mpi2.3dsecure.net
mpi1.3dsecure.net
dropit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
sl55vstswbp001.visa.com
visasecuretestsuite.3dsecure.net
mpi2.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net
dropit.3dsecure.net
v3dstestsuite.3dsecure.net
testacs.3dsecure.net
vbvtestsuite.3dsecure.net
v3dstestsuite.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
dropit.3dsecure.net
mpi1.3dsecure.net
pit.3dsecure.net
testacs.3dsecure.net
pit.3dsecure.net
pit.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
mpi2.3dsecure.net
visasecuretestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
vbvtestsuite.3dsecure.net
sl55vstswbp001.visa.com
v3dstestsuite.3dsecure.net
visasecuretestsuite.3dsecure.net
dropit.3dsecure.net
pit.3dsecure.net
Certificate
The complete raw certificate details for testacs.3dsecure.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIQQfgiAqL5+L+EPDTFE8pyCTANBgkqhkiG9w0BAQUFADBx MQswCQYDVQQGEwJVUzENMAsGA1UEChMEVklTQTEvMC0GA1UECxMmVmlzYSBJbnRl cm5hdGlvbmFsIFNlcnZpY2UgQXNzb2NpYXRpb24xIjAgBgNVBAMTGVZpc2EgZUNv bW1lcmNlIElzc3VpbmcgQ0EwHhcNMTQwMzExMDQxOTA0WhcNMTYwMzExMDQxOTA0 WjCBmTEYMBYGA1UEBxMPSGlnaGxhbmRzIFJhbmNoMREwDwYDVQQIEwhDb2xvcmFk bzELMAkGA1UEBhMCVVMxDTALBgNVBAoTBFZJU0ExLzAtBgNVBAsTJlZpc2EgSW50 ZXJuYXRpb25hbCBTZXJ2aWNlIEFzc29jaWF0aW9uMR0wGwYDVQQDExR0ZXN0YWNz LjNkc2VjdXJlLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALQG U7KOKInL0A7SDIRthNsSsOVACA1WJv1byZpleRdF0cwpVN104vIs4yHlgxOB6cWk I8HER8JTjHu+dNFYGxQl6SOyxjfykw11gxtvY6ctcq+jXwUJlLptMRj37RhMkpV0 A7Y9jZQGANyHW2GWSIfcjKWiSVlsDWMJ/heTlvY2IBs52eslj1331EdPFqTZe7GY R9vu4i6nqzIz4G8G5NZ78g0xrk8cFQbu0mMjxw/WIDaW2iAzyTevhg0+Gjnpaly+ b/GcfiIImdGxcVchnrLoULy9nxP8HNLTw4sjfTFJehtdnlETjaz+QR33Z8c+mdqg DKSsVzSNKcmxKBYa7s0CAwEAAaOCAWowggFmMB8GA1UdIwQYMBaAFN/DKlUuL0I6 ekCdkqD3R3nXj4eKMAwGA1UdEwEB/wQCMAAwgcoGA1UdHwSBwjCBvzAooCagJIYi aHR0cDovL0Vucm9sbC52aXNhY2EuY29tL2VDb21tLmNybDCBkqCBj6CBjIaBiWxk YXA6Ly9FbnJvbGwudmlzYWNhLmNvbTozODkvY249VmlzYSBlQ29tbWVyY2UgSXNz dWluZyBDQSxjPVVTLG91PVZpc2EgSW50ZXJuYXRpb25hbCBTZXJ2aWNlIEFzc29j aWF0aW9uLG89VklTQT9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MA4GA1UdDwEB /wQEAwIDODAdBgNVHQ4EFgQU4o0AeFpobfMQ0RJVV9IF6tnBmtcwOQYDVR0gBDIw MDAuBgVngQMBATAlMCMGCCsGAQUFBwIBFhdodHRwOi8vd3d3LnZpc2EuY29tL3Br aTANBgkqhkiG9w0BAQUFAAOCAQEAiu51lt2UETqGzP9G17pnKjz7EbCkoO4qFr6Q ZQiJBlGuZfFxzd+SUsSnET6oaEHUfZbQc54pT/OzM62IuKzooXRM4mouYeEQWsJQ +dntltLnZHajWJ52NBX/fVHJ02DzW9VYuPeyuR2V/ZNEM91MhVtYmtg4ThK6zMiC 0pOixBSPFjOb0gby5EqemBHrLKtd9HjWW5UyfdfFVPHxaib5mTCs3qfXAsIXJho8 m6Zwz9XxX+torJ1eon2OuWXJc034BNWocMy1X940Rcc/3muHHZLp3XFQ5wsJSEw9 ucyD5tGLgPm75B3Uzt/dUlGnAWiOz+jt6FxLrmtuXm2kVEpyLw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAZTso4oicvQDtIMhG2E 2xKw5UAIDVYm/VvJmmV5F0XRzClU3XTi8izjIeWDE4HpxaQjwcRHwlOMe7500Vgb FCXpI7LGN/KTDXWDG29jpy1yr6NfBQmUum0xGPftGEySlXQDtj2NlAYA3IdbYZZI h9yMpaJJWWwNYwn+F5OW9jYgGznZ6yWPXffUR08WpNl7sZhH2+7iLqerMjPgbwbk 1nvyDTGuTxwVBu7SYyPHD9YgNpbaIDPJN6+GDT4aOelqXL5v8Zx+IgiZ0bFxVyGe suhQvL2fE/wc0tPDiyN9MUl6G12eURONrP5BHfdnxz6Z2qAMpKxXNI0pybEoFhru zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 87688199157757786975832473882608693769 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VISA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa International Service Association' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa eCommerce Issuing CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-11 04:19:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-11 04:19:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Highlands Ranch' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VISA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa International Service Association' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testacs.3dsecure.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22726014825907200827978044921385677343459458990667221849382075118092798248818709496920285420066083505387253036718564361404866213911499037931319308989661869869389213312644453139977011933183782329436720336830558946181913524392255974650068489110207972873117997769294716957917271540090313478304341465331103053482686008256057281883647727902138832574484224487874299443614269674639734877169576578717396830791681771371278427885972940117969318762628850800490679441558430959192296357563183869755230483012198184599334453698984493116071429230723426128926220538597535594310797405507875937465216486329653228295975823224020657696461 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dfc32a552e2f423a7a409d92a0f74779d78f878a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (194 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://Enroll.visaca.com/eComm.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://Enroll.visaca.com:389/cn=Visa eCommerce Issuing CA,c=US,ou=Visa International Service Association,o=VISA?certificateRevocationList' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 0338 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e28d00785a686df310d1125557d205ead9c19ad7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.131.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.visa.com/pki' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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