Generate CSR
Makes a certificate signing request (CSR) for a key: the key store signs it, and the wallet stores it. Send the CSR to your CA, then upload the issued chain with [Upload certificate chain](/docs/openid4vc-api/config-digital-wallet-open-id-upload-certificate-chain). For development and testing, [Create test certificate](/docs/openid4vc-api/config-digital-wallet-open-id-create-test-certificate) does both steps with the built-in test CA.
Upload certificate chain
Stores a certificate chain on a key, usually the chain that a CA issued for a CSR of [Generate CSR](/docs/openid4vc-api/config-digital-wallet-open-id-generate-csr). The key then has `x5c` and can sign with `cryptographicKeyFormat` `x509`. A chain that the key already has is replaced.
Delete certificate chain
Removes the certificate chain of a key. Send the body `{'confirm': 'DELETE'}`. The key then has no `x5c`, `x5t` and `x5t#S256`, and cannot sign with `cryptographicKeyFormat` `x509` until it gets a new chain from [Upload certificate chain](/docs/openid4vc-api/config-digital-wallet-open-id-upload-certificate-chain) or [Create test certificate](/docs/openid4vc-api/config-digital-wallet-open-id-create-test-certificate).
List certificate presets
Lists the certificate presets. A certificate preset is a template of the platform for a CSR that targets one certificate profile: the values that the profile fixes (key usage, extended key usage, certificate policies, QC statements), the fields that a request must give, the longest validity, and a prefill from the data of the organisation. Give its `id` in `preset` of [Generate CSR](/docs/openid4vc-api/config-digital-wallet-open-id-generate-csr) or [Create test certificate](/docs/openid4vc-api/config-digital-wallet-open-id-create-test-certificate).