Skip to main content

/iacas API

/iacas

get

Retrieves the list of Issuing Authority Certificate Authority (IACA) certificates. IACAs are X.509 certificates that serve as trust anchors for mdoc issuers and are used to sign Document Signer Certificates.

Responses

StatusDescriptionSchema
200

Successfully retrieved the list of IACA certificates.

application/json

{
  "data": [
    {
      "id": "iaca-001",
      "active": true,
      "certificatePem": "-----BEGIN CERTIFICATE-----\nMIIB...\n-----END CERTIFICATE-----\n",
      "certificateData": {
        "notAfter": "2030-06-18T00:00:00.000Z",
        "notBefore": "2025-06-18T00:00:00.000Z",
        "country": "GB",
        "commonName": "GOV.UK Wallet IACA"
      },
      "certificateFingerprint": "a1b2c3d4e5f678901234567890abcdef1234567890abcdef1234567890abcdef",
      "publicKeyJwk": {
        "kty": "string",
        "kid": "string",
        "crv": "string",
        "x": "string",
        "y": "string",
        "alg": "string"
      }
    }
  ]
}
 Iacas
500

Internal server error.

application/json

{
  "error": "INTERNAL_SERVER_ERROR",
  "error_description": "Unable to retrieve IACA certificates"
}
 IACAsErrorResponse

Schemas

Iacas

NameTypeRequiredDescriptionSchema
data array true Iaca

Iaca

NameTypeRequiredDescriptionSchema
id string true

Unique identifier for the IACA.
active boolean true

Indicates whether this IACA is currently active and valid for use.
certificatePem string true

PEM-encoded X.509 certificate.
certificateData object true CertificateData
certificateFingerprint string true

SHA-256 fingerprint of the certificate as a lowercase hexadecimal string.
publicKeyJwk object true PublicKeyJwk

CertificateData

NameTypeRequiredDescriptionSchema
notAfter string true

The date and time (ISO 8601) when the certificate expires.
notBefore string true

The date and time (ISO 8601) when the certificate becomes valid.
country string true

ISO 3166-1 alpha-2 country code of the IACA issuer.
commonName string true

The issuer common name (CN).

PublicKeyJwk

NameTypeRequiredDescriptionSchema
kty string true

Key Type. The family of cryptographic algorithms used with the key.
kid string true

Key ID. Unique identifier to match a specific key.
crv string true

Curve. Cryptographic curve used with the key.
x string true

The “x” coordinate for the elliptic curve point.
y string true

The “y” coordinate for the elliptic curve point.
alg string true

Algorithm. The cryptographic algorithm used with the key.

IACAsErrorResponse

NameTypeRequiredDescriptionSchema
error string true

Machine-readable error code.
error_description string true

Human-readable error message.
This page was last reviewed on 30 July 2026. It needs to be reviewed again on 30 January 2027 by the page owner #di-mobile-wallet-tech-docs .