{"branches":[{"number":1,"id":"branch-ca-qeaa-issuance","category":"xml","category_name":"Pilier LoTL \u0026 TL (XML — ETSI TS 119 612)","name":"QEAA Provider · EAA · Q","standard":"ETSI TS 119 602 / http://uri.etsi.org/TrstSvc/Svctype/EAA/Q","color":"#059669","color_bg":"rgba(5, 150, 105, 0.12)","trust_anchor":"fr-tl.xml","trust_anchor_cert_id":"ca-qeaa-issuance","root_ca":{"id":"ca-root-qeaa","name":"DEMO Root AC QEAA Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"5C3A64CC0A91F24F2FDDB102CAAC9F67","sha256":"1A1361BD73C76A0FE0F77510D9C8533FED7D1F3D0864E0D31E13FC312EFA3717","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 122592173236784087002060597850941464423 (0x5c3a64cc0a91f24f2fddb102caac9f67)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04e03871de7189df135eeaff62faf56dac0485ae6f9b710e653a84a827ad63be900ec0a3fb9952eedfbe9b34a0bc99fd60e5d19b8caabb69b5175ef3221d8f5309\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 53:48:2C:C5:B1:9E:24:87:00:57:51:0B:4C:2C:A9:97:52:BE:7A:77\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-qeaa-issuance","name":"DEMO AC QEAA Provider Issuance (Idakto)","role":"ca","issuer_id":"ca-root-qeaa","serial_hex":"52FE266B6C7067708FA8083FB9FD2141","sha256":"29978D9C627E5BFE4524A3C6EE66DDB458D6268A71E0BDB5C26CF18AD88D75DE","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-issuance.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-issuance.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-issuance.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 110316318298969544818155868047439372609 (0x52fe266b6c7067708fa8083fb9fd2141)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC QEAA Provider Issuance (Idakto),O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04492dc5fbb6f88aa915728d44f06e427c9d08b50a6b43f1842513a6bfa5678324c1851cd3dc7a12e1accdf569d97dead187f5cb120fbd26dc749b17a2bc6bd7db\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n C4:D5:4A:33:B3:2C:65:2F:87:A5:2C:B1:EB:C1:43:05:3D:D0:CD:A2\n X509v3 Authority Key Identifier:\n keyid:53:48:2C:C5:B1:9E:24:87:00:57:51:0B:4C:2C:A9:97:52:BE:7A:77\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"qeaa-attestation-signer","name":"DEMO QEAA Provider (Attestation Signer) 01","role":"leaf","issuer_id":"ca-qeaa-issuance","serial_hex":"37DA305D6B3110AB5953F8FD99CEAF26","sha256":"AA7087102B494CE25AF17BAE917650B42A5307380A5FC620E8E8064D8C9D6F0B","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":true,"qc_types":["0.4.0.1862.1.6.2"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/qeaa-attestation-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/qeaa-attestation-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 74240441440385266674231545945140408102 (0x37da305d6b3110ab5953f8fd99ceaf26)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC QEAA Provider Issuance (Idakto),O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO QEAA Provider (Attestation Signer) 01,O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04216caca9523ff509caa76c3bf3c8462606a21580bd7cea6d30a01ecccabcf0d31c25870461835526a0c30e2a5946a87c9b0adf7496ada0fd152d6b151a3ce3aa\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n D0:60:67:B5:D7:1B:F8:10:48:71:E7:86:E5:75:3A:E1:88:CE:A8:67\n X509v3 Authority Key Identifier:\n keyid:C4:D5:4A:33:B3:2C:65:2F:87:A5:2C:B1:EB:C1:43:05:3D:D0:CD:A2\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194112.1.3 (QCP-l-qscd (Qualified Legal with QSCD))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcSSCD : Clé privée sur QSCD / SSCD (Dispositif Qualifié)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.2\n"}],"tree":{"id":"ca-root-qeaa","name":"DEMO Root AC QEAA Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"5C3A64CC0A91F24F2FDDB102CAAC9F67","sha256":"1A1361BD73C76A0FE0F77510D9C8533FED7D1F3D0864E0D31E13FC312EFA3717","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 122592173236784087002060597850941464423 (0x5c3a64cc0a91f24f2fddb102caac9f67)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04e03871de7189df135eeaff62faf56dac0485ae6f9b710e653a84a827ad63be900ec0a3fb9952eedfbe9b34a0bc99fd60e5d19b8caabb69b5175ef3221d8f5309\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 53:48:2C:C5:B1:9E:24:87:00:57:51:0B:4C:2C:A9:97:52:BE:7A:77\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":false,"trust_anchor":"Racine PKI (Hors-Liste)","trust_anchor_type":"internal_root","category":"xml","color":"#059669","children":[{"id":"ca-qeaa-issuance","name":"DEMO AC QEAA Provider Issuance (Idakto)","role":"ca","issuer_id":"ca-root-qeaa","serial_hex":"52FE266B6C7067708FA8083FB9FD2141","sha256":"29978D9C627E5BFE4524A3C6EE66DDB458D6268A71E0BDB5C26CF18AD88D75DE","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-issuance.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-issuance.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-issuance.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 110316318298969544818155868047439372609 (0x52fe266b6c7067708fa8083fb9fd2141)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC QEAA Provider Issuance (Idakto),O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04492dc5fbb6f88aa915728d44f06e427c9d08b50a6b43f1842513a6bfa5678324c1851cd3dc7a12e1accdf569d97dead187f5cb120fbd26dc749b17a2bc6bd7db\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n C4:D5:4A:33:B3:2C:65:2F:87:A5:2C:B1:EB:C1:43:05:3D:D0:CD:A2\n X509v3 Authority Key Identifier:\n keyid:53:48:2C:C5:B1:9E:24:87:00:57:51:0B:4C:2C:A9:97:52:BE:7A:77\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"fr-tl","trust_anchor":"fr-tl.xml","trust_anchor_type":"tl_service","category":"xml","color":"#059669","children":[{"id":"qeaa-attestation-signer","name":"DEMO QEAA Provider (Attestation Signer) 01","role":"leaf","issuer_id":"ca-qeaa-issuance","serial_hex":"37DA305D6B3110AB5953F8FD99CEAF26","sha256":"AA7087102B494CE25AF17BAE917650B42A5307380A5FC620E8E8064D8C9D6F0B","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":true,"qc_types":["0.4.0.1862.1.6.2"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/qeaa-attestation-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/qeaa-attestation-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 74240441440385266674231545945140408102 (0x37da305d6b3110ab5953f8fd99ceaf26)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC QEAA Provider Issuance (Idakto),O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO QEAA Provider (Attestation Signer) 01,O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04216caca9523ff509caa76c3bf3c8462606a21580bd7cea6d30a01ecccabcf0d31c25870461835526a0c30e2a5946a87c9b0adf7496ada0fd152d6b151a3ce3aa\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n D0:60:67:B5:D7:1B:F8:10:48:71:E7:86:E5:75:3A:E1:88:CE:A8:67\n X509v3 Authority Key Identifier:\n keyid:C4:D5:4A:33:B3:2C:65:2F:87:A5:2C:B1:EB:C1:43:05:3D:D0:CD:A2\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194112.1.3 (QCP-l-qscd (Qualified Legal with QSCD))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcSSCD : Clé privée sur QSCD / SSCD (Dispositif Qualifié)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.2\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"xml","color":"#059669","children":[]}]}]}},{"number":2,"id":"branch-ca-qeaa-revocation","category":"xml","category_name":"Pilier LoTL \u0026 TL (XML — ETSI TS 119 612)","name":"QEAA Provider · TSL","standard":"ETSI TS 119 602 / http://uri.etsi.org/TrstSvc/Svctype/TSL","color":"#059669","color_bg":"rgba(5, 150, 105, 0.12)","trust_anchor":"fr-tl.xml","trust_anchor_cert_id":"ca-qeaa-revocation","root_ca":{"id":"ca-root-qeaa","name":"DEMO Root AC QEAA Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"5C3A64CC0A91F24F2FDDB102CAAC9F67","sha256":"1A1361BD73C76A0FE0F77510D9C8533FED7D1F3D0864E0D31E13FC312EFA3717","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 122592173236784087002060597850941464423 (0x5c3a64cc0a91f24f2fddb102caac9f67)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04e03871de7189df135eeaff62faf56dac0485ae6f9b710e653a84a827ad63be900ec0a3fb9952eedfbe9b34a0bc99fd60e5d19b8caabb69b5175ef3221d8f5309\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 53:48:2C:C5:B1:9E:24:87:00:57:51:0B:4C:2C:A9:97:52:BE:7A:77\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-qeaa-revocation","name":"DEMO AC QEAA Provider Revocation (Idakto)","role":"ca","issuer_id":"ca-root-qeaa","serial_hex":"1BC25EC09EBA9FC88C11467D662B6F01","sha256":"3594ABABDE02EBD3758488AB3277A7A47804FB6C6D0D2B00C745FF47084A567A","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-revocation.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-revocation.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-revocation.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 36898383284182677434043734562320379649 (0x1bc25ec09eba9fc88c11467d662b6f01)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC QEAA Provider Revocation (Idakto),O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 046e27719afe67380b3534e7a7c7ca046ffaa056d61d00db3b4b86c48dba736b440bb7a8b212a4b61adbd5007f40ca2b6dfbcb587ec9b4531141b1ec0392cefefc\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n BD:49:59:85:A5:59:5B:8E:32:D1:0C:4A:E3:75:A1:31:AC:2D:87:11\n X509v3 Authority Key Identifier:\n keyid:53:48:2C:C5:B1:9E:24:87:00:57:51:0B:4C:2C:A9:97:52:BE:7A:77\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"qeaa-tsl-signer","name":"DEMO QEAA Provider (TSL Signer) 01","role":"leaf","issuer_id":"ca-qeaa-revocation","serial_hex":"1C3EA030460CB2766D8EB862C8F74779","sha256":"4DF7D8906F2DE08C9DF0E4D72245E0A7D50E16FF0C4C10EDB58676A1CE4B207B","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/qeaa-tsl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/qeaa-tsl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-revocation.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 37543555297374489269405256297227962233 (0x1c3ea030460cb2766d8eb862c8f74779)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC QEAA Provider Revocation (Idakto),O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO QEAA Provider (TSL Signer) 01,O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0485365d6b7da0fcde602ddbd1ed04b790c2cbc0775c4376ca3babc48fa92c3bc7f526b9c9660c514bd060ef29259545d15e89a01970c2d03c4f4e8ab1396b9775\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n F8:6D:41:5B:97:0C:F2:0D:A7:84:0F:F4:CB:AA:09:87:05:7F:5D:EA\n X509v3 Authority Key Identifier:\n keyid:BD:49:59:85:A5:59:5B:8E:32:D1:0C:4A:E3:75:A1:31:AC:2D:87:11\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-revocation.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-revocation.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"tree":{"id":"ca-root-qeaa","name":"DEMO Root AC QEAA Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"5C3A64CC0A91F24F2FDDB102CAAC9F67","sha256":"1A1361BD73C76A0FE0F77510D9C8533FED7D1F3D0864E0D31E13FC312EFA3717","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 122592173236784087002060597850941464423 (0x5c3a64cc0a91f24f2fddb102caac9f67)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04e03871de7189df135eeaff62faf56dac0485ae6f9b710e653a84a827ad63be900ec0a3fb9952eedfbe9b34a0bc99fd60e5d19b8caabb69b5175ef3221d8f5309\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 53:48:2C:C5:B1:9E:24:87:00:57:51:0B:4C:2C:A9:97:52:BE:7A:77\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":false,"trust_anchor":"Racine PKI (Hors-Liste)","trust_anchor_type":"internal_root","category":"xml","color":"#059669","children":[{"id":"ca-qeaa-revocation","name":"DEMO AC QEAA Provider Revocation (Idakto)","role":"ca","issuer_id":"ca-root-qeaa","serial_hex":"1BC25EC09EBA9FC88C11467D662B6F01","sha256":"3594ABABDE02EBD3758488AB3277A7A47804FB6C6D0D2B00C745FF47084A567A","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-revocation.