Skip to content

Instantly share code, notes, and snippets.

View cre8's full-sized avatar

Mirko Mollik cre8

View GitHub Profile
@cre8
cre8 / certificate-timestamp-for-jws.md
Last active April 8, 2025 22:40
Signed Certificate Timestamp for JWS

Signed Certificate Timestamp for JWS

The SCT for JWS is not a requirement of the regulation, but was defined to test it out. It is not mandatory to implement it because there is no official standard for it.

Since the registration certificate is a JWS instead of x509, the reference to the certificate transparency log servers is implemented in another way. The log servers will create a signed certificate timestamp (SCT) that will be attached to the JWS unprotected header