An X.509 Public Key Infrastructure (PKI) is implemented by Visa for issuing and managing digital certificates to be used in conjunction with Visa products and services. This PKI consists of a hierarchy of entities called CAs that issue certificates to “Subscribers” (that is, end-entities or other CAs) within the hierarchy. The term Visa PKI is used to refer to all of the Subscribers from the root CA all the way down to the lowest level end-entity.
This page provides the Visa Developer Platform public certificates used to identify Visa API endpoints.
Environment |
Download Link |
Valid From |
Expiration Date |
| Visa Checkout ECDSA Intermediate Certificate | 10/31/2023 | 10/28/2033 |
|
| Visa Checkout ECDSA Root Certificate | sslTLSTransitECCCAR2.pem | 10/21/2022 | 10/17/2037 |
| Visa Digital Sandbox | sandbox.digital.visa.com | 07/21/2025 | 4/14/2026 |
| Visa Digital Production | digital.visa.com | 07/21/2025 |
4/14/2026 |
| Click to Pay/Visa Checkout Root Certificate | Secure Checkout Root Certificate | 06/20/2024 | 12/31/2028 |
| VDP India Production Environment Leaf Certificate (DigiCert SHA2 CA) | api.visa.co.in | 10/13/2025 |
4/14/2026 |
VDP India Production Environment Leaf Certificate (New CA – Digicert Global G2) |
api.visa.co.in_NewCA | 10/28/2025 |
10/28/2026 |
VDP Production Environment Leaf |
10/28/2025 |
10/28/2026 |
|
VDP Sandbox Environment Leaf |
10/29/2025 |
10/29/2026 |
|
UK Production Environment |
10/14/2025 |
10/14/2026 |
All Environments |
Download Link |
Valid From |
Expiration Date |
Root Certificate
|
|
11/9/06 |
11/9/31 |
New Root Certificate |
https://cacerts.digicert.com/DigiCertGlobalRootG2.crt.pem
|
08/01/2013 |
01/15/2038 |
UK Production Environment |
02/12/16 |
02/12/41 |
All Environments |
Download Link |
Valid From |
Expiration Date |
| Intermediate Certificate |
DigiCertSHA2SecureServerCA-2.crt.pem | 09/22/20 | 09/22/30 |
New Intermediate Certificate |
https://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt.pem
|
03/29/2021 |
03/29/2031 |
UK Production Environment |
02/12/16 |
02/12/31 |
Visa Developer Platform’s best practice recommendation is to only inspect and trust our root certificate. Our leaf certificate information below is for reference and completion only.
Environment |
Download Link |
Valid From |
Expiration Date |
| Production Environment | api.visa.com | 03/04/2025 | 03/04/2026 |
| Sandbox and Certification Environments | *.api.visa.com | 03/04/2025 | 03/04/2026 |
Singapore Production Environment |
01/08/2025 |
01/08/2026 |
|
| India Production Environment | api.visa.co.in | 01/10/2025 | 01/11/2026 |
UK Production Environment |
01/08/2025 |
01/08/2026 |
Environment |
Download Link |
Valid From |
Expiration Date |
Click to Pay/Visa Checkout Production Leaf Certificate |
9/9/2024 |
9/9/2025 |
|
Click to Pay/Visa Checkout Sandbox Leaf Certificate |
9/9/2024 |
9/9/2025 |
|
Click to Pay/Visa Checkout Intermediate Certificate |
10/31/2023 |
10/28/2033 |
|
Click to Pay/Visa Checkout Root Certificate |
07/28/21 |
05/12/25 |
Environment |
Download Link |
Valid From |
Expiration Date |
|
|
10/28/2025 |
10/28/2026 |
|
Visa Digital Production |
|
10/28/2025 |
10/28/2026 |