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-revocation.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-revocation.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 36898383284182677434043734562320379649 (0x1bc25ec09eba9fc88c11467d662b6f01)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC QEAA Provider Revocation (Idakto),O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 046e27719afe67380b3534e7a7c7ca046ffaa056d61d00db3b4b86c48dba736b440bb7a8b212a4b61adbd5007f40ca2b6dfbcb587ec9b4531141b1ec0392cefefc\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n BD:49:59:85:A5:59:5B:8E:32:D1:0C:4A:E3:75:A1:31:AC:2D:87:11\n X509v3 Authority Key Identifier:\n keyid:53:48:2C:C5:B1:9E:24:87:00:57:51:0B:4C:2C:A9:97:52:BE:7A:77\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"fr-tl","trust_anchor":"fr-tl.xml","trust_anchor_type":"tl_service","category":"xml","color":"#059669","children":[{"id":"qeaa-tsl-signer","name":"DEMO QEAA Provider (TSL Signer) 01","role":"leaf","issuer_id":"ca-qeaa-revocation","serial_hex":"1C3EA030460CB2766D8EB862C8F74779","sha256":"4DF7D8906F2DE08C9DF0E4D72245E0A7D50E16FF0C4C10EDB58676A1CE4B207B","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/qeaa-tsl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/qeaa-tsl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-revocation.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 37543555297374489269405256297227962233 (0x1c3ea030460cb2766d8eb862c8f74779)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC QEAA Provider Revocation (Idakto),O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO QEAA Provider (TSL Signer) 01,O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0485365d6b7da0fcde602ddbd1ed04b790c2cbc0775c4376ca3babc48fa92c3bc7f526b9c9660c514bd060ef29259545d15e89a01970c2d03c4f4e8ab1396b9775\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n F8:6D:41:5B:97:0C:F2:0D:A7:84:0F:F4:CB:AA:09:87:05:7F:5D:EA\n X509v3 Authority Key Identifier:\n keyid:BD:49:59:85:A5:59:5B:8E:32:D1:0C:4A:E3:75:A1:31:AC:2D:87:11\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-revocation.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-revocation.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"xml","color":"#059669","children":[]}]}]}},{"number":3,"id":"branch-ca-qes","category":"xml","category_name":"Pilier LoTL \u0026 TL (XML — ETSI TS 119 612)","name":"Qualified Trust Service Provider · CA · QC","standard":"ETSI TS 119 602 / http://uri.etsi.org/TrstSvc/Svctype/CA/QC","color":"#059669","color_bg":"rgba(5, 150, 105, 0.12)","trust_anchor":"fr-tl.xml","trust_anchor_cert_id":"ca-qes","root_ca":{"id":"ca-root-qes","name":"DEMO Root AC QES QSCD (Idakto)","role":"root","issuer_id":"","serial_hex":"A6B79B197B78801A5776B7F3E734A2FC","sha256":"0421ACB8E75BE15B965470387A620F4998D31BF7E12B426D13BF80CB0EE1A652","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qes.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qes.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 221605183417812869478783983669216584444 (0xa6b79b197b78801a5776b7f3e734a2fc)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QES QSCD (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC QES QSCD (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 048be1d8e58216a1c47ae6a197fef5a163005a9380125c55082f198766702d965a22c8236e8f3813c1cf049fd1e8ab7ae60bfef068b65da09a9d28d20445a9b3c9\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n D5:D6:08:33:BF:60:69:FD:D3:1C:45:78:6C:A7:3C:20:F8:07:A1:D5\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-qes","name":"DEMO AC Qualified Signature (Idakto)","role":"ca","issuer_id":"ca-root-qes","serial_hex":"5BA8FE9183B7E9F8D5D511A4AC62EDD8","sha256":"BBA88EDA7EB2F95E6DD9B829CE1EF6706309E691AABCD9D5D1BF6F737B3415D4","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qes.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qes.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-qes.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 121837216749548962181633160682823413208 (0x5ba8fe9183b7e9f8d5d511a4ac62edd8)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QES QSCD (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Qualified Signature (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0406be955886c576c715eba70df65eccda7d8ef461ad0ff4d1e910de01c063d4b9e08d7622cebc35b1635730f116c04ab45efffd649b9c9a2c0cb3e3d2292867d1\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n CA:EC:3B:A3:57:58:7E:05:63:6F:43:FF:39:FA:9D:58:91:5A:43:B9\n X509v3 Authority Key Identifier:\n keyid:D5:D6:08:33:BF:60:69:FD:D3:1C:45:78:6C:A7:3C:20:F8:07:A1:D5\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qes.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"qes-signer","name":"Jeanne DEMO-TESTEUR (Qualified Signature on QSCD)","role":"leaf","issuer_id":"ca-qes","serial_hex":"BE1C1DDF4A720AF2972155C15F973C86","sha256":"DBB80F34CFC4A529CF5E2928072356B0127E817FF6AEEB577D2AE6676D7431C0","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["nonRepudiation"],"ext_key_usage":null,"qc_compliance":true,"qscd":true,"qc_types":["0.4.0.1862.1.6.1"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/qes-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/qes-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-qes.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 252699309391971497573594350189765147782 (0xbe1c1ddf4a720af2972155c15f973c86)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Qualified Signature (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=Jeanne DEMO-TESTEUR (Qualified Signature on QSCD),C=FR\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04b7f584a5b648918db2cea0bb65fdff9f8c3b66063e1b570983244fca4c5362ffe8d62e60efcbb203d6af5b5d65ed7bc99ac19aaeeb6740825b53d46c6da1305b\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Content Commitment (Non-Repudiation)\n X509v3 Subject Key Identifier:\n C2:F0:74:77:5F:B0:10:C5:A8:45:8D:C2:A7:6E:92:14:AD:D0:33:21\n X509v3 Authority Key Identifier:\n keyid:CA:EC:3B:A3:57:58:7E:05:63:6F:43:FF:39:FA:9D:58:91:5A:43:B9\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-qes.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-qes.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194112.1.2 (QCP-n-qscd (Qualified Natural with QSCD))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcSSCD : Clé privée sur QSCD / SSCD (Dispositif Qualifié)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.1\n"}],"tree":{"id":"ca-root-qes","name":"DEMO Root AC QES QSCD (Idakto)","role":"root","issuer_id":"","serial_hex":"A6B79B197B78801A5776B7F3E734A2FC","sha256":"0421ACB8E75BE15B965470387A620F4998D31BF7E12B426D13BF80CB0EE1A652","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qes.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qes.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 221605183417812869478783983669216584444 (0xa6b79b197b78801a5776b7f3e734a2fc)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QES QSCD (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC QES QSCD (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 048be1d8e58216a1c47ae6a197fef5a163005a9380125c55082f198766702d965a22c8236e8f3813c1cf049fd1e8ab7ae60bfef068b65da09a9d28d20445a9b3c9\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n D5:D6:08:33:BF:60:69:FD:D3:1C:45:78:6C:A7:3C:20:F8:07:A1:D5\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":false,"trust_anchor":"Racine PKI (Hors-Liste)","trust_anchor_type":"internal_root","category":"xml","color":"#059669","children":[{"id":"ca-qes","name":"DEMO AC Qualified Signature (Idakto)","role":"ca","issuer_id":"ca-root-qes","serial_hex":"5BA8FE9183B7E9F8D5D511A4AC62EDD8","sha256":"BBA88EDA7EB2F95E6DD9B829CE1EF6706309E691AABCD9D5D1BF6F737B3415D4","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qes.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qes.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-qes.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 121837216749548962181633160682823413208 (0x5ba8fe9183b7e9f8d5d511a4ac62edd8)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QES QSCD (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Qualified Signature (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0406be955886c576c715eba70df65eccda7d8ef461ad0ff4d1e910de01c063d4b9e08d7622cebc35b1635730f116c04ab45efffd649b9c9a2c0cb3e3d2292867d1\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n CA:EC:3B:A3:57:58:7E:05:63:6F:43:FF:39:FA:9D:58:91:5A:43:B9\n X509v3 Authority Key Identifier:\n keyid:D5:D6:08:33:BF:60:69:FD:D3:1C:45:78:6C:A7:3C:20:F8:07:A1:D5\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qes.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"fr-tl","trust_anchor":"fr-tl.xml","trust_anchor_type":"tl_service","category":"xml","color":"#059669","children":[{"id":"qes-signer","name":"Jeanne DEMO-TESTEUR (Qualified Signature on QSCD)","role":"leaf","issuer_id":"ca-qes","serial_hex":"BE1C1DDF4A720AF2972155C15F973C86","sha256":"DBB80F34CFC4A529CF5E2928072356B0127E817FF6AEEB577D2AE6676D7431C0","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["nonRepudiation"],"ext_key_usage":null,"qc_compliance":true,"qscd":true,"qc_types":["0.4.0.1862.1.6.1"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/qes-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/qes-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-qes.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 252699309391971497573594350189765147782 (0xbe1c1ddf4a720af2972155c15f973c86)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Qualified Signature (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=Jeanne DEMO-TESTEUR (Qualified Signature on QSCD),C=FR\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04b7f584a5b648918db2cea0bb65fdff9f8c3b66063e1b570983244fca4c5362ffe8d62e60efcbb203d6af5b5d65ed7bc99ac19aaeeb6740825b53d46c6da1305b\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Content Commitment (Non-Repudiation)\n X509v3 Subject Key Identifier:\n C2:F0:74:77:5F:B0:10:C5:A8:45:8D:C2:A7:6E:92:14:AD:D0:33:21\n X509v3 Authority Key Identifier:\n keyid:CA:EC:3B:A3:57:58:7E:05:63:6F:43:FF:39:FA:9D:58:91:5A:43:B9\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-qes.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-qes.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194112.1.2 (QCP-n-qscd (Qualified Natural with QSCD))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcSSCD : Clé privée sur QSCD / SSCD (Dispositif Qualifié)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.1\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"xml","color":"#059669","children":[]}]}]}},{"number":4,"id":"branch-ca-wrpac","category":"jwt","category_name":"Pilier LoTE (JWT — ETSI TS 119 602)","name":"Trust Services · WRPAC · Issuance","standard":"ETSI TS 119 602 / http://uri.etsi.org/19602/SvcType/WRPAC/Issuance","color":"#d97706","color_bg":"#d977061f","trust_anchor":"lote-wrpac.jwt","trust_anchor_cert_id":"ca-wrpac","root_ca":{"id":"ca-root-wrpac","name":"DEMO Root AC WRPAC (Idakto)","role":"root","issuer_id":"","serial_hex":"2DA56DFF8E5B71CD40781CC0C1DC0A0E","sha256":"0210B51966D27F70A03991B719D250148221C246708715F82B76D5A4268AC0C2","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrpac.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrpac.