---
id: config-digital-wallet-open-id-list-certificate-presets
title: "List certificate presets"
description: "Lists the certificate presets. A preset is a certificate profile of the ecosystem: the values that the profile fixes (key usage, extended key usage and their criticality, certificate policies, QC statements), the fields that a request must have, the longest validity, and the prefill from the data of the organisation. Give the `preset` in the generate CSR and the create test certificate operations."
sidebar_label: "List certificate presets"
hide_title: true
hide_table_of_contents: true
api: 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
sidebar_class_name: "get api-method"
info_path: docs/openid4vc-api/igrant-io-api-documentation
custom_edit_url: null
---

> **Build this with an AI coding agent.** Install the iGrant.io Agent Skills, then ask your agent to build the integration:
>
> ```bash
> npx skills add L3-iGrant/skills
> ```


import ApiTabs from "@theme/ApiTabs";
import DiscriminatorTabs from "@theme/DiscriminatorTabs";
import MethodEndpoint from "@theme/ApiExplorer/MethodEndpoint";
import SecuritySchemes from "@theme/ApiExplorer/SecuritySchemes";
import MimeTabs from "@theme/MimeTabs";
import ParamsItem from "@theme/ParamsItem";
import ResponseSamples from "@theme/ResponseSamples";
import SchemaItem from "@theme/SchemaItem";
import SchemaTabs from "@theme/SchemaTabs";
import Markdown from "@theme/Markdown";
import OperationTabs from "@theme/OperationTabs";
import TabItem from "@theme/TabItem";

<h1 className={"openapi__heading"}>List certificate presets</h1>

<MethodEndpoint method={"get"} path={"/v2/config/digital-wallet/openid/key-management/certificate-presets"}></MethodEndpoint>



Lists the certificate presets. A preset is a certificate profile of the ecosystem: the values that the profile fixes (key usage, extended key usage and their criticality, certificate policies, QC statements), the fields that a request must have, the longest validity, and the prefill from the data of the organisation. Give the `preset` in the generate CSR and the create test certificate operations.

The presets, in this order: `wrpac-legal`, `wrpac-natural`, `pid-provider`, `wallet-provider`, `wallet-status-list-signer`, `eaa-provider`, `qeaa-provider`, `pub-eaa-provider`, `mdoc-document-signer`, `mdoc-reader`, `mdoc-status-list-signer`, `status-list-signer`, `credential-issuer`, `request-signer-san-dns` and `custom` (no fixed values, always last). `sources` of each preset names the standards and the clauses of its fixed values, and `testCaDomain` names the test root that issues its test certificates.

`testCaEnabled` shows if the built-in test CA of the installation is on. When it is `false`, the create test certificate operation and the test CA operations answer `403`, so do not offer a test certificate. A sandbox organisation gets the presets of its main organisation.


<div><div><ApiTabs label={undefined} id={undefined}><TabItem label={"200"} value={"200"}><div>

The service returned the presets.

</div><details style={{"textAlign":"left","marginBottom":"1rem"}} className={"openapi-markdown__details"} data-collaposed={true} open={false}><summary style={{}}><strong>Response Headers</strong></summary><ul style={{"marginLeft":"1rem"}}></ul></details><div><MimeTabs className={"openapi-tabs__mime"} schemaType={"response"}><TabItem label={"application/json"} value={"application/json"}><SchemaTabs className={"openapi-tabs__schema"}><TabItem label={"Schema"} value={"Schema"}><details style={{}} className={"openapi-markdown__details response"} data-collapsed={false} open={true}><summary style={{}} className={"openapi-markdown__details-summary-response"}><strong>Schema</strong></summary><div style={{"textAlign":"left","marginLeft":"1rem"}}></div><ul style={{"marginLeft":"1rem"}}><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>presets</strong><span className={"openapi-schema__name"}> object[]</span><span className={"openapi-schema__divider"}></span><span className={"openapi-schema__required"}>required</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The presets, with `custom` last.

