how to convert the DigiCert Global Root CA certificate from Binary format to Base64 format

[Kudo]

Hi i new to the developer center and i would please need some help with this.

I have downloaded all the certificate and keys required but the next is what i am confused about. Where do i get this done? Posted below. Thanks

How to convert the DigiCert Global Root CA certificate from Binary format to Base64 format.

Place your private key file (for example: privateKey.pem and your certificate file from VDP (for example: cert.pem in the same directory. Generate a keystore (for example: myProject_keyAndCertBundle.p12) file as shown below. 

[jenn_kh]

Thank you for reaching out, @Kudo! Our agent is looking into this and will get back to you shortly. Until then, if any community members know the solution, feel free share it here. -Jenn

[API_Products · Accepted solution]

Hi @Kudo,

Please refer to the Two-Way SSL guide here: https://developer.visa.com/pages/working-with-visa-apis/two-way-ssl  

You can scroll down to the DigiCert CA Certificate section for information.

I've also copied and pasted the information below for you to take a look at.

DigiCert CA Certificate

---

The DigiCert Global Root CA certificate is available for download at https://dl.cacerts.digicert.com/DigiCertGlobalRootCA.crt.

Once downloaded, you will need to convert the DigiCert Global Root CA certificate from Binary format to Base64 format. You can do this by using one of the following methods:

OpenSSL

openssl x509 -inform der -in DigiCertGlobalRootCA.crt -outform pem -out DigiCertGlobalRootCA.pem

Windows Certificate Management

1. Double-click on the DigiCertGlobalRootCA.crt file to open it into the certificate display.
2. Select the Details tab, then select the Copy to file button.
3. Click Next on the Certificate Wizard.
4. Select Base-64 encoded X.509 (.CER), then Next.
5. Select Browse (to locate a destination) and type in the filename DigiCertGlobalRootCA.
6. Click Save. You now have the file DigiCertGlobalRootCA.cer

The following sections explain how to obtain a private key, client certificate, and certificate authority root certificate. You will also learn about how to bundle the certificates into keystores, using Java keytool or OpenSSL.

In order to obtain a valid client certificate from Visa Developer, you must submit a Certificate Signing Request (CSR). The CSR file contains client registration details (such as Organization Name and Locality), as well as the public key from the client. The process of creating the CSR yields the CSR file itself and also a private key (which corresponds to a public key, which is encoded into the CSR file). There are multiple tools that you can use to create a CSR, such as Java keytool or OpenSSL. Both tools are available for free to download from the Internet for all major operating systems.

Refer to one of the following sections on how to obtain a Two-Way SSL certificate.

• Configuring a Two-Way SSL Keystore Using an Auto-generated CSR
• Configuring Two-Way SSL Keystore Using Your Own CSR