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 60674219821865121066717671235063122446 (0x2da56dff8e5b71cd40781cc0c1dc0a0e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0445f4a797b4e51be3f63447644e4e1421294562cdac708c5caee3cb7b5310e88515b8c3b160862621a2445238d4b9ef715a98980ba8c15a08f065fd7bf947dc5c\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 04:DD:60:AD:18:F3:06:97:0C:77:54:40:32:5B:89:31:BD:AE:3C:9A\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-wrpac","name":"DEMO AC WRPAC (Idakto)","role":"ca","issuer_id":"ca-root-wrpac","serial_hex":"61BA0E1CDC6B6EA378657901AF446374","sha256":"A2684206F876FD895EB11C6B12C6C351CD247E989F56530D685E35BF000CFC65","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 129901169047163898832565898467294339956 (0x61ba0e1cdc6b6ea378657901af446374)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0404ea31ac9f5f7a71380ad2d5bb8580c5506c6d41d1e49db195353e89f5cd8ffe51813244fc729f55273254a6cce91269e48849ab13ce8f05ec4770ca66af04d8\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n FD:04:BE:D7:64:86:38:CA:7F:47:23:28:85:F3:6B:35:83:26:AC:84\n X509v3 Authority Key Identifier:\n keyid:04:DD:60:AD:18:F3:06:97:0C:77:54:40:32:5B:89:31:BD:AE:3C:9A\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrpac.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"wrpac-for-pid","name":"DEMO WRPAC PID Provider Access 01","role":"leaf","issuer_id":"ca-wrpac","serial_hex":"F2AB0E5C85BE821CC2E8BF6D6C258EA5","sha256":"65550B469CEB4C615202BC5BC9B7523B965AD56930065A15C01459A6AAFECDFC","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":false,"qc_types":["0.4.0.1862.1.6.2"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-for-pid.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-for-pid.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 322561349026876315853066984043678371493 (0xf2ab0e5c85be821cc2e8bf6d6c258ea5)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPAC PID Provider Access 01,O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 042319b269e765c2bba50f38304b188e8c9a0758a38107eb4ce19359f3f5d59eef95d49a8c680621d5f87c0f95b88fb2a9280e87759cfeab1fd83bd2dcba27bee6\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n FE:5C:3E:40:5C:47:C0:EE:48:89:D9:71:95:55:BA:69:53:20:23:76\n X509v3 Authority Key Identifier:\n keyid:FD:04:BE:D7:64:86:38:CA:7F:47:23:28:85:F3:6B:35:83:26:AC:84\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194118.1.4 (QCP-l-eudiwrp (Qualified Legal Person WRPAC))\n X509v3 Subject Alternative Name:\n email:wallet-support@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/support\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.2\n"},{"id":"wrpac-for-one-verifier","name":"DEMO WRPAC Verifier 01","role":"leaf","issuer_id":"ca-wrpac","serial_hex":"815AD81E1FF61E99923E762AD68F00B4","sha256":"C5B3D792121593564AABF5FA3039A8DCC75D5DA3A7A06CDA144C2BA139B1F5BC","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":false,"qc_types":["0.4.0.1862.1.6.2"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-for-one-verifier.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-for-one-verifier.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 171942101560733121839871771237208228020 (0x815ad81e1ff61e99923e762ad68f00b4)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPAC Verifier 01,O=DEMO Verifier (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0495ae0961769bf8848d6c2c06a3aafc210b201a348bd5c3b90cf545e02f2c613a1adeff2d38946a9bf8e616b205796413190b04ebcf6ecdff93d0136a3ef455a2\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n FE:02:7A:24:D4:55:41:D7:0D:42:3D:3E:DD:B0:12:BB:FC:B3:4D:02\n X509v3 Authority Key Identifier:\n keyid:FD:04:BE:D7:64:86:38:CA:7F:47:23:28:85:F3:6B:35:83:26:AC:84\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194118.1.4 (QCP-l-eudiwrp (Qualified Legal Person WRPAC))\n X509v3 Subject Alternative Name:\n email:wallet-support@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/support\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.2\n"},{"id":"wrpac-qualified","name":"DEMO WRPAC Qualified Verifier 01","role":"leaf","issuer_id":"ca-wrpac","serial_hex":"739326D81E61346671F992A2A6A2452C","sha256":"E748B80A3D0367ED934FC4CFE564156C16C2B3E0FEB01AF69EBCF3BCCB9FE54C","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":false,"qc_types":["0.4.0.1862.1.6.2"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-qualified.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-qualified.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 153625275007720050441885557548057249068 (0x739326d81e61346671f992a2a6a2452c)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPAC Qualified Verifier 01,O=DEMO Verifier (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0438da671f461e3c09fb722376694202bec619ca0124319f85feaee545533543941aa33318b98dd1fed148772f754d331fa37589c544f5edcad57622a278ca141e\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n EE:86:97:DE:68:33:C2:F0:A2:7F:E1:63:28:C0:C9:14:22:52:5D:20\n X509v3 Authority Key Identifier:\n keyid:FD:04:BE:D7:64:86:38:CA:7F:47:23:28:85:F3:6B:35:83:26:AC:84\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194118.1.4 (QCP-l-eudiwrp (Qualified Legal Person WRPAC))\n X509v3 Subject Alternative Name:\n email:wallet-support@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/support\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.2\n"}],"tree":{"id":"ca-root-wrpac","name":"DEMO Root AC WRPAC (Idakto)","role":"root","issuer_id":"","serial_hex":"2DA56DFF8E5B71CD40781CC0C1DC0A0E","sha256":"0210B51966D27F70A03991B719D250148221C246708715F82B76D5A4268AC0C2","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrpac.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrpac.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 60674219821865121066717671235063122446 (0x2da56dff8e5b71cd40781cc0c1dc0a0e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0445f4a797b4e51be3f63447644e4e1421294562cdac708c5caee3cb7b5310e88515b8c3b160862621a2445238d4b9ef715a98980ba8c15a08f065fd7bf947dc5c\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 04:DD:60:AD:18:F3:06:97:0C:77:54:40:32:5B:89:31:BD:AE:3C:9A\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-wrpac","trust_anchor":"lote-wrpac.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"ca-wrpac","name":"DEMO AC WRPAC (Idakto)","role":"ca","issuer_id":"ca-root-wrpac","serial_hex":"61BA0E1CDC6B6EA378657901AF446374","sha256":"A2684206F876FD895EB11C6B12C6C351CD247E989F56530D685E35BF000CFC65","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 129901169047163898832565898467294339956 (0x61ba0e1cdc6b6ea378657901af446374)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0404ea31ac9f5f7a71380ad2d5bb8580c5506c6d41d1e49db195353e89f5cd8ffe51813244fc729f55273254a6cce91269e48849ab13ce8f05ec4770ca66af04d8\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n FD:04:BE:D7:64:86:38:CA:7F:47:23:28:85:F3:6B:35:83:26:AC:84\n X509v3 Authority Key Identifier:\n keyid:04:DD:60:AD:18:F3:06:97:0C:77:54:40:32:5B:89:31:BD:AE:3C:9A\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrpac.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-wrpac","trust_anchor":"lote-wrpac.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"wrpac-for-pid","name":"DEMO WRPAC PID Provider Access 01","role":"leaf","issuer_id":"ca-wrpac","serial_hex":"F2AB0E5C85BE821CC2E8BF6D6C258EA5","sha256":"65550B469CEB4C615202BC5BC9B7523B965AD56930065A15C01459A6AAFECDFC","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":false,"qc_types":["0.4.0.1862.1.6.2"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-for-pid.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-for-pid.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 322561349026876315853066984043678371493 (0xf2ab0e5c85be821cc2e8bf6d6c258ea5)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPAC PID Provider Access 01,O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 042319b269e765c2bba50f38304b188e8c9a0758a38107eb4ce19359f3f5d59eef95d49a8c680621d5f87c0f95b88fb2a9280e87759cfeab1fd83bd2dcba27bee6\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n FE:5C:3E:40:5C:47:C0:EE:48:89:D9:71:95:55:BA:69:53:20:23:76\n X509v3 Authority Key Identifier:\n keyid:FD:04:BE:D7:64:86:38:CA:7F:47:23:28:85:F3:6B:35:83:26:AC:84\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194118.1.4 (QCP-l-eudiwrp (Qualified Legal Person WRPAC))\n X509v3 Subject Alternative Name:\n email:wallet-support@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/support\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.2\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]},{"id":"wrpac-for-one-verifier","name":"DEMO WRPAC Verifier 01","role":"leaf","issuer_id":"ca-wrpac","serial_hex":"815AD81E1FF61E99923E762AD68F00B4","sha256":"C5B3D792121593564AABF5FA3039A8DCC75D5DA3A7A06CDA144C2BA139B1F5BC","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":false,"qc_types":["0.4.0.1862.1.6.2"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-for-one-verifier.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-for-one-verifier.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 171942101560733121839871771237208228020 (0x815ad81e1ff61e99923e762ad68f00b4)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPAC Verifier 01,O=DEMO Verifier (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0495ae0961769bf8848d6c2c06a3aafc210b201a348bd5c3b90cf545e02f2c613a1adeff2d38946a9bf8e616b205796413190b04ebcf6ecdff93d0136a3ef455a2\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n FE:02:7A:24:D4:55:41:D7:0D:42:3D:3E:DD:B0:12:BB:FC:B3:4D:02\n X509v3 Authority Key Identifier:\n keyid:FD:04:BE:D7:64:86:38:CA:7F:47:23:28:85:F3:6B:35:83:26:AC:84\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194118.1.4 (QCP-l-eudiwrp (Qualified Legal Person WRPAC))\n X509v3 Subject Alternative Name:\n email:wallet-support@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/support\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.2\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]},{"id":"wrpac-qualified","name":"DEMO WRPAC Qualified Verifier 01","role":"leaf","issuer_id":"ca-wrpac","serial_hex":"739326D81E61346671F992A2A6A2452C","sha256":"E748B80A3D0367ED934FC4CFE564156C16C2B3E0FEB01AF69EBCF3BCCB9FE54C","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":false,"qc_types":["0.4.0.1862.1.6.2"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-qualified.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-qualified.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 153625275007720050441885557548057249068 (0x739326d81e61346671f992a2a6a2452c)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPAC Qualified Verifier 01,O=DEMO Verifier (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0438da671f461e3c09fb722376694202bec619ca0124319f85feaee545533543941aa33318b98dd1fed148772f754d331fa37589c544f5edcad57622a278ca141e\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n EE:86:97:DE:68:33:C2:F0:A2:7F:E1:63:28:C0:C9:14:22:52:5D:20\n X509v3 Authority Key Identifier:\n keyid:FD:04:BE:D7:64:86:38:CA:7F:47:23:28:85:F3:6B:35:83:26:AC:84\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194118.1.4 (QCP-l-eudiwrp (Qualified Legal Person WRPAC))\n X509v3 Subject Alternative Name:\n email:wallet-support@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/support\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.2\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]}]}]}},{"number":5,"id":"branch-ca-wrprc-signer","category":"jwt","category_name":"Pilier LoTE (JWT — ETSI TS 119 602)","name":"Trust Services · WRPRC · Issuance","standard":"ETSI TS 119 602 / http://uri.etsi.org/19602/SvcType/WRPRC/Issuance","color":"#9333ea","color_bg":"#9333ea1f","trust_anchor":"lote-wrprc.jwt","trust_anchor_cert_id":"ca-wrprc-signer","root_ca":{"id":"ca-root-wrprc","name":"DEMO Root AC WRPRC (Idakto)","role":"root","issuer_id":"","serial_hex":"626563547B1CA257B7BB49E3E1AEC0E0","sha256":"69E21CB9EFFF42A21FEBE10CDFFA282A8665BCED4CA928F67EEC824FA40EC4DD","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrprc.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrprc.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 130790780221451458621081869810268029152 (0x626563547b1ca257b7bb49e3e1aec0e0)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 042bfb60d8b18177aa3f1bf2a03fb4af68b036c8a8a10283ed9b17648ca7f202facd857f9621d58e7b004ce7be341d29205b41644959cb1e1e19f3e9e1d1ece998\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 66:CB:98:CD:15:F5:1F:CC:4A:CB:0D:81:96:76:95:23:B2:9C:7D:ED\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-wrprc-signer","name":"DEMO AC WRPRC (Idakto)","role":"ca","issuer_id":"ca-root-wrprc","serial_hex":"789C706740E4DDBE90E971AF24E5768E","sha256":"6D64AE3C74F0F0FE3C4846CB9ECA2DDC019A2589E57F6261811FC0F415C3AF7A","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wrprc-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wrprc-signer.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 160319637614581408688576169142884071054 (0x789c706740e4ddbe90e971af24e5768e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04ba37f2215729bc6591cb711b73eb24c1ed5b12409df3f373d6daee54a0ff435ca8c702cb72d6a1cc66b2454c4333ccf838d1d395902cf4725697e0ff29207a19\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n C7:63:EE:62:46:8F:57:62:FC:2A:FD:41:A9:5F:D1:29:E8:AA:F4:BF\n X509v3 Authority Key Identifier:\n keyid:66:CB:98:CD:15:F5:1F:CC:4A:CB:0D:81:96:76:95:23:B2:9C:7D:ED\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrprc.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"wrprc-signer","name":"DEMO WRPRC Provider Signer 01","role":"leaf","issuer_id":"ca-wrprc-signer","serial_hex":"875B5CE1D5A7A4BBDEC68F0587003010","sha256":"E3BF685C842E5CFECCF5056CE8C3E3B70AB8A83C2A6FAFA9706028AF7C7A7D30","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrprc-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrprc-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 179920162319233389456884340290079436816 (0x875b5ce1d5a7a4bbdec68f0587003010)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPRC Provider Signer 01,O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000002\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0495c9877cf4cbc4856fef6d56f9cf2215eab03ce36841800eaf52e7d1b2d6f07456f2629677c4e93785bd2464fabbaca582dbce1762fdb97cc1922dac15067b0c\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 80:5F:47:F4:05:A3:0B:DF:BD:11:49:8C:D9:09:C6:D7:58:9A:A3:00\n X509v3 Authority Key Identifier:\n keyid:C7:63:EE:62:46:8F:57:62:FC:2A:FD:41:A9:5F:D1:29:E8:AA:F4:BF\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrprc-signer.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},{"id":"wrprc-statuslist-signer","name":"DEMO WRPRC Status List Signer 01","role":"leaf","issuer_id":"ca-wrprc-signer","serial_hex":"C13C62A05BBF0AEF48749DF6B8277257","sha256":"F66C1EADBDE49FDC77EAC5B9BA11ABA630265D5C07E2EB62B9DD02FBD9F0FAD6","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrprc-statuslist-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrprc-statuslist-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 256854541379042105637088583501883077207 (0xc13c62a05bbf0aef48749df6b8277257)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPRC Status List Signer 01,O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000002\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04f568a77e883ccdeb4f9bda5663eb2f92a763da3f979fb3a1ead4150a0f2c4f706d4e7c60f9f9e1312a0fbdcde69e78878ef373251c3f87457cbd7843045efa01\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 4C:8A:75:6D:D0:58:E9:0F:9C:29:FF:BE:75:33:33:6F:82:F8:09:B9\n X509v3 Authority Key Identifier:\n keyid:C7:63:EE:62:46:8F:57:62:FC:2A:FD:41:A9:5F:D1:29:E8:AA:F4:BF\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrprc-signer.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"tree":{"id":"ca-root-wrprc","name":"DEMO Root AC WRPRC (Idakto)","role":"root","issuer_id":"","serial_hex":"626563547B1CA257B7BB49E3E1AEC0E0","sha256":"69E21CB9EFFF42A21FEBE10CDFFA282A8665BCED4CA928F67EEC824FA40EC4DD","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrprc.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrprc.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 130790780221451458621081869810268029152 (0x626563547b1ca257b7bb49e3e1aec0e0)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 042bfb60d8b18177aa3f1bf2a03fb4af68b036c8a8a10283ed9b17648ca7f202facd857f9621d58e7b004ce7be341d29205b41644959cb1e1e19f3e9e1d1ece998\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 66:CB:98:CD:15:F5:1F:CC:4A:CB:0D:81:96:76:95:23:B2:9C:7D:ED\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-wrprc","trust_anchor":"lote-wrprc.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#9333ea","children":[{"id":"ca-wrprc-signer","name":"DEMO AC WRPRC (Idakto)","role":"ca","issuer_id":"ca-root-wrprc","serial_hex":"789C706740E4DDBE90E971AF24E5768E","sha256":"6D64AE3C74F0F0FE3C4846CB9ECA2DDC019A2589E57F6261811FC0F415C3AF7A","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wrprc-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wrprc-signer.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 160319637614581408688576169142884071054 (0x789c706740e4ddbe90e971af24e5768e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04ba37f2215729bc6591cb711b73eb24c1ed5b12409df3f373d6daee54a0ff435ca8c702cb72d6a1cc66b2454c4333ccf838d1d395902cf4725697e0ff29207a19\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n C7:63:EE:62:46:8F:57:62:FC:2A:FD:41:A9:5F:D1:29:E8:AA:F4:BF\n X509v3 Authority Key Identifier:\n keyid:66:CB:98:CD:15:F5:1F:CC:4A:CB:0D:81:96:76:95:23:B2:9C:7D:ED\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrprc.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-wrprc","trust_anchor":"lote-wrprc.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#9333ea","children":[{"id":"wrprc-signer","name":"DEMO WRPRC Provider Signer 01","role":"leaf","issuer_id":"ca-wrprc-signer","serial_hex":"875B5CE1D5A7A4BBDEC68F0587003010","sha256":"E3BF685C842E5CFECCF5056CE8C3E3B70AB8A83C2A6FAFA9706028AF7C7A7D30","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrprc-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrprc-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 179920162319233389456884340290079436816 (0x875b5ce1d5a7a4bbdec68f0587003010)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPRC Provider Signer 01,O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000002\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0495c9877cf4cbc4856fef6d56f9cf2215eab03ce36841800eaf52e7d1b2d6f07456f2629677c4e93785bd2464fabbaca582dbce1762fdb97cc1922dac15067b0c\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 80:5F:47:F4:05:A3:0B:DF:BD:11:49:8C:D9:09:C6:D7:58:9A:A3:00\n X509v3 Authority Key Identifier:\n keyid:C7:63:EE:62:46:8F:57:62:FC:2A:FD:41:A9:5F:D1:29:E8:AA:F4:BF\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrprc-signer.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#9333ea","children":[]},{"id":"wrprc-statuslist-signer","name":"DEMO WRPRC Status List Signer 01","role":"leaf","issuer_id":"ca-wrprc-signer","serial_hex":"C13C62A05BBF0AEF48749DF6B8277257","sha256":"F66C1EADBDE49FDC77EAC5B9BA11ABA630265D5C07E2EB62B9DD02FBD9F0FAD6","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrprc-statuslist-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrprc-statuslist-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 256854541379042105637088583501883077207 (0xc13c62a05bbf0aef48749df6b8277257)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPRC Status List Signer 01,O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000002\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04f568a77e883ccdeb4f9bda5663eb2f92a763da3f979fb3a1ead4150a0f2c4f706d4e7c60f9f9e1312a0fbdcde69e78878ef373251c3f87457cbd7843045efa01\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 4C:8A:75:6D:D0:58:E9:0F:9C:29:FF:BE:75:33:33:6F:82:F8:09:B9\n X509v3 Authority Key Identifier:\n keyid:C7:63:EE:62:46:8F:57:62:FC:2A:FD:41:A9:5F:D1:29:E8:AA:F4:BF\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrprc-signer.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":true,"trust_list_id":"lote-wrprc","trust_anchor":"lote-wrprc.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#9333ea","children":[]}]}]}},{"number":6,"id":"branch-ca-pid-issuance","category":"jwt","category_name":"Pilier LoTE (JWT — ETSI TS 119 602)","name":"PID Provider · PID · Issuance","standard":"ETSI TS 119 602 / http://uri.etsi.org/19602/SvcType/PID/Issuance","color":"#0891b2","color_bg":"#0891b21f","trust_anchor":"lote-pid.jwt","trust_anchor_cert_id":"ca-pid-issuance","root_ca":{"id":"ca-root-pid","name":"DEMO Root AC PID Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"EFF38E57ADEC25BA38FEF7E63E86CF2C","sha256":"86A86D986517C671DD71434D5649971208377E505A6F8BF37E10F78013402BD5","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 318950106178059105371223374902948450092 (0xeff38e57adec25ba38fef7e63e86cf2c)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0400d71b8963d9cfda4b7152eb377e90d6f2583e65053cb955351a7e106b7c97ea6aff5fb87fe26acad206b90d2b3d224111f2f1c09dbf10db5501c49b3f6d5bec\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 24:EB:34:8C:22:D7:B9:67:0D:14:CC:32:9A:0F:D0:D9:EA:B4:80:A9\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-pid-issuance","name":"DEMO AC PID Provider Issuance (Idakto)","role":"ca","issuer_id":"ca-root-pid","serial_hex":"6B12112FEEB6C4E2A3B7857418F366BE","sha256":"AAB2CD36648E15C980E0D2BA792D1B097709094BE92353D407F6C0AC6EFDCBCE","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-issuance.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-issuance.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-issuance.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 142321205491004912148083814841476933310 (0x6b12112feeb6c4e2a3b7857418f366be)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC PID Provider Issuance (Idakto),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04da055b0f9a027b8f59b4317791b98927b6afe23c92a2e4460612c61f5f848d84fbc3fe29d43fa8319ef42c12ad4dd4711357be228603de2ecb1732b59930454a\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 54:44:98:E0:E3:CE:76:7D:43:5D:8F:03:A4:01:A3:7B:89:BA:C2:53\n X509v3 Authority Key Identifier:\n keyid:24:EB:34:8C:22:D7:B9:67:0D:14:CC:32:9A:0F:D0:D9:EA:B4:80:A9\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"pidprovider-issuer-metadata-signer","name":"DEMO PID Provider (DPOP) 01","role":"leaf","issuer_id":"ca-pid-issuance","serial_hex":"28E295D456553AF46602174A1F50A807","sha256":"CD1B90F2CE8F30255D8A4A2F6EA914B6C9D866890C3D5887AEDCB940EDC62D76","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pidprovider-issuer-metadata-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pidprovider-issuer-metadata-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 54345617823545651028047855517053265927 (0x28e295d456553af46602174a1f50a807)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC PID Provider Issuance (Idakto),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO PID Provider (DPOP) 01,O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0480ca16e8eba91fe57192857c6dc5a0c569a9d95e2c705a5ed610ca1147d02d260be815af2a6fbf1f2e9b8e5b62c765ae3964175f37c2a85002a6c495bca75481\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 53:F9:ED:EE:41:41:EE:AE:55:4B:DC:C0:0D:84:85:81:F9:83:51:7A\n X509v3 Authority Key Identifier:\n keyid:54:44:98:E0:E3:CE:76:7D:43:5D:8F:03:A4:01:A3:7B:89:BA:C2:53\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"tree":{"id":"ca-root-pid","name":"DEMO Root AC PID Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"EFF38E57ADEC25BA38FEF7E63E86CF2C","sha256":"86A86D986517C671DD71434D5649971208377E505A6F8BF37E10F78013402BD5","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 318950106178059105371223374902948450092 (0xeff38e57adec25ba38fef7e63e86cf2c)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0400d71b8963d9cfda4b7152eb377e90d6f2583e65053cb955351a7e106b7c97ea6aff5fb87fe26acad206b90d2b3d224111f2f1c09dbf10db5501c49b3f6d5bec\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 24:EB:34:8C:22:D7:B9:67:0D:14:CC:32:9A:0F:D0:D9:EA:B4:80:A9\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-pid","trust_anchor":"lote-pid.