</div><li><div style={{"fontSize":"var(--ifm-code-font-size)","opacity":"0.6","marginLeft":"-.5rem","paddingBottom":".5rem"}}>Array [</div></li><SchemaItem collapsible={false} name={"id"} required={true} schemaName={"string"} qualifierMessage={"**Possible values:** [`wrpac-legal`, `wrpac-natural`, `pid-provider`, `wallet-provider`, `wallet-status-list-signer`, `eaa-provider`, `qeaa-provider`, `pub-eaa-provider`, `mdoc-document-signer`, `mdoc-reader`, `mdoc-status-list-signer`, `status-list-signer`, `credential-issuer`, `request-signer-san-dns`, `custom`]"} schema={{"type":"string","description":"The preset id, the value of `preset` in a CsrRequest.","enum":["wrpac-legal","wrpac-natural","pid-provider","wallet-provider","wallet-status-list-signer","eaa-provider","qeaa-provider","pub-eaa-provider","mdoc-document-signer","mdoc-reader","mdoc-status-list-signer","status-list-signer","credential-issuer","request-signer-san-dns","custom"],"example":"mdoc-document-signer"}}></SchemaItem><SchemaItem collapsible={false} name={"name"} required={true} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","description":"The name of the preset, for a person.","example":"mdoc Document Signer (ISO/IEC 18013-5)"}}></SchemaItem><SchemaItem collapsible={false} name={"description"} required={true} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","description":"What the certificate is and who issues it, for a person.","example":"Document signer certificate of ISO/IEC 18013-5 Table B.3, issued by an IACA. The C is the issuing_country of the mdoc and the C of the IACA; the ST, if the IACA has one, is the issuing_jurisdiction. ISO/IEC 23220-4 recommends the EKU 1.0.23220.4.1.2 in addition."}}></SchemaItem><SchemaItem collapsible={false} name={"purpose"} required={true} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","description":"What a key with this certificate signs, for a person.","example":"Signs the mdoc MSO (issuerAuth)."}}></SchemaItem><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>fixed</strong><span className={"openapi-schema__name"}> object</span><span className={"openapi-schema__divider"}></span><span className={"openapi-schema__required"}>required</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The values that the profile fixes, in the form of a CsrRequest. A value of a request that is not the fixed value gives the warning `preset-override`.

</div><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>keyUsage</strong><span className={"openapi-schema__name"}> object</span><span className={"openapi-schema__divider"}></span><span className={"openapi-schema__nullable"}>nullable</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The key usage extension. The keys are EC keys, so `keyEncipherment` and `dataEncipherment` are not allowed (RFC 5480 section 3). A leaf certificate has no CA key usage (`keyCertSign`, `cRLSign`).

</div><SchemaItem collapsible={false} name={"values"} required={true} schemaName={"string[]"} qualifierMessage={"**Possible values:** [`digitalSignature`, `nonRepudiation`, `keyAgreement`], `>= 1`"} schema={{"type":"array","minItems":1,"description":"The key usages, each one time.","example":["digitalSignature"],"items":{"type":"string","description":"One key usage by its X.509 name.","enum":["digitalSignature","nonRepudiation","keyAgreement"]}}}></SchemaItem><SchemaItem collapsible={false} name={"critical"} required={false} schemaName={"boolean"} qualifierMessage={undefined} schema={{"type":"boolean","nullable":true,"description":"`true`: the extension is critical. Without a value, the criticality of the preset applies (`true` when the preset fixes none).","example":true}}></SchemaItem></div></details></SchemaItem><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>extendedKeyUsage</strong><span className={"openapi-schema__name"}> object</span><span className={"openapi-schema__divider"}></span><span className={"openapi-schema__nullable"}>nullable</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The extended key usage extension.

