Read test CA

Lists the test root CAs of the organisation, for development and testing only: for each root, its trust domain, its certificate (PEM), subject and validity, and the public URLs of its CRL and its certificate.

The organisation has at most one test root for each trust domain: mdoc-iaca (the IACA of the mdoc-* and *-mdoc presets), provider (the provider presets, wallet-status-list-signer, status-list-signer and custom) and access (wrpac-legal, wrpac-natural and request-signer-san-dns). The list has only the roots that exist, in that order. This read makes no root: Create test CA, or the first test certificate of a domain, makes it.

A verifier of this platform trusts a test certificate only when its organisation adds the root as a trust anchor, or uses a trusted list that has the root. A test root is never on an EU trusted list. A sandbox organisation reads the test CAs of its main organisation.