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0891b2","children":[{"id":"ca-pid-issuance","name":"DEMO AC PID Provider Issuance (Idakto)","role":"ca","issuer_id":"ca-root-pid","serial_hex":"6B12112FEEB6C4E2A3B7857418F366BE","sha256":"AAB2CD36648E15C980E0D2BA792D1B097709094BE92353D407F6C0AC6EFDCBCE","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-issuance.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-issuance.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-issuance.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 142321205491004912148083814841476933310 (0x6b12112feeb6c4e2a3b7857418f366be)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC PID Provider Issuance (Idakto),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04da055b0f9a027b8f59b4317791b98927b6afe23c92a2e4460612c61f5f848d84fbc3fe29d43fa8319ef42c12ad4dd4711357be228603de2ecb1732b59930454a\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 54:44:98:E0:E3:CE:76:7D:43:5D:8F:03:A4:01:A3:7B:89:BA:C2:53\n X509v3 Authority Key Identifier:\n keyid:24:EB:34:8C:22:D7:B9:67:0D:14:CC:32:9A:0F:D0:D9:EA:B4:80:A9\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-pid","trust_anchor":"lote-pid.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0891b2","children":[{"id":"pidprovider-issuer-metadata-signer","name":"DEMO PID Provider (DPOP) 01","role":"leaf","issuer_id":"ca-pid-issuance","serial_hex":"28E295D456553AF46602174A1F50A807","sha256":"CD1B90F2CE8F30255D8A4A2F6EA914B6C9D866890C3D5887AEDCB940EDC62D76","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pidprovider-issuer-metadata-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pidprovider-issuer-metadata-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 54345617823545651028047855517053265927 (0x28e295d456553af46602174a1f50a807)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC PID Provider Issuance (Idakto),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO PID Provider (DPOP) 01,O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0480ca16e8eba91fe57192857c6dc5a0c569a9d95e2c705a5ed610ca1147d02d260be815af2a6fbf1f2e9b8e5b62c765ae3964175f37c2a85002a6c495bca75481\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 53:F9:ED:EE:41:41:EE:AE:55:4B:DC:C0:0D:84:85:81:F9:83:51:7A\n X509v3 Authority Key Identifier:\n keyid:54:44:98:E0:E3:CE:76:7D:43:5D:8F:03:A4:01:A3:7B:89:BA:C2:53\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#0891b2","children":[]}]}]}},{"number":7,"id":"branch-ca-pid-revocation","category":"jwt","category_name":"Pilier LoTE (JWT — ETSI TS 119 602)","name":"PID Provider · PID · Revocation","standard":"ETSI TS 119 602 / http://uri.etsi.org/19602/SvcType/PID/Revocation","color":"#0891b2","color_bg":"#0891b21f","trust_anchor":"lote-pid.jwt","trust_anchor_cert_id":"ca-pid-revocation","root_ca":{"id":"ca-root-pid","name":"DEMO Root AC PID Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"EFF38E57ADEC25BA38FEF7E63E86CF2C","sha256":"86A86D986517C671DD71434D5649971208377E505A6F8BF37E10F78013402BD5","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 318950106178059105371223374902948450092 (0xeff38e57adec25ba38fef7e63e86cf2c)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0400d71b8963d9cfda4b7152eb377e90d6f2583e65053cb955351a7e106b7c97ea6aff5fb87fe26acad206b90d2b3d224111f2f1c09dbf10db5501c49b3f6d5bec\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 24:EB:34:8C:22:D7:B9:67:0D:14:CC:32:9A:0F:D0:D9:EA:B4:80:A9\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-pid-revocation","name":"DEMO AC PID Provider Revocation (Idakto)","role":"ca","issuer_id":"ca-root-pid","serial_hex":"CC8AFCCD977D143C022205BD630550ED","sha256":"031C0233DEC5B19DB649370D90F6986580D377A42CD4784F08FEB3A3B74C1143","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-revocation.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-revocation.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-revocation.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 271884175562477527695012817662466412781 (0xcc8afccd977d143c022205bd630550ed)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC PID Provider Revocation (Idakto),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04abfd0aea995aac058c73d4258953612599ef4ae1f907e9e16a8127ec419a7ed4dd55a41ce050883977d535b23a3c390f8eb1f782f7375fcdfc7fa137342fa036\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n C3:10:A4:F9:5C:C5:50:BC:9E:9E:60:AD:D8:D7:CE:48:92:B4:A1:64\n X509v3 Authority Key Identifier:\n keyid:24:EB:34:8C:22:D7:B9:67:0D:14:CC:32:9A:0F:D0:D9:EA:B4:80:A9\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"pid-tsl-signer","name":"DEMO PID Provider (TSL Signer) 01","role":"leaf","issuer_id":"ca-pid-revocation","serial_hex":"38A3B7CBF15B170087EFC0DC74298459","sha256":"1106DED0B436EF400FAB2FDEB97C79418916973CCA2DE756E556E3904F00F8D0","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pid-tsl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pid-tsl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-revocation.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 75286839990866932678165238700808176729 (0x38a3b7cbf15b170087efc0dc74298459)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC PID Provider Revocation (Idakto),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO PID Provider (TSL Signer) 01,O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04c5f0258f940e7690d33cb68bef58e87482ba9bc2494db552ea4df242640804a39fb8ae5498549507ac5b877cfd97e9ecbf730ee509e4c09978e99140ee1fc77b\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 74:DD:F1:A2:40:FA:DC:D1:D7:4C:58:78:F3:E8:49:6A:79:6B:92:D2\n X509v3 Authority Key Identifier:\n keyid:C3:10:A4:F9:5C:C5:50:BC:9E:9E:60:AD:D8:D7:CE:48:92:B4:A1:64\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-revocation.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-revocation.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"tree":{"id":"ca-root-pid","name":"DEMO Root AC PID Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"EFF38E57ADEC25BA38FEF7E63E86CF2C","sha256":"86A86D986517C671DD71434D5649971208377E505A6F8BF37E10F78013402BD5","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 318950106178059105371223374902948450092 (0xeff38e57adec25ba38fef7e63e86cf2c)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0400d71b8963d9cfda4b7152eb377e90d6f2583e65053cb955351a7e106b7c97ea6aff5fb87fe26acad206b90d2b3d224111f2f1c09dbf10db5501c49b3f6d5bec\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 24:EB:34:8C:22:D7:B9:67:0D:14:CC:32:9A:0F:D0:D9:EA:B4:80:A9\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-pid","trust_anchor":"lote-pid.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0891b2","children":[{"id":"ca-pid-revocation","name":"DEMO AC PID Provider Revocation (Idakto)","role":"ca","issuer_id":"ca-root-pid","serial_hex":"CC8AFCCD977D143C022205BD630550ED","sha256":"031C0233DEC5B19DB649370D90F6986580D377A42CD4784F08FEB3A3B74C1143","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-revocation.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-revocation.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-revocation.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 271884175562477527695012817662466412781 (0xcc8afccd977d143c022205bd630550ed)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC PID Provider Revocation (Idakto),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04abfd0aea995aac058c73d4258953612599ef4ae1f907e9e16a8127ec419a7ed4dd55a41ce050883977d535b23a3c390f8eb1f782f7375fcdfc7fa137342fa036\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n C3:10:A4:F9:5C:C5:50:BC:9E:9E:60:AD:D8:D7:CE:48:92:B4:A1:64\n X509v3 Authority Key Identifier:\n keyid:24:EB:34:8C:22:D7:B9:67:0D:14:CC:32:9A:0F:D0:D9:EA:B4:80:A9\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-pid","trust_anchor":"lote-pid.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0891b2","children":[{"id":"pid-tsl-signer","name":"DEMO PID Provider (TSL Signer) 01","role":"leaf","issuer_id":"ca-pid-revocation","serial_hex":"38A3B7CBF15B170087EFC0DC74298459","sha256":"1106DED0B436EF400FAB2FDEB97C79418916973CCA2DE756E556E3904F00F8D0","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pid-tsl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pid-tsl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-revocation.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 75286839990866932678165238700808176729 (0x38a3b7cbf15b170087efc0dc74298459)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC PID Provider Revocation (Idakto),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO PID Provider (TSL Signer) 01,O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04c5f0258f940e7690d33cb68bef58e87482ba9bc2494db552ea4df242640804a39fb8ae5498549507ac5b877cfd97e9ecbf730ee509e4c09978e99140ee1fc77b\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 74:DD:F1:A2:40:FA:DC:D1:D7:4C:58:78:F3:E8:49:6A:79:6B:92:D2\n X509v3 Authority Key Identifier:\n keyid:C3:10:A4:F9:5C:C5:50:BC:9E:9E:60:AD:D8:D7:CE:48:92:B4:A1:64\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-revocation.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-revocation.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#0891b2","children":[]}]}]}},{"number":8,"id":"branch-iaca-pid","category":"jwt","category_name":"Pilier LoTE (JWT — ETSI TS 119 602)","name":"PID Provider · PID · Issuance","standard":"ETSI TS 119 602 / http://uri.etsi.org/19602/SvcType/PID/Issuance","color":"#4f46e5","color_bg":"#4f46e51f","trust_anchor":"lote-pid.jwt","trust_anchor_cert_id":"iaca-pid","root_ca":{"id":"iaca-pid","name":"DEMO IACA National Issuing Authority (PID)","role":"root","issuer_id":"","serial_hex":"6BF856B0E1E90E57FEB0E56DD570ECC9","sha256":"7AA8C70FF6C6B60889450CF10D94F39C301224BAA1FCCF6A2B869F4FBEB759EA","not_before":"2026-11-10T12:54:10Z","not_after":"2036-11-07T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/iaca-pid.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/iaca-pid.