</div><SchemaItem collapsible={false} name={"values"} required={true} schemaName={"string[]"} qualifierMessage={"**Possible values:** `>= 1`"} schema={{"type":"array","minItems":1,"description":"The key purposes as OIDs in dotted form, at most 20, each one time. For example `1.0.18013.5.1.2` (ISO/IEC 18013-5 mdoc Document Signer), `1.0.18013.5.1.6` (ISO/IEC 18013-5 reader authentication) or `1.3.6.1.5.5.7.3.45` (Token Status List signer).","example":["1.0.18013.5.1.2"],"items":{"type":"string","description":"One OID in dotted form."}}}></SchemaItem><SchemaItem collapsible={false} name={"critical"} required={false} schemaName={"boolean"} qualifierMessage={undefined} schema={{"type":"boolean","nullable":true,"description":"`true`: the extension is critical. Without a value, the criticality of the preset applies (`false` when the preset fixes none).","example":true}}></SchemaItem></div></details></SchemaItem><SchemaItem collapsible={false} name={"certificatePolicies"} required={true} schemaName={"string[]"} qualifierMessage={undefined} schema={{"type":"array","description":"The certificate policies. An empty list when the preset fixes none. The CA can add its own policy.","items":{"type":"string","description":"One OID in dotted form."},"example":[]}}></SchemaItem><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>qcStatements</strong><span className={"openapi-schema__name"}> object</span><span className={"openapi-schema__divider"}></span><span className={"openapi-schema__required"}>required</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The QC statements. `null` for a statement that the preset does not fix.

</div><SchemaItem collapsible={false} name={"qcType"} required={true} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","nullable":true,"description":"The QcType, one OID in dotted form. `null` when the preset fixes none.","example":"0.4.0.1862.1.6.2"}}></SchemaItem><SchemaItem collapsible={false} name={"qcCompliance"} required={true} schemaName={"boolean"} qualifierMessage={undefined} schema={{"type":"boolean","nullable":true,"description":"`true`: the profile needs the QcCompliance statement (`0.4.0.1862.1.1`). `null` when the preset does not fix it.","example":true}}></SchemaItem><SchemaItem collapsible={false} name={"qcSscd"} required={true} schemaName={"boolean"} qualifierMessage={undefined} schema={{"type":"boolean","nullable":true,"description":"`true`: the profile needs the QcSSCD statement (`0.4.0.1862.1.4`). `null` when the preset does not fix it.","example":true}}></SchemaItem><SchemaItem collapsible={false} name={"qcPsb"} required={true} schemaName={"boolean"} qualifierMessage={undefined} schema={{"type":"boolean","nullable":true,"description":"`true`: the profile needs the QcPSB statement (`0.4.0.194126.1.3`, ETSI TS 119 412-6 clause 8.3), and the request gives its values (`qcStatements.qcPsb` of the CsrRequest). `null` for the other presets.","example":null}}></SchemaItem></div></details></SchemaItem></div></details></SchemaItem><SchemaItem collapsible={false} name={"required"} required={true} schemaName={"string[]"} qualifierMessage={undefined} schema={{"type":"array","description":"The fields that a request with this preset must have, as paths (for example `subject.commonName`). An entry with `|` needs at least one of its paths, for example `subjectAltName.uri|subjectAltName.email|subjectAltName.phone`.","items":{"type":"string","description":"One field path."},"example":["subject.country","subject.commonName"]}}></SchemaItem><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>prefill</strong><span className={"openapi-schema__name"}> object</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The values of a certificate signing request (CSR). With a `preset`, a member that the request does not give takes the prefill and the fixed values of the preset (the list certificate presets operation). A value that is not the fixed value of the preset gives the warning `preset-override`, not an error, and the request value applies. Without a preset, the request is `custom`. The extensions of the CSR are a request: the Certificate Authority (CA) decides what goes into the certificate.

