Get CSCA certificate bundle

GET

https://devapi.withverifa.com/api/v1/sdk/csca-certificates

Returns the CSCA (Country Signing Certificate Authority) bundle the SDK uses for NFC passport passive authentication.

Status: not yet implemented. The endpoint is session-gated and returns an empty bundle with status: "not_implemented" until the ICAO master list is wired in.

Authenticated by capture session token.

Returns the CSCA (Country Signing Certificate Authority) bundle the SDK uses for NFC passport passive authentication. **Status: not yet implemented.** The endpoint is session-gated and returns an empty bundle with `status: "not_implemented"` until the ICAO master list is wired in. Authenticated by capture session `token`.

Authentication

X-API-Keystring

Organization API key. Keys are prefixed with vk_live_ (production) or vk_sandbox_ (sandbox).

Query parameters

tokenstringRequired

Response

Certificate bundle.

certificateslist of maps from strings to any

versioninteger

statusstring

$	curl -G https://devapi.withverifa.com/api/v1/sdk/csca-certificates \
>	-H "X-API-Key: <apiKey>" \
>	-H "Content-Type: application/json" \
>	-d token=token

1	{
2	"certificates": [
3	{
4	"country": "DE",
5	"issuer": "CN=Bundesrepublik Deutschland, O=Federal Office for Information Security, C=DE",
6	"serialNumber": "1234567890ABCDEF",
7	"validFrom": "2023-01-01T00:00:00Z",
8	"validTo": "2033-01-01T23:59:59Z",
9	"publicKeyAlgorithm": "RSA",
10	"publicKey": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A...",
11	"signatureAlgorithm": "sha256WithRSAEncryption"
12	}
13	],
14	"version": 2026,
15	"status": "not_implemented"
16	}

Authentication

Headers

Query parameters

Response