An X.509 Public Key Infrastructure (PKI) is implemented by Visa for issuing and managing digital certificates to be used in conjunction with Visa products and services. This PKI consists of a hierarchy of entities called CAs that issue certificates to “Subscribers” (that is, end-entities or other CAs) within the hierarchy. The term Visa PKI is used to refer to all of the Subscribers from the root CA all the way down to the lowest level end-entity.
This page provides the Visa Developer Platform public certificates used to identify Visa API endpoints.
Environment |
Download Link |
Valid From |
Expiration Date |
| VDP China Production Environment Leaf | api-cn-ochb-ext.visa.cn | 8/9/26 |
2/24/27 |
| VDP Production Environment Leaf | api.visa.com | 8/9/26 |
2/24/27 |
| VDP India Production Environment Leaf | api.visa.co.in | 8/9/26 |
2/24/27 |
| Visa Digital Sandbox Leaf | sandbox.digital.visa.com | 8/10/26 |
2/25/27 |
| VDP Sandbox Environment Leaf | sandbox.api.visa.com | 8/10/26 |
2/25/27 |
| VDP China Production Environment Leaf | api-cn-ochs-ext.visa.cn | 8/10/26 |
2/25/27 |
| VDP Cert Environment Leaf | cert.api.visa.com | 8/10/26 |
2/25/27 |
| VDP China Sandbox Environment Leaf | cert-api-cn-ochb-ext.visa.cn | 8/10/26 |
2/25/27 |
| Visa Digital Production Leaf | digital.visa.com | 8/10/26 |
2/25/27 |
| VDP UK Production Environment Leaf | api.uk.visa.com | 8/11/26 |
2/25/27 |
All Environments |
Download Link |
Valid From |
Expiration Date |
Root Certificate
|
|
11/9/06 |
11/9/31 |
New Root Certificate |
https://cacerts.digicert.com/DigiCertGlobalRootG2.crt.pem
|
08/01/2013 |
01/15/2038 |
UK Production Environment |
02/12/16 |
02/12/41 |
|
| Visa Checkout ECDSA Root Certificate | sslTLSTransitECCCAR2.pem | 10/21/2022 | 10/17/2037 |
| Click to Pay/Visa Checkout Root Certificate | Secure Checkout Root Certificate | 06/20/2024 | 12/31/2028 |
All Environments |
Download Link |
Valid From |
Expiration Date |
| Intermediate Certificate |
DigiCertSHA2SecureServerCA-2.crt.pem | 09/22/20 | 09/22/30 |
New Intermediate Certificate |
https://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt.pem
|
03/29/2021 |
03/29/2031 |
UK Production Environment |
02/12/16 |
02/12/31 |
Visa Developer Platform’s best practice recommendation is to only inspect and trust our root certificate. Our leaf certificate information below is for reference and completion only.
Environment |
Download Link |
Valid From |
Expiration Date |
UK Production Environment |
10/14/2025 |
10/14/2026 |
|
VDP India Production Environment Leaf Certificate (New CA – Digicert Global G2) |
api.visa.co.in_NewCA | 10/28/2025 |
10/28/2026 |
VDP Production Environment Leaf |
10/28/2025 |
10/28/2026 |
|
VDP Sandbox Environment Leaf |
10/29/2025 |
10/29/2026 |
Environment |
Download Link |
Valid From |
Expiration Date |
Click to Pay/Visa Checkout Intermediate Certificate |
10/31/2023 |
10/28/2033 |
|
| Visa Checkout ECDSA Intermediate Certificate | 10/31/2023 | 10/28/2033 |
Environment |
Download Link |
Valid From |
Expiration Date |
|
|
10/28/2025 |
10/28/2026 |
|
Visa Digital Production |
|
10/28/2025 |
10/28/2026 |