</div><SchemaItem collapsible={false} name={"preset"} required={false} schemaName={"string"} qualifierMessage={"**Possible values:** [`wrpac-legal`, `wrpac-natural`, `pid-provider`, `wallet-provider`, `wallet-status-list-signer`, `eaa-provider`, `qeaa-provider`, `pub-eaa-provider`, `mdoc-document-signer`, `mdoc-reader`, `mdoc-status-list-signer`, `status-list-signer`, `credential-issuer`, `request-signer-san-dns`, `custom`, `null`]"} schema={{"type":"string","nullable":true,"description":"The id of a preset of the list certificate presets operation. An unknown id gives `400` (`preset: unknown preset; use one of <the preset ids>`).","enum":["wrpac-legal","wrpac-natural","pid-provider","wallet-provider","wallet-status-list-signer","eaa-provider","qeaa-provider","pub-eaa-provider","mdoc-document-signer","mdoc-reader","mdoc-status-list-signer","status-list-signer","credential-issuer","request-signer-san-dns","custom",null],"example":"mdoc-document-signer"}}></SchemaItem><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>subject</strong><span className={"openapi-schema__name"}> object</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The subject of the certificate. Each attribute has one value. An attribute that the request does not give takes the prefill of the preset. `null` is no value. The wallet encodes the subject in X.500 order, from the country to the common name. The subject has no `emailAddress`: put the email address in `subjectAltName.email`.

</div><SchemaItem collapsible={false} name={"country"} required={false} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","nullable":true,"description":"Country (C), an ISO 3166-1 alpha-2 code in upper case. In an identifier, Greece is `EL`. For an mdoc Document Signer, the country of the issuing authority (the mdoc `issuing_country`) and the country of the IACA root.","example":"SE"}}></SchemaItem><SchemaItem collapsible={false} name={"stateOrProvince"} required={false} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","nullable":true,"description":"State or province (ST), at most 128 characters. For an mdoc Document Signer, the `issuing_jurisdiction` when the IACA root has one.","example":null}}></SchemaItem><SchemaItem collapsible={false} name={"locality"} required={false} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","nullable":true,"description":"Locality (L), at most 128 characters.","example":null}}></SchemaItem><SchemaItem collapsible={false} name={"organization"} required={false} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","nullable":true,"description":"Organisation (O), the registered name of the organisation, at most 256 characters.","example":"Example AB"}}></SchemaItem><SchemaItem collapsible={false} name={"organizationalUnit"} required={false} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","nullable":true,"description":"Organisational unit (OU), at most 64 characters. Some Certificate Authorities put the identifier that they gave the organisation here.","example":null}}></SchemaItem><SchemaItem collapsible={false} name={"commonName"} required={false} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","nullable":true,"description":"Common name (CN), at most 64 characters. Use the name of the organisation or of the service. Every preset requires it.","example":"Example AB Document Signer"}}></SchemaItem><SchemaItem collapsible={false} name={"organizationIdentifier"} required={false} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","nullable":true,"description":"Organisation identifier, at most 128 characters. For a preset with `etsiSyntax` `true`, it has the syntax of ETSI EN 319 412-1 clause 5.1.4, for example `VATSE-556677889901` (the type `VAT`, `NTR`, `PSD`, `LEI`, `EOR` or `EXC`, the country code, `-` and the identifier).","example":"VATSE-556677889901"}}></SchemaItem><SchemaItem collapsible={false} name={"serialNumber"} required={false} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","nullable":true,"description":"Serial number of a natural person, at most 64 characters of an ASN.1 PrintableString. For a preset with `etsiSyntax` `true`, it has the syntax of ETSI EN 319 412-1 clause 5.1.3, for example `TINSE-1234567890` (the type `PAS`, `IDC`, `PNO`, `TIN` or `EID`, the country code, `-` and the identifier).","example":null}}></SchemaItem><SchemaItem collapsible={false} name={"givenName"} required={false} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","nullable":true,"description":"Given name of a natural person, at most 128 characters.","example":null}}></SchemaItem><SchemaItem collapsible={false} name={"surname"} required={false} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","nullable":true,"description":"Surname of a natural person, at most 128 characters.","example":null}}></SchemaItem></div></details></SchemaItem><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>subjectAltName</strong><span className={"openapi-schema__name"}> object</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The subject alternative names of the certificate, at most 50 values of each type. A type that the request does not give takes the prefill of the preset. The wallet checks the format of each value and refuses a repeated value.

