InstacomPay Public Keys

This section shares the two public keys used by InstacomPay for the two environments (Sandbox and Production). The keys can be copied and stored as files to later be used in transaction processing.

The InstacomPay public key serves two critical purposes as briefly described below.

Purpose	Description
RSA Signature Verification	Callbacks from InstacomPay carry a header named rsa-signature and with the public key, the signature can be verified as described here to confirm authenticity.
Card details encryption	When the merchant opts for the direct card payment option, the public key is used to encrypt the card details as described in this section

Sandbox Public Key

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

Production Public Key

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvgtv7n639TSlxd9OfvI5
hnQm/7TIctbosc6Gwv2ZIW+lpCqdN8pUb++479QujcN9EYeTpyQhM4o1eKfwNQa3
PhFIpNEfQSvd9HGE4171jO9cNNOMpTOjvaT1E9KteKF8VsBysfnAOGNkTkhdZlmn
EW+dAnuPZYBDMPasfJeEh1OeomOtan7zwPrBkzmlPQAeuTvqMTu/RktTZQQek4LS
/oHP599mhwbzdLv0sllTa1T4CK7TLZW8kQ2S/Sa2lsjY0KdeO6izohNSz6UVdjKG
Qtt5HqvwYU6DG7PVmyjbaXyFd+NYXZDjYqAJnEXkgrySUob95JTAZX1u9OAHyQ4b
sm1hWIqJQnIsuOixVybfLy1bY0mM46YSdZ9GyCIakoXBx6TnHqDDVFuGJumKNpXS
/9nsPHPM31KKpge6CRDL9U+WHzVpV4IbaP3OOEw/Nxoh5lj2ftb8PiqQ1GRh4nda
Pt1gifLHVnjsUOuUZ2kGre7c8+GwowUXHQ5HmgdxU++aDea49lyTnBhHCYmHUo/e
ywIFaKuO0cM4v1dTypid/DoBt/cCeIBUVWO72okXzW1hytOGDZ6ts5bB9DK+7Ej5
SqzcmrdbT+B2te6EcawAmknOhZb6b42j1jh6vbGAjeh3DNwbnBv2FirRFvZ1zKTr
C6x/JyPRm+0uDngi1Q3Fz0sCAwEAAQ==
-----END PUBLIC KEY-----

We recommend that for each environment you're working with, the key content is copied and stored in your workflow based on how you see fit. In this documentation however, we will assume the content is stored in a file named instacompay.public.key.pem and referenced from there for all described usage.