For AI agents: a documentation index is available at the root level at /llms.txt and /llms-full.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
  • Getting Started
    • Introduction
    • How Verifa Works
    • Quickstart
    • Choosing an Integration Method
  • Use Cases
    • KYC Onboarding
    • Age Verification
    • AML Compliance
    • Fraud Prevention
    • Marketplace Trust & Safety
  • Core Concepts
    • Overview
    • Sessions
    • Verifications & Checks
    • Workflows
    • Identities
    • Cases
    • Screening & Reports
    • Lists
  • Integration Guides
    • Overview
    • JavaScript SDK
    • Web Capture Flow
    • API-Only Integration
    • Mobile SDK
    • Webhooks Guide
    • MCP Server
    • Migrating from Persona
  • API Details
    • Overview
    • Authentication
    • Pagination
    • Rate Limiting
    • Versioning
    • Errors
    • Webhooks
    • Idempotency
    • Key Inflection
    • Data Access
    • Data Retention
  • Tutorials
    • Creating Your First Verification Session
    • Creating a Workflow
    • Receiving Webhooks & Validating Signatures
    • Handling Webhook Events
    • Custom Document Types & AI Extraction
  • Best Practices
    • Testing
    • Preventing Duplicates
    • Fraud Signals
    • Changelog
  • API Reference
      • GETGet SDK configuration for a capture session
      • GETGet a device attestation challenge
      • POSTSubmit a device attestation
      • POSTSubmit NFC chip data
      • GETGet CSCA certificate bundle
API ReferenceSDK

Get CSCA certificate bundle

GET
https://devapi.withverifa.com/api/v1/sdk/csca-certificates
GET
/api/v1/sdk/csca-certificates
$curl -G https://devapi.withverifa.com/api/v1/sdk/csca-certificates \
>     -H "X-API-Key: <apiKey>" \
>     -H "Content-Type: application/json" \
>     -d token=token
200Retrieved
1{
2  "certificates": [
3    {
4      "country": "DE",
5      "issuer": "CN=Bundesrepublik Deutschland, O=Federal Office for Information Security, C=DE",
6      "serialNumber": "1234567890ABCDEF",
7      "validFrom": "2023-01-01T00:00:00Z",
8      "validTo": "2033-01-01T23:59:59Z",
9      "publicKeyAlgorithm": "RSA",
10      "publicKey": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A...",
11      "signatureAlgorithm": "sha256WithRSAEncryption"
12    }
13  ],
14  "version": 2026,
15  "status": "not_implemented"
16}
Returns the CSCA (Country Signing Certificate Authority) bundle the SDK uses for NFC passport passive authentication. **Status: not yet implemented.** The endpoint is session-gated and returns an empty bundle with `status: "not_implemented"` until the ICAO master list is wired in. Authenticated by capture session `token`.
Was this page helpful?
Previous

Refresh the dashboard session cookie

Next
Built with

Returns the CSCA (Country Signing Certificate Authority) bundle the SDK uses for NFC passport passive authentication.

Status: not yet implemented. The endpoint is session-gated and returns an empty bundle with status: "not_implemented" until the ICAO master list is wired in.

Authenticated by capture session token.

Authentication

X-API-Keystring

Organization API key. Keys are prefixed with vk_live_ (production) or vk_sandbox_ (sandbox).

Headers

Verifa-VersiondateOptional

API version date string (e.g. 2026-02-01). If omitted, the version pinned to your API key is used.

Query parameters

tokenstringRequired

Response

Certificate bundle.
certificateslist of maps from strings to any
versioninteger
statusstring