</div><SchemaItem collapsible={false} name={"dns"} required={false} schemaName={"string[]"} qualifierMessage={undefined} schema={{"type":"array","nullable":true,"description":"DNS names (dNSName). A host name, without an IP address. The first label can be `*`. Give an international name in the A-label form. The `x509_san_dns` client identifier prefix of OpenID4VP needs the host of the verifier here.","example":["wallet.example.com"],"items":{"type":"string","description":"One DNS name."}}}></SchemaItem><SchemaItem collapsible={false} name={"uri"} required={false} schemaName={"string[]"} qualifierMessage={undefined} schema={{"type":"array","nullable":true,"description":"URIs (uniformResourceIdentifier). An absolute URI with a scheme, at most 2048 characters, for example the support website of a relying party access certificate.","example":[],"items":{"type":"string","description":"One URI."}}}></SchemaItem><SchemaItem collapsible={false} name={"email"} required={false} schemaName={"string[]"} qualifierMessage={undefined} schema={{"type":"array","nullable":true,"description":"Email addresses (rfc822Name), in the form `local-part@domain`.","example":[],"items":{"type":"string","description":"One email address."}}}></SchemaItem><SchemaItem collapsible={false} name={"phone"} required={false} schemaName={"string[]"} qualifierMessage={undefined} schema={{"type":"array","nullable":true,"description":"Telephone numbers in the international form of ITU-T E.123, for example `+46 8 123 456 78`.","example":[],"items":{"type":"string","description":"One telephone number."}}}></SchemaItem></div></details></SchemaItem><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>keyUsage</strong><span className={"openapi-schema__name"}> object</span><span className={"openapi-schema__divider"}></span><span className={"openapi-schema__nullable"}>nullable</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The key usage extension. `null` is no key usage extension.

</div><SchemaItem collapsible={false} name={"values"} required={true} schemaName={"string[]"} qualifierMessage={"**Possible values:** [`digitalSignature`, `nonRepudiation`, `keyAgreement`], `>= 1`"} schema={{"type":"array","minItems":1,"description":"The key usages, each one time.","example":["digitalSignature"],"items":{"type":"string","description":"One key usage by its X.509 name.","enum":["digitalSignature","nonRepudiation","keyAgreement"]}}}></SchemaItem><SchemaItem collapsible={false} name={"critical"} required={false} schemaName={"boolean"} qualifierMessage={undefined} schema={{"type":"boolean","nullable":true,"description":"`true`: the extension is critical. Without a value, the criticality of the preset applies (`true` when the preset fixes none).","example":true}}></SchemaItem></div></details></SchemaItem><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>extendedKeyUsage</strong><span className={"openapi-schema__name"}> object</span><span className={"openapi-schema__divider"}></span><span className={"openapi-schema__nullable"}>nullable</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The extended key usage extension. `null` is no extended key usage extension.

</div><SchemaItem collapsible={false} name={"values"} required={true} schemaName={"string[]"} qualifierMessage={"**Possible values:** `>= 1`"} schema={{"type":"array","minItems":1,"description":"The key purposes as OIDs in dotted form, at most 20, each one time. For example `1.0.18013.5.1.2` (ISO/IEC 18013-5 mdoc Document Signer), `1.0.18013.5.1.6` (ISO/IEC 18013-5 reader authentication) or `1.3.6.1.5.5.7.3.45` (Token Status List signer).","example":["1.0.18013.5.1.2"],"items":{"type":"string","description":"One OID in dotted form."}}}></SchemaItem><SchemaItem collapsible={false} name={"critical"} required={false} schemaName={"boolean"} qualifierMessage={undefined} schema={{"type":"boolean","nullable":true,"description":"`true`: the extension is critical. Without a value, the criticality of the preset applies (`false` when the preset fixes none).","example":true}}></SchemaItem></div></details></SchemaItem><SchemaItem collapsible={false} name={"certificatePolicies"} required={false} schemaName={"string[]"} qualifierMessage={undefined} schema={{"type":"array","nullable":true,"description":"The certificate policies as OIDs in dotted form, at most 20, each one time. For example `0.4.0.194118.1.2` (NCP-l-eudiwrp, ETSI TS 119 411-8).","example":[],"items":{"type":"string","description":"One OID in dotted form."}}}></SchemaItem><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>qcStatements</strong><span className={"openapi-schema__name"}> object</span><span className={"openapi-schema__divider"}></span><span className={"openapi-schema__nullable"}>nullable</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The QC statements of ETSI EN 319 412-5 and the QcPSB statement of ETSI TS 119 412-6. `null` is no QC statement.