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl","issuer_alt_name":["email:iaca-pid@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 143516843471201026868885558856965483721 (0x6bf856b0e1e90e57feb0e56dd570ecc9)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO IACA National Issuing Authority (PID),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 07 Nov 2036 12:54:10 UTC (2036-11-07T12:54:10Z)\n Subject: CN=DEMO IACA National Issuing Authority (PID),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04ffdec5b4bc10acd49a5742a148caa9e6b023cd8d3dd1c44309e54e5e33e7fe1d13716ccb95e3a4e51766f327730606b028017995ba2693790ecb2e12972a0bf3\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n CD:3A:87:5C:DC:88:F8:54:FC:FC:31:88:08:97:2B:03:D3:FB:54:F8\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl\n X509v3 Issuer Alternative Name:\n email:iaca-pid@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[],"leaves":[{"id":"pid-attestation-signer","name":"DEMO PID Provider (Attestation Signer) 01","role":"leaf","issuer_id":"iaca-pid","serial_hex":"387310CFDBB71A01DC060EB9D9712737","sha256":"8CAF93692EE933FE0A0CEF656B243A0DEB7A474EB73DD789608867D012C63CE8","not_before":"2026-11-10T12:54:10Z","not_after":"2027-11-10T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":["1.0.18013.5.1.2"],"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pid-attestation-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pid-attestation-signer.pem","issuer_alt_name":["email:iaca-pid@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 75034222889468666331032589076945512247 (0x387310cfdbb71a01dc060eb9d9712737)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO IACA National Issuing Authority (PID),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Wed, 10 Nov 2027 12:54:10 UTC (2027-11-10T12:54:10Z)\n Subject: CN=DEMO PID Provider (Attestation Signer) 01,O=DEMO PID Provider (Idakto),C=FR\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04a0fe6d1c07c2dbfb25680a0fe6006278544e87464833572b69710eb6db137ff1e2ccc7d47a60a95978ee416f0e4d2781989c714ccb2697856af4a26613bb9265\n X509v3 Extensions:\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Extended Key Usage: (critical)\n 1.0.18013.5.1.2\n X509v3 Subject Key Identifier:\n 97:70:15:45:56:F0:DC:9F:8E:C6:FD:23:5B:27:B7:34:1C:69:B3:9A\n X509v3 Authority Key Identifier:\n keyid:CD:3A:87:5C:DC:88:F8:54:FC:FC:31:88:08:97:2B:03:D3:FB:54:F8\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/iaca-pid.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl\n X509v3 Issuer Alternative Name:\n email:iaca-pid@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"tree":{"id":"iaca-pid","name":"DEMO IACA National Issuing Authority (PID)","role":"root","issuer_id":"","serial_hex":"6BF856B0E1E90E57FEB0E56DD570ECC9","sha256":"7AA8C70FF6C6B60889450CF10D94F39C301224BAA1FCCF6A2B869F4FBEB759EA","not_before":"2026-11-10T12:54:10Z","not_after":"2036-11-07T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/iaca-pid.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/iaca-pid.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl","issuer_alt_name":["email:iaca-pid@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 143516843471201026868885558856965483721 (0x6bf856b0e1e90e57feb0e56dd570ecc9)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO IACA National Issuing Authority (PID),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 07 Nov 2036 12:54:10 UTC (2036-11-07T12:54:10Z)\n Subject: CN=DEMO IACA National Issuing Authority (PID),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04ffdec5b4bc10acd49a5742a148caa9e6b023cd8d3dd1c44309e54e5e33e7fe1d13716ccb95e3a4e51766f327730606b028017995ba2693790ecb2e12972a0bf3\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n CD:3A:87:5C:DC:88:F8:54:FC:FC:31:88:08:97:2B:03:D3:FB:54:F8\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl\n X509v3 Issuer Alternative Name:\n email:iaca-pid@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-pid","trust_anchor":"lote-pid.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#4f46e5","children":[{"id":"pid-attestation-signer","name":"DEMO PID Provider (Attestation Signer) 01","role":"leaf","issuer_id":"iaca-pid","serial_hex":"387310CFDBB71A01DC060EB9D9712737","sha256":"8CAF93692EE933FE0A0CEF656B243A0DEB7A474EB73DD789608867D012C63CE8","not_before":"2026-11-10T12:54:10Z","not_after":"2027-11-10T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":["1.0.18013.5.1.2"],"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pid-attestation-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pid-attestation-signer.pem","issuer_alt_name":["email:iaca-pid@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 75034222889468666331032589076945512247 (0x387310cfdbb71a01dc060eb9d9712737)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO IACA National Issuing Authority (PID),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Wed, 10 Nov 2027 12:54:10 UTC (2027-11-10T12:54:10Z)\n Subject: CN=DEMO PID Provider (Attestation Signer) 01,O=DEMO PID Provider (Idakto),C=FR\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04a0fe6d1c07c2dbfb25680a0fe6006278544e87464833572b69710eb6db137ff1e2ccc7d47a60a95978ee416f0e4d2781989c714ccb2697856af4a26613bb9265\n X509v3 Extensions:\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Extended Key Usage: (critical)\n 1.0.18013.5.1.2\n X509v3 Subject Key Identifier:\n 97:70:15:45:56:F0:DC:9F:8E:C6:FD:23:5B:27:B7:34:1C:69:B3:9A\n X509v3 Authority Key Identifier:\n keyid:CD:3A:87:5C:DC:88:F8:54:FC:FC:31:88:08:97:2B:03:D3:FB:54:F8\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/iaca-pid.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl\n X509v3 Issuer Alternative Name:\n email:iaca-pid@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#4f46e5","children":[]}]}},{"number":9,"id":"branch-ca-wallet-provider-issuance","category":"jwt","category_name":"Pilier LoTE (JWT — ETSI TS 119 602)","name":"Wallet Provider · WalletSolution · Issuance","standard":"ETSI TS 119 602 / http://uri.etsi.org/19602/SvcType/WalletSolution/Issuance","color":"#d97706","color_bg":"#d977061f","trust_anchor":"lote-wallet.jwt","trust_anchor_cert_id":"ca-wallet-provider-issuance","root_ca":{"id":"ca-root-wp","name":"DEMO Root AC Wallet Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"4538D1DC7A8B25F2C961D5E4FCB01A63","sha256":"98F639A50C84592B3E21363CE5232BCE0703EB26D0D19706CF25A75EBDDAF8C5","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 92011756824965453008146849017092905571 (0x4538d1dc7a8b25f2c961d5e4fcb01a63)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 045465865521c2dd7e14c6d047859fed1ea6fe742a00e9fd1c1d6c3a74c68783f9f7ac7f29e9caa0a341c232c51cd59d88f0eb8db79cb1d8ab4d3c856ef1f19129\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 37:89:18:A8:16:EA:9A:21:64:65:86:57:54:86:05:9A:0A:44:6F:4C\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-wallet-provider-issuance","name":"DEMO AC Wallet Provider Issuance (Idakto)","role":"ca","issuer_id":"ca-root-wp","serial_hex":"686240FD393D63455490A2C91A76EE29","sha256":"4E34C09D401AC345E149F499CEE6D91D470555CFE6CD9BE188EBE0E7390442C6","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-issuance.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-issuance.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 138749874790422272533390322458374368809 (0x686240fd393d63455490a2c91a76ee29)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Wallet Provider Issuance (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 046e6c11b350c52c818715287254954ef7eafb342d15b873f45dba0bcb74445d072eb9651338a4af3b151655c54e8e7371b43ebbd3447a5c6715831030757828f7\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n B5:0C:EC:87:2C:3F:D1:66:B4:AE:9C:9D:66:06:D6:06:8E:25:AD:C7\n X509v3 Authority Key Identifier:\n keyid:37:89:18:A8:16:EA:9A:21:64:65:86:57:54:86:05:9A:0A:44:6F:4C\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"wp-wia-signer","name":"DEMO Wallet Provider (WIA) 01","role":"leaf","issuer_id":"ca-wallet-provider-issuance","serial_hex":"C24C1566A3E15D2A1BF6129618129EE3","sha256":"917063B5BC2222DDB851FA11873CAE03EC6A83AF96CD501ED567F48E8D20C466","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-wia-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-wia-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 258265279806115084250301738907574902499 (0xc24c1566a3e15d2a1bf6129618129ee3)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Wallet Provider Issuance (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Wallet Provider (WIA) 01,O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 040783a9bd2fc97627b4fc9285ae7718e0b73b6d2c769b655f79de41743e641faaa648d4dfe716a2ca84375bd6a6721411aa7504736f42383c43671955d0fe7e5d\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 59:12:62:48:01:BF:EF:17:36:3F:A8:53:CD:2C:2F:5D:DD:16:74:4B\n X509v3 Authority Key Identifier:\n keyid:B5:0C:EC:87:2C:3F:D1:66:B4:AE:9C:9D:66:06:D6:06:8E:25:AD:C7\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},{"id":"wp-ka-signer","name":"DEMO Wallet Provider (KA) 01","role":"leaf","issuer_id":"ca-wallet-provider-issuance","serial_hex":"D6460495E7EBF9BEFAE4162B5E233B","sha256":"80B765CF7D65171C0DF3F271B427606AC1539A23A7E3F46787BE1772134DAE3B","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-ka-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-ka-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 1112571659705001477328258591123972923 (0xd6460495e7ebf9befae4162b5e233b)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Wallet Provider Issuance (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Wallet Provider (KA) 01,O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 047eacbeeafc6f73a6fe94fa920eacbe64bbdc7497abe87050bb24ca5f7787a468fb2d4b42732084d3785e683c07839cbb0d2c83c8f1283bd346cbd07b182e0925\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 73:87:BE:11:CB:E8:40:94:54:99:78:A8:5D:E3:62:E4:AC:27:A2:DD\n X509v3 Authority Key Identifier:\n keyid:B5:0C:EC:87:2C:3F:D1:66:B4:AE:9C:9D:66:06:D6:06:8E:25:AD:C7\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"tree":{"id":"ca-root-wp","name":"DEMO Root AC Wallet Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"4538D1DC7A8B25F2C961D5E4FCB01A63","sha256":"98F639A50C84592B3E21363CE5232BCE0703EB26D0D19706CF25A75EBDDAF8C5","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 92011756824965453008146849017092905571 (0x4538d1dc7a8b25f2c961d5e4fcb01a63)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 045465865521c2dd7e14c6d047859fed1ea6fe742a00e9fd1c1d6c3a74c68783f9f7ac7f29e9caa0a341c232c51cd59d88f0eb8db79cb1d8ab4d3c856ef1f19129\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 37:89:18:A8:16:EA:9A:21:64:65:86:57:54:86:05:9A:0A:44:6F:4C\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-wallet","trust_anchor":"lote-wallet.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"ca-wallet-provider-issuance","name":"DEMO AC Wallet Provider Issuance (Idakto)","role":"ca","issuer_id":"ca-root-wp","serial_hex":"686240FD393D63455490A2C91A76EE29","sha256":"4E34C09D401AC345E149F499CEE6D91D470555CFE6CD9BE188EBE0E7390442C6","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-issuance.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-issuance.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 138749874790422272533390322458374368809 (0x686240fd393d63455490a2c91a76ee29)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Wallet Provider Issuance (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 046e6c11b350c52c818715287254954ef7eafb342d15b873f45dba0bcb74445d072eb9651338a4af3b151655c54e8e7371b43ebbd3447a5c6715831030757828f7\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n B5:0C:EC:87:2C:3F:D1:66:B4:AE:9C:9D:66:06:D6:06:8E:25:AD:C7\n X509v3 Authority Key Identifier:\n keyid:37:89:18:A8:16:EA:9A:21:64:65:86:57:54:86:05:9A:0A:44:6F:4C\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-wallet","trust_anchor":"lote-wallet.