Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Mar 07, 2025 - 16:11 EST
Scheduled
Visa will be updating a set of staging and production leaf certificates that are set to expire on May 02, 2025. To prevent disruption to services, we ask that you review your configuration immediately.
The Leaf certificates that are expiring may be in use by VCAS to your endpoint as part of the mutual TLS (MTLS) handshake for RDX, ADX, or Oauth connections.
Please review the certs below to see if they are in use with your VCAS connection.
The expiring STAGING leaf certificate details:
Common Name (CN): rdxstag.cardinalcommerce.com Serial Number: 0a86c117a3fef467682b740deef86f1c Date of Replacement: March 18, 2025 10:00 EDT Date of Expiry: May 02, 2025 18:59:59 EDT
The new STAGING leaf certificate details:
Common Name (CN): rdxstag.cardinalcommerce.com Serial Number: 0dd1c3f351d61449b0702f5ec0d14a47 Date of Replacement: March 18, 2025 10:00 EDT Date of Expiry: March 28, 2026 18:59:50 EDT
The expiring PRODUCTION leaf certificate details:
Common Name (CN): rdx.cardinalcommerce.com Serial Number: 07ec4a5fc0d1c1049a1590b7d4788719 Date of Replacement: April 22, 2025 10:00 EDT Date of Expiry: May 02, 2025 18:59:59 EDT
The new PRODUCTION leaf certificate details:
Common Name (CN): rdx.cardinalcommerce.com Serial Number: 0ead8d09102f51d80fb614eec175f0a1 Date of Replacement: April 22, 2025 10:00 EDT Date of Expiry: April 3, 2026 18:59:59 EDT
The Intermediate CA and Root CA will remain the same:
Intermediate Certificate Details: Common Name (CN): DigiCert Global G2 TLS RSA SHA256 2020 CA1 Serial Number: 0cf5bd062b5602f47ab8502c23ccf066
Root Certificate Details: Common Name (CN): DigiCert Global Root G2 Serial Number: 033af1e6a711a9a0bb2864b11d09fae5
Customer Responsibilities:
-If you trust on the leaf certificate, we will have to coordinate the switchover with your connection. Please contact your local VCAS support and/or account manager to coordinate this change.
-If you require coordination, we will schedule a time to switch over the leaf certificate. It is imperative that the migration occur before certificate expiration, otherwise RDX services will be impacted.
Testing – How can I test these changes?
Customers are encouraged to work with their network teams to ensure they can support the updated certificates.
No new parameters or fields are required for these changes. If you do not trust the new certificate, you will be unable to connect to Cardinal endpoints receiving a connection timeout or certificate error response.
Please do not hesitate to contact your Local VISA support if you have any questions or concerns. Please refer to the knowledge article titled "DigiCert MTLS RDX Certificate Update" for the full cert chain. You may also contact support or your account manager if you require the full Cert Chain.