</div><SchemaItem collapsible={false} name={"qcType"} required={false} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","nullable":true,"description":"The QcType, one OID in dotted form (QcType has one value). For example `0.4.0.194126.1.1` (PID provider), `0.4.0.194126.1.2` (wallet provider) or `0.4.0.1862.1.6.2` (electronic seal).","example":null}}></SchemaItem><SchemaItem collapsible={false} name={"qcCompliance"} required={false} schemaName={"boolean"} qualifierMessage={undefined} schema={{"type":"boolean","nullable":true,"description":"`true`: the QcCompliance statement (`0.4.0.1862.1.1`), an EU qualified certificate.","example":null}}></SchemaItem><SchemaItem collapsible={false} name={"qcSscd"} required={false} schemaName={"boolean"} qualifierMessage={undefined} schema={{"type":"boolean","nullable":true,"description":"`true`: the QcSSCD statement (`0.4.0.1862.1.4`), the private key is in a qualified signature or seal creation device (QSCD).","example":null}}></SchemaItem><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>qcPsb</strong><span className={"openapi-schema__name"}> object</span><span className={"openapi-schema__divider"}></span><span className={"openapi-schema__nullable"}>nullable</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The QcPSB statement (`0.4.0.194126.1.3`) of a PuB-EAA provider, with all three values. `null` is no QcPSB statement; with the preset `pub-eaa-provider`, `null` gives the warning `preset-override`.

</div><SchemaItem collapsible={false} name={"countryOfLegislation"} required={true} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","description":"The country of the law, an ISO 3166-1 alpha-2 code, or `EU` for European Union law (ETSI TS 119 412-6 PSB-8.3-05). A PrintableString of two characters in the certificate.","example":"SE"}}></SchemaItem><SchemaItem collapsible={false} name={"authSourceIdentification"} required={true} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","description":"The unambiguous identification of the authentic source (PSB-8.3-04), for example a list of relative distinguished names. At most 2048 characters, no control character.","example":"cn=Example Register,o=Example AB,c=SE"}}></SchemaItem><SchemaItem collapsible={false} name={"legislationIdentification"} required={true} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","description":"The identification of the law under which the public sector body is responsible for the authentic source (PSB-8.3-02). Use a URI (RFC 3986) when one exists (PSB-8.3-03). At most 2048 characters, no control character.","example":"https://www.example.se/law/2026-123"}}></SchemaItem></div></details></SchemaItem></div></details></SchemaItem></div></details></SchemaItem><SchemaItem collapsible={false} name={"maxValidityDays"} required={true} schemaName={"integer"} qualifierMessage={undefined} schema={{"type":"integer","nullable":true,"description":"The longest validity of a certificate of the profile, in days. `null` when the profile sets no limit.","example":457}}></SchemaItem><SchemaItem collapsible={false} name={"testCertificateValidityDays"} required={true} schemaName={"integer"} qualifierMessage={undefined} schema={{"type":"integer","description":"The validity in days of a test certificate with this preset when the request has no `validityDays` (the create test certificate operation). It is the setting of the installation (default 365 days), at most `maxValidityDays`.","example":365}}></SchemaItem><SchemaItem collapsible={false} name={"testCaDomain"} required={true} schemaName={"string"} qualifierMessage={"**Possible values:** [`mdoc-iaca`, `provider`, `access`]"} schema={{"type":"string","description":"The trust domain of the test root that issues a test certificate with this preset (the create test certificate operation). `mdoc-iaca`, the IACA of `mdoc-document-signer`, `mdoc-reader` and `mdoc-status-list-signer`. `access`, in place of the Access CA, for `wrpac-legal`, `wrpac-natural` and `request-signer-san-dns`. `provider` for the other presets.","enum":["mdoc-iaca","provider","access"],"example":"mdoc-iaca"}}></SchemaItem><SchemaItem collapsible={false} name={"etsiSyntax"} required={true} schemaName={"boolean"} qualifierMessage={undefined} schema={{"type":"boolean","description":"Shows `true` when the wallet checks `subject.serialNumber` and `subject.organizationIdentifier` of a request with this preset against the syntax of ETSI EN 319 412-1 (clauses 5.1.3 and 5.1.4).","example":false}}></SchemaItem><SchemaItem collapsible={true} className={"schemaItem"}><details style={{}} className={"openapi-markdown__details"}><summary style={{}}><span className={"openapi-schema__container"}><strong className={"openapi-schema__property"}>sources</strong><span className={"openapi-schema__name"}> object[]</span><span className={"openapi-schema__divider"}></span><span className={"openapi-schema__required"}>required</span></span></summary><div style={{"marginLeft":"1rem"}}><div style={{"marginTop":".5rem","marginBottom":".5rem"}}>

