Skip to main content

Check a credential is valid

You can check a credential is valid by looking at its:

You must not trust a credential with errors in its credential status or certificate pathway.

Certificate path

You can check a credential’s validity by inspecting its full certificate path back to its Issuing Authority Certificate Authority (IACA).

You can find how to inspect a credential’s certificate path in section 9.3 of the ISO/IEC 18013-5 specification for an mdoc credential. The specification covers areas of validation including:

  • certificate signatures
  • expiration dates
  • certificate usage constraints
  • name constraints
  • certificate revocation lists (CRLs) following RFC 5280

Status information

You can use the Status List Service to check a live credential’s status. This will tell you whether the credential is valid or revoked.

This page was last reviewed on 19 August 2026. It needs to be reviewed again on 19 February 2027 by the page owner #di-mobile-wallet-tech-docs .