Credential format - MSO-MDOC

• The PID is issued in the format defined in the ARF Annex 6, with the changes from ARF PR 160 applied.
• The credential is returned as a IssuerSigned structure as described in ISO 18013-5 (see chapter 8.3.2.1.2.2):
• Use of a test root certificate used for credential signing. The root certificate is available on the main page. The chain is written to the x5c element (id "33") of the unprotected header of the IssuerAuth structure with certificates encoded in DER format.
• The signing key is also made available at the jwt-vc-issuer well-known endpoint for web based key resolution. Transfer of the jwt-vc-issuer metadata is secured by a browser validatable TLS certificate used for displaying this technical details page as well.

Create a sample PID

To create a sample MSO-MDOC PID perform the following steps:

1. Open the manual and select: Issuance → MSO mdoc issuance V2 Beta → Single → Credential with jwt proof
2. Extract the base64 encoded credential from the response
3. Decode the credential in an MSO-MDOC debugger