The documents and the clauses of the fixed values.

</div><li><div style={{"fontSize":"var(--ifm-code-font-size)","opacity":"0.6","marginLeft":"-.5rem","paddingBottom":".5rem"}}>Array [</div></li><SchemaItem collapsible={false} name={"document"} required={true} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","description":"The standard or the specification.","example":"ISO/IEC 18013-5"}}></SchemaItem><SchemaItem collapsible={false} name={"clause"} required={true} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","description":"The clause, and what it says.","example":"Table B.3 (keyUsage digitalSignature critical, EKU 1.0.18013.5.1.2 critical, at most 457 days, C and ST as the IACA, issuer = the IACA subject)"}}></SchemaItem><li><div style={{"fontSize":"var(--ifm-code-font-size)","opacity":"0.6","marginLeft":"-.5rem"}}>]</div></li></div></details></SchemaItem><li><div style={{"fontSize":"var(--ifm-code-font-size)","opacity":"0.6","marginLeft":"-.5rem"}}>]</div></li></div></details></SchemaItem><SchemaItem collapsible={false} name={"testCaEnabled"} required={true} schemaName={"boolean"} qualifierMessage={undefined} schema={{"type":"boolean","description":"Shows `true` when the built-in test CA of the installation is on. The installation can switch it off.","example":true}}></SchemaItem></ul></details></TabItem><TabItem label={"Example (from schema)"} value={"Example (from schema)"}><ResponseSamples responseExample={"{\n  \"presets\": [\n    {\n      \"id\": \"mdoc-document-signer\",\n      \"name\": \"mdoc Document Signer (ISO/IEC 18013-5)\",\n      \"description\": \"Document signer certificate of ISO/IEC 18013-5 Table B.3, issued by an IACA. The C is the issuing_country of the mdoc and the C of the IACA; the ST, if the IACA has one, is the issuing_jurisdiction. ISO/IEC 23220-4 recommends the EKU 1.0.23220.4.1.2 in addition.\",\n      \"purpose\": \"Signs the mdoc MSO (issuerAuth).\",\n      \"fixed\": {\n        \"keyUsage\": {\n          \"values\": [\n            \"digitalSignature\"\n          ],\n          \"critical\": true\n        },\n        \"extendedKeyUsage\": {\n          \"values\": [\n            \"1.0.18013.5.1.2\"\n          ],\n          \"critical\": true\n        },\n        \"certificatePolicies\": [],\n        \"qcStatements\": {\n          \"qcType\": \"0.4.0.1862.1.6.2\",\n          \"qcCompliance\": true,\n          \"qcSscd\": true,\n          \"qcPsb\": null\n        }\n      },\n      \"required\": [\n        \"subject.country\",\n        \"subject.commonName\"\n      ],\n      \"prefill\": {\n        \"preset\": \"mdoc-document-signer\",\n        \"subject\": {\n          \"country\": \"SE\",\n          \"organization\": \"Example AB\",\n          \"commonName\": \"Example AB Document Signer\"\n        },\n        \"subjectAltName\": {\n          \"dns\": [\n            \"wallet.example.com\"\n          ]\n        }\n      },\n      \"maxValidityDays\": 457,\n      \"testCertificateValidityDays\": 365,\n      \"testCaDomain\": \"mdoc-iaca\",\n      \"etsiSyntax\": false,\n      \"sources\": [\n        {\n          \"document\": \"ISO/IEC 18013-5\",\n          \"clause\": \"Table B.3 (keyUsage digitalSignature critical, EKU 1.0.18013.5.1.2 critical, at most 457 days, C and ST as the IACA, issuer = the IACA subject)\"\n        }\n      ]\n    }\n  ],\n  \"testCaEnabled\": true\n}"} language={"json"}></ResponseSamples></TabItem></SchemaTabs></TabItem></MimeTabs></div></TabItem><TabItem label={"401"} value={"401"}><div>

