Certificate validation
The ValidateCertificate web service method in SecuSign provides validation of certificates in X.509 format whose issuer is available in the remote store (database) of the SecuSign backend server or in an internal store (folder) of the customer’s SecuSign SDK Server.
From June 2020, it is possible to verify whether the certificate is qualified and issued for the payment service provider meeting Reference[14].
The method checks whether the format is correct and the certificate valid, qualified or whether it is expired or revoked. In the case of a PSD2 certificate, an additional check is made on the contained attributes and the validity of the license for individual roles.
The returned details include certificate type and validity, subject (to whom it was issued), issuer, serial number, trust anchor, revocation data, etc.
-
Implemented: as of version 2.0.759.0628
-
Updated: in version 2.1.7268.1218
-
Updated (PSD2): in version 2.1.7474.0624
-
The implementation of PSD2 certificate verification is according to the ETSI standard, see Reference[14].