Credential format - SD-JWT
- The PID is issued in the format defined in the ARF Annex 6, with the changes from ARF PR 160 applied.
- SD-JWT VC Draft 11 is used:
- Use of a test root certificate used for credential signing. The root certificate is available on the main page. The chain is written to the x5c header.
- The signing key is also made available at the jwt-vc-issuer well-known endpoint for web based key resolution. Transfer of the jwt-vc-issuer metadata is secured by a browser validatable TLS certificate used for displaying this technical details page as well.
- SD-JWT Final (RFC 9901) is used:
- The compact serialization is used.
- Recursive disclosures are used.
- The leaf elements in the JSON tree are made selectively disclosable.
- Array element disclosures are used.
Create a sample PID
To create a sample SD-JWT PID perform the following steps:
- Open the manual and select: Issuance → SD-JWT VC issuance ... → Single
- Extract the base64 encoded credential from the response
- Decode the credential in a SD-JWT debugger
Info
The manual shows raw SD-JWT VCs in compact serialization form.
These raw SD-JWT VCs are generated during local testing, and therefore the issuer is set to localhost instead of the actual production URL.