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"wp-wia-signer","name":"DEMO Wallet Provider (WIA) 01","role":"leaf","issuer_id":"ca-wallet-provider-issuance","serial_hex":"C24C1566A3E15D2A1BF6129618129EE3","sha256":"917063B5BC2222DDB851FA11873CAE03EC6A83AF96CD501ED567F48E8D20C466","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-wia-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-wia-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 258265279806115084250301738907574902499 (0xc24c1566a3e15d2a1bf6129618129ee3)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Wallet Provider Issuance (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Wallet Provider (WIA) 01,O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 040783a9bd2fc97627b4fc9285ae7718e0b73b6d2c769b655f79de41743e641faaa648d4dfe716a2ca84375bd6a6721411aa7504736f42383c43671955d0fe7e5d\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 59:12:62:48:01:BF:EF:17:36:3F:A8:53:CD:2C:2F:5D:DD:16:74:4B\n X509v3 Authority Key Identifier:\n keyid:B5:0C:EC:87:2C:3F:D1:66:B4:AE:9C:9D:66:06:D6:06:8E:25:AD:C7\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]},{"id":"wp-ka-signer","name":"DEMO Wallet Provider (KA) 01","role":"leaf","issuer_id":"ca-wallet-provider-issuance","serial_hex":"D6460495E7EBF9BEFAE4162B5E233B","sha256":"80B765CF7D65171C0DF3F271B427606AC1539A23A7E3F46787BE1772134DAE3B","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-ka-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-ka-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 1112571659705001477328258591123972923 (0xd6460495e7ebf9befae4162b5e233b)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Wallet Provider Issuance (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Wallet Provider (KA) 01,O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 047eacbeeafc6f73a6fe94fa920eacbe64bbdc7497abe87050bb24ca5f7787a468fb2d4b42732084d3785e683c07839cbb0d2c83c8f1283bd346cbd07b182e0925\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 73:87:BE:11:CB:E8:40:94:54:99:78:A8:5D:E3:62:E4:AC:27:A2:DD\n X509v3 Authority Key Identifier:\n keyid:B5:0C:EC:87:2C:3F:D1:66:B4:AE:9C:9D:66:06:D6:06:8E:25:AD:C7\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]}]}]}},{"number":10,"id":"branch-ca-wallet-provider-revocation","category":"jwt","category_name":"Pilier LoTE (JWT — ETSI TS 119 602)","name":"Wallet Provider · WalletSolution · Revocation","standard":"ETSI TS 119 602 / http://uri.etsi.org/19602/SvcType/WalletSolution/Revocation","color":"#d97706","color_bg":"#d977061f","trust_anchor":"lote-wallet.jwt","trust_anchor_cert_id":"ca-wallet-provider-revocation","root_ca":{"id":"ca-root-wp","name":"DEMO Root AC Wallet Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"4538D1DC7A8B25F2C961D5E4FCB01A63","sha256":"98F639A50C84592B3E21363CE5232BCE0703EB26D0D19706CF25A75EBDDAF8C5","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 92011756824965453008146849017092905571 (0x4538d1dc7a8b25f2c961d5e4fcb01a63)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 045465865521c2dd7e14c6d047859fed1ea6fe742a00e9fd1c1d6c3a74c68783f9f7ac7f29e9caa0a341c232c51cd59d88f0eb8db79cb1d8ab4d3c856ef1f19129\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 37:89:18:A8:16:EA:9A:21:64:65:86:57:54:86:05:9A:0A:44:6F:4C\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-wallet-provider-revocation","name":"DEMO AC Wallet Provider Revocation (Idakto)","role":"ca","issuer_id":"ca-root-wp","serial_hex":"D033D89F850C4A2B837E12AB6238C983","sha256":"EEFA6C8CCA476B944E73E8B019224EB938770DDCEE74B113A430BB6DE85534B1","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-revocation.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-revocation.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-revocation.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 276748623901976369975767202237947365763 (0xd033d89f850c4a2b837e12ab6238c983)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Wallet Provider Revocation (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0408b7bcaffd3dc235c7fcd68f3e014271e1748daf257663c9a0e7e33c96299ff89f9bfa1fe7948b7f9ab4818151f3fae6b22b201df4ca931d40fa0843543587d9\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 10:05:D9:BE:4E:55:79:CB:10:8B:1A:1C:F9:E5:DA:52:FB:03:13:F0\n X509v3 Authority Key Identifier:\n keyid:37:89:18:A8:16:EA:9A:21:64:65:86:57:54:86:05:9A:0A:44:6F:4C\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"wp-tsl-signer","name":"DEMO Wallet Provider (KA \u0026 WIA TSL Signer) 01","role":"leaf","issuer_id":"ca-wallet-provider-revocation","serial_hex":"39A1DD67A0D1A0901477CAB3D29FC3AC","sha256":"BEB3E9BF89B8625AE781296D74BFE81637C690DD8DA2A7614C84BC6387C576FF","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-tsl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-tsl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-revocation.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 76606446176758483296258821350102123436 (0x39a1dd67a0d1a0901477cab3d29fc3ac)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Wallet Provider Revocation (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Wallet Provider (KA \u0026 WIA TSL Signer) 01,O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04d22ba9289d614c1464688034f26ecd7a0e65ca25a3155ddfdbd40844bafcd8c82c4531d37342e2605212eb530be596b8481d00fbe6a5f90bf947f80727e9a706\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n E2:36:F5:A0:45:8D:8E:C5:6F:1B:49:9D:AC:01:14:61:27:26:21:13\n X509v3 Authority Key Identifier:\n keyid:10:05:D9:BE:4E:55:79:CB:10:8B:1A:1C:F9:E5:DA:52:FB:03:13:F0\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-revocation.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-revocation.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"tree":{"id":"ca-root-wp","name":"DEMO Root AC Wallet Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"4538D1DC7A8B25F2C961D5E4FCB01A63","sha256":"98F639A50C84592B3E21363CE5232BCE0703EB26D0D19706CF25A75EBDDAF8C5","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 92011756824965453008146849017092905571 (0x4538d1dc7a8b25f2c961d5e4fcb01a63)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 045465865521c2dd7e14c6d047859fed1ea6fe742a00e9fd1c1d6c3a74c68783f9f7ac7f29e9caa0a341c232c51cd59d88f0eb8db79cb1d8ab4d3c856ef1f19129\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 37:89:18:A8:16:EA:9A:21:64:65:86:57:54:86:05:9A:0A:44:6F:4C\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-wallet","trust_anchor":"lote-wallet.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"ca-wallet-provider-revocation","name":"DEMO AC Wallet Provider Revocation (Idakto)","role":"ca","issuer_id":"ca-root-wp","serial_hex":"D033D89F850C4A2B837E12AB6238C983","sha256":"EEFA6C8CCA476B944E73E8B019224EB938770DDCEE74B113A430BB6DE85534B1","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-revocation.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-revocation.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-revocation.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 276748623901976369975767202237947365763 (0xd033d89f850c4a2b837e12ab6238c983)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Wallet Provider Revocation (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0408b7bcaffd3dc235c7fcd68f3e014271e1748daf257663c9a0e7e33c96299ff89f9bfa1fe7948b7f9ab4818151f3fae6b22b201df4ca931d40fa0843543587d9\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 10:05:D9:BE:4E:55:79:CB:10:8B:1A:1C:F9:E5:DA:52:FB:03:13:F0\n X509v3 Authority Key Identifier:\n keyid:37:89:18:A8:16:EA:9A:21:64:65:86:57:54:86:05:9A:0A:44:6F:4C\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-wallet","trust_anchor":"lote-wallet.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"wp-tsl-signer","name":"DEMO Wallet Provider (KA \u0026 WIA TSL Signer) 01","role":"leaf","issuer_id":"ca-wallet-provider-revocation","serial_hex":"39A1DD67A0D1A0901477CAB3D29FC3AC","sha256":"BEB3E9BF89B8625AE781296D74BFE81637C690DD8DA2A7614C84BC6387C576FF","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-tsl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-tsl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-revocation.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 76606446176758483296258821350102123436 (0x39a1dd67a0d1a0901477cab3d29fc3ac)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Wallet Provider Revocation (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Wallet Provider (KA \u0026 WIA TSL Signer) 01,O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04d22ba9289d614c1464688034f26ecd7a0e65ca25a3155ddfdbd40844bafcd8c82c4531d37342e2605212eb530be596b8481d00fbe6a5f90bf947f80727e9a706\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n E2:36:F5:A0:45:8D:8E:C5:6F:1B:49:9D:AC:01:14:61:27:26:21:13\n X509v3 Authority Key Identifier:\n keyid:10:05:D9:BE:4E:55:79:CB:10:8B:1A:1C:F9:E5:DA:52:FB:03:13:F0\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-revocation.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-revocation.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]}]}]}},{"number":11,"id":"branch-ca-pubeaa-issuance","category":"jwt","category_name":"Pilier LoTE (JWT — ETSI TS 119 602)","name":"PubEAA Provider · PubEAA · Issuance","standard":"ETSI TS 119 602 / http://uri.etsi.org/19602/SvcType/PubEAA/Issuance","color":"#d97706","color_bg":"#d977061f","trust_anchor":"lote-pubeaa.jwt","trust_anchor_cert_id":"ca-pubeaa-issuance","root_ca":{"id":"ca-root-pubeaa","name":"DEMO Root AC PubEAA Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"5F4F010F572570255A4AA631C9E99E8E","sha256":"D24DE11AADE4D3679FFF848DBC61D06188A56C40C8D0789FF8658A4001F2A48D","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 126686872549193756378015637517550329486 (0x5f4f010f572570255a4aa631c9e99e8e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 043e88ac63a7dd60fc5a8354df308fc023cff7b26ea1c069f47557c828084e3f28b3c379904e4262d3a2430b221868fbd5febf7fda1e7e5c4ad1ce4246cd4fdaad\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 26:03:AF:98:55:4C:32:1C:C7:48:DE:A8:15:E9:CC:9D:F3:5D:E7:E5\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-pubeaa-issuance","name":"DEMO AC PubEAA Provider Issuance (Idakto)","role":"ca","issuer_id":"ca-root-pubeaa","serial_hex":"688599DB2DE940BBC49A9D778EEBDF42","sha256":"2635D1328D351E70CFA12071D741D0F0D6768667132BCEFA66AB0B49E0479E89","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-issuance.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-issuance.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-issuance.