Credential format - SD-JWT

• The PID is issued in the format defined in the ARF Annex 6, with the changes from ARF PR 160 applied.
• SD-JWT VC Draft 11 is used:
• Use of a test root certificate used for credential signing. The root certificate is available on the main page. The chain is written to the x5c header.
• The signing key is also made available at the jwt-vc-issuer well-known endpoint for web based key resolution. Transfer of the jwt-vc-issuer metadata is secured by a browser validatable TLS certificate used for displaying this technical details page as well.
• SD-JWT Final (RFC 9901) is used:
• The compact serialization is used.
• Recursive disclosures are used.
• The leaf elements in the JSON tree are made selectively disclosable.
• Array element disclosures are used.

Create a sample PID

To create a sample SD-JWT PID perform the following steps:

1. Open the manual and select: Issuance → SD-JWT VC issuance V2 Beta → Single → Credential with jwt proof
2. Extract the base64 encoded credential from the response
3. Decode the credential in a SD-JWT debugger