Unauthorized

</div><details style={{"textAlign":"left","marginBottom":"1rem"}} className={"openapi-markdown__details"} data-collaposed={true} open={false}><summary style={{}}><strong>Response Headers</strong></summary><ul style={{"marginLeft":"1rem"}}></ul></details><div><MimeTabs className={"openapi-tabs__mime"} schemaType={"response"}><TabItem label={"application/json"} value={"application/json"}><SchemaTabs className={"openapi-tabs__schema"}><TabItem label={"Schema"} value={"Schema"}><details style={{}} className={"openapi-markdown__details response"} data-collapsed={false} open={true}><summary style={{}} className={"openapi-markdown__details-summary-response"}><strong>Schema</strong></summary><div style={{"textAlign":"left","marginLeft":"1rem"}}></div><ul style={{"marginLeft":"1rem"}}><SchemaItem collapsible={false} name={"errorCode"} required={true} schemaName={"integer"} qualifierMessage={undefined} schema={{"type":"integer","example":400}}></SchemaItem><SchemaItem collapsible={false} name={"errorDescription"} required={true} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","example":"Bad input parameter"}}></SchemaItem></ul></details></TabItem><TabItem label={"Example (from schema)"} value={"Example (from schema)"}><ResponseSamples responseExample={"{\n  \"errorCode\": 400,\n  \"errorDescription\": \"Bad input parameter\"\n}"} language={"json"}></ResponseSamples></TabItem></SchemaTabs></TabItem></MimeTabs></div></TabItem><TabItem label={"500"} value={"500"}><div>

Internal server error

</div><details style={{"textAlign":"left","marginBottom":"1rem"}} className={"openapi-markdown__details"} data-collaposed={true} open={false}><summary style={{}}><strong>Response Headers</strong></summary><ul style={{"marginLeft":"1rem"}}></ul></details><div><MimeTabs className={"openapi-tabs__mime"} schemaType={"response"}><TabItem label={"application/json"} value={"application/json"}><SchemaTabs className={"openapi-tabs__schema"}><TabItem label={"Schema"} value={"Schema"}><details style={{}} className={"openapi-markdown__details response"} data-collapsed={false} open={true}><summary style={{}} className={"openapi-markdown__details-summary-response"}><strong>Schema</strong></summary><div style={{"textAlign":"left","marginLeft":"1rem"}}></div><ul style={{"marginLeft":"1rem"}}><SchemaItem collapsible={false} name={"errorCode"} required={true} schemaName={"integer"} qualifierMessage={undefined} schema={{"type":"integer","example":400}}></SchemaItem><SchemaItem collapsible={false} name={"errorDescription"} required={true} schemaName={"string"} qualifierMessage={undefined} schema={{"type":"string","example":"Bad input parameter"}}></SchemaItem></ul></details></TabItem><TabItem label={"Example (from schema)"} value={"Example (from schema)"}><ResponseSamples responseExample={"{\n  \"errorCode\": 400,\n  \"errorDescription\": \"Bad input parameter\"\n}"} language={"json"}></ResponseSamples></TabItem></SchemaTabs></TabItem></MimeTabs></div></TabItem></ApiTabs></div></div>