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 138933407617662143039148878042487316290 (0x688599db2de940bbc49a9d778eebdf42)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC PubEAA Provider Issuance (Idakto),O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 048dc3f6f82ab728e407f3fbe6a1305cd150cb752d95df5a3a27210719747aa18b596f3d5a1946bd3c1710d60f4e9798e6b4165b08ac1436d960ba0af85b19c0f5\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n DF:13:A5:E3:8C:31:0A:F7:71:03:93:93:45:E6:9B:82:DE:24:0C:D5\n X509v3 Authority Key Identifier:\n keyid:26:03:AF:98:55:4C:32:1C:C7:48:DE:A8:15:E9:CC:9D:F3:5D:E7:E5\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"pubeaa-attestation-signer","name":"DEMO PubEAA Provider (Attestation Signer) 01","role":"leaf","issuer_id":"ca-pubeaa-issuance","serial_hex":"2AC06F6F139453701645B6AE8AACF05","sha256":"05DB5CC754F6DC5AAA288C219F8E8D06F685A900D2808F9E193810B9200C857F","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":true,"qc_types":["0.4.0.194126.1.3"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-attestation-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-attestation-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 3551672310478545513585194276118777605 (0x2ac06f6f139453701645b6ae8aacf05)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC PubEAA Provider Issuance (Idakto),O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO PubEAA Provider (Attestation Signer) 01,O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 041c0af3d617aa789ecceead241e889823e46ebb7c006672fc7292881b1900af3a967c242597adaa53524ff04a0939a9b4041c514b1ebc4d3e0ad3a5868726a71f\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n D1:96:0F:AF:49:67:49:38:1A:BD:D5:36:36:4B:22:90:09:D4:87:A2\n X509v3 Authority Key Identifier:\n keyid:DF:13:A5:E3:8C:31:0A:F7:71:03:93:93:45:E6:9B:82:DE:24:0C:D5\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194112.1.3 (QCP-l-qscd (Qualified Legal with QSCD))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcSSCD : Clé privée sur QSCD / SSCD (Dispositif Qualifié)\n id-etsi-qcs-QcType : 0.4.0.194126.1.3\n"}],"tree":{"id":"ca-root-pubeaa","name":"DEMO Root AC PubEAA Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"5F4F010F572570255A4AA631C9E99E8E","sha256":"D24DE11AADE4D3679FFF848DBC61D06188A56C40C8D0789FF8658A4001F2A48D","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 126686872549193756378015637517550329486 (0x5f4f010f572570255a4aa631c9e99e8e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 043e88ac63a7dd60fc5a8354df308fc023cff7b26ea1c069f47557c828084e3f28b3c379904e4262d3a2430b221868fbd5febf7fda1e7e5c4ad1ce4246cd4fdaad\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 26:03:AF:98:55:4C:32:1C:C7:48:DE:A8:15:E9:CC:9D:F3:5D:E7:E5\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-pubeaa","trust_anchor":"lote-pubeaa.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"ca-pubeaa-issuance","name":"DEMO AC PubEAA Provider Issuance (Idakto)","role":"ca","issuer_id":"ca-root-pubeaa","serial_hex":"688599DB2DE940BBC49A9D778EEBDF42","sha256":"2635D1328D351E70CFA12071D741D0F0D6768667132BCEFA66AB0B49E0479E89","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-issuance.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-issuance.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-issuance.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 138933407617662143039148878042487316290 (0x688599db2de940bbc49a9d778eebdf42)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC PubEAA Provider Issuance (Idakto),O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 048dc3f6f82ab728e407f3fbe6a1305cd150cb752d95df5a3a27210719747aa18b596f3d5a1946bd3c1710d60f4e9798e6b4165b08ac1436d960ba0af85b19c0f5\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n DF:13:A5:E3:8C:31:0A:F7:71:03:93:93:45:E6:9B:82:DE:24:0C:D5\n X509v3 Authority Key Identifier:\n keyid:26:03:AF:98:55:4C:32:1C:C7:48:DE:A8:15:E9:CC:9D:F3:5D:E7:E5\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-pubeaa","trust_anchor":"lote-pubeaa.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"pubeaa-attestation-signer","name":"DEMO PubEAA Provider (Attestation Signer) 01","role":"leaf","issuer_id":"ca-pubeaa-issuance","serial_hex":"2AC06F6F139453701645B6AE8AACF05","sha256":"05DB5CC754F6DC5AAA288C219F8E8D06F685A900D2808F9E193810B9200C857F","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":true,"qc_types":["0.4.0.194126.1.3"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-attestation-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-attestation-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 3551672310478545513585194276118777605 (0x2ac06f6f139453701645b6ae8aacf05)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC PubEAA Provider Issuance (Idakto),O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO PubEAA Provider (Attestation Signer) 01,O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 041c0af3d617aa789ecceead241e889823e46ebb7c006672fc7292881b1900af3a967c242597adaa53524ff04a0939a9b4041c514b1ebc4d3e0ad3a5868726a71f\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n D1:96:0F:AF:49:67:49:38:1A:BD:D5:36:36:4B:22:90:09:D4:87:A2\n X509v3 Authority Key Identifier:\n keyid:DF:13:A5:E3:8C:31:0A:F7:71:03:93:93:45:E6:9B:82:DE:24:0C:D5\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194112.1.3 (QCP-l-qscd (Qualified Legal with QSCD))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcSSCD : Clé privée sur QSCD / SSCD (Dispositif Qualifié)\n id-etsi-qcs-QcType : 0.4.0.194126.1.3\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]}]}]}},{"number":12,"id":"branch-ca-pubeaa-revocation","category":"jwt","category_name":"Pilier LoTE (JWT — ETSI TS 119 602)","name":"PubEAA Provider · mDL · Revocation","standard":"ETSI TS 119 602 / http://trust.ec.europa.eu/lists/mDL/SvcType/Revocation","color":"#d97706","color_bg":"#d977061f","trust_anchor":"lote-mdl.jwt","trust_anchor_cert_id":"ca-pubeaa-revocation","root_ca":{"id":"ca-root-pubeaa","name":"DEMO Root AC PubEAA Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"5F4F010F572570255A4AA631C9E99E8E","sha256":"D24DE11AADE4D3679FFF848DBC61D06188A56C40C8D0789FF8658A4001F2A48D","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 126686872549193756378015637517550329486 (0x5f4f010f572570255a4aa631c9e99e8e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 043e88ac63a7dd60fc5a8354df308fc023cff7b26ea1c069f47557c828084e3f28b3c379904e4262d3a2430b221868fbd5febf7fda1e7e5c4ad1ce4246cd4fdaad\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 26:03:AF:98:55:4C:32:1C:C7:48:DE:A8:15:E9:CC:9D:F3:5D:E7:E5\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-pubeaa-revocation","name":"DEMO AC PubEAA Provider Revocation (Idakto)","role":"ca","issuer_id":"ca-root-pubeaa","serial_hex":"CEFF6ECAA6C3086D8C31B4DF3FB1A024","sha256":"451CFA15AC1CE9F01C0A00B61AEB938C13869053ABDDBBEFAAEFD18B47435248","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-revocation.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-revocation.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-revocation.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 275147249951374572393499514474213777444 (0xceff6ecaa6c3086d8c31b4df3fb1a024)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC PubEAA Provider Revocation (Idakto),O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 049a0f8c4ba5782f1500154d7de05f579857bcdd6df86b12f0d0d3599b9c29c89921d0b5dc2d4595a05f8c48e30cf3e86ba7e55f46e8af1ed19653884dcbbf53d1\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n C1:F0:D9:BA:D0:62:88:8F:97:C3:86:84:6D:11:98:7D:AB:46:1B:6D\n X509v3 Authority Key Identifier:\n keyid:26:03:AF:98:55:4C:32:1C:C7:48:DE:A8:15:E9:CC:9D:F3:5D:E7:E5\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"pubeaa-tsl-signer","name":"DEMO PubEAA Provider (TSL Signer) 01","role":"leaf","issuer_id":"ca-pubeaa-revocation","serial_hex":"8BE2BDAB28140E19E499A76BB2826F53","sha256":"165AE67A6341B46F5371D4B9A9FBA299F932CC19E1707716C8A66206DD2D4EC0","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-tsl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-tsl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-revocation.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 185939997439966702982606766619219881811 (0x8be2bdab28140e19e499a76bb2826f53)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC PubEAA Provider Revocation (Idakto),O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO PubEAA Provider (TSL Signer) 01,O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0465e05429ca9388df847486a9930b8c173298830124f497310f479cc7ce72b5232a6042e33a18240d2c44cb47a86675473cec990ace13f395c807736200b5d9ca\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n D2:29:6A:50:7B:38:38:17:56:73:42:AD:A8:6B:6B:65:D3:32:42:18\n X509v3 Authority Key Identifier:\n keyid:C1:F0:D9:BA:D0:62:88:8F:97:C3:86:84:6D:11:98:7D:AB:46:1B:6D\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-revocation.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-revocation.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"tree":{"id":"ca-root-pubeaa","name":"DEMO Root AC PubEAA Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"5F4F010F572570255A4AA631C9E99E8E","sha256":"D24DE11AADE4D3679FFF848DBC61D06188A56C40C8D0789FF8658A4001F2A48D","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 126686872549193756378015637517550329486 (0x5f4f010f572570255a4aa631c9e99e8e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 043e88ac63a7dd60fc5a8354df308fc023cff7b26ea1c069f47557c828084e3f28b3c379904e4262d3a2430b221868fbd5febf7fda1e7e5c4ad1ce4246cd4fdaad\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 26:03:AF:98:55:4C:32:1C:C7:48:DE:A8:15:E9:CC:9D:F3:5D:E7:E5\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-pubeaa","trust_anchor":"lote-pubeaa.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"ca-pubeaa-revocation","name":"DEMO AC PubEAA Provider Revocation (Idakto)","role":"ca","issuer_id":"ca-root-pubeaa","serial_hex":"CEFF6ECAA6C3086D8C31B4DF3FB1A024","sha256":"451CFA15AC1CE9F01C0A00B61AEB938C13869053ABDDBBEFAAEFD18B47435248","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-revocation.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-revocation.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-revocation.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 275147249951374572393499514474213777444 (0xceff6ecaa6c3086d8c31b4df3fb1a024)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC PubEAA Provider Revocation (Idakto),O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 049a0f8c4ba5782f1500154d7de05f579857bcdd6df86b12f0d0d3599b9c29c89921d0b5dc2d4595a05f8c48e30cf3e86ba7e55f46e8af1ed19653884dcbbf53d1\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n C1:F0:D9:BA:D0:62:88:8F:97:C3:86:84:6D:11:98:7D:AB:46:1B:6D\n X509v3 Authority Key Identifier:\n keyid:26:03:AF:98:55:4C:32:1C:C7:48:DE:A8:15:E9:CC:9D:F3:5D:E7:E5\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-mdl","trust_anchor":"lote-mdl.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"pubeaa-tsl-signer","name":"DEMO PubEAA Provider (TSL Signer) 01","role":"leaf","issuer_id":"ca-pubeaa-revocation","serial_hex":"8BE2BDAB28140E19E499A76BB2826F53","sha256":"165AE67A6341B46F5371D4B9A9FBA299F932CC19E1707716C8A66206DD2D4EC0","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-tsl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-tsl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-revocation.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 185939997439966702982606766619219881811 (0x8be2bdab28140e19e499a76bb2826f53)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC PubEAA Provider Revocation (Idakto),O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO PubEAA Provider (TSL Signer) 01,O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0465e05429ca9388df847486a9930b8c173298830124f497310f479cc7ce72b5232a6042e33a18240d2c44cb47a86675473cec990ace13f395c807736200b5d9ca\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n D2:29:6A:50:7B:38:38:17:56:73:42:AD:A8:6B:6B:65:D3:32:42:18\n X509v3 Authority Key Identifier:\n keyid:C1:F0:D9:BA:D0:62:88:8F:97:C3:86:84:6D:11:98:7D:AB:46:1B:6D\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-revocation.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-revocation.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]}]}]}},{"number":13,"id":"branch-iaca","category":"jwt","category_name":"Pilier LoTE (JWT — ETSI TS 119 602)","name":"PubEAA Provider · mDL · Issuance","standard":"ETSI TS 119 602 / http://trust.ec.europa.eu/lists/mDL/SvcType/Issuance","color":"#0284c7","color_bg":"#0284c71f","trust_anchor":"lote-mdl.jwt","trust