EAA ConformanceETSI TS 119 472-1 (v1.2.1) clause 5.6.3
PuB-EAA-5.6.3-02:PuB-EAA protected header must include x5u and x5t#S256
- shall
- PuB-EAA
- SD-JWT VC
- Issuer
- Verifier
Spec text
The Protected Header of the digital signature signing a SD-JWT VC PuB-EAA shall contain the x5u and the x5t#S256 header parameters, specified in IETF RFC 7515. (Note: this requirement meets requirement (h) in Annex VII of Regulation (EU) 2024/1183 for PuB-EAA, which requires the location where the certificate supporting the qualified electronic signature or qualified electronic seal is available free of charge. The x5t#S256 header parameter is required for security reasons.)
ETSI TS 119 472-1 (v1.2.1), clause 5.6.3, page 35.
In plain English
Plain-English explanation has not yet been written for this control. The spec text above carries the normative requirement.
Conformance check
Not auto-tested yet. The rule above is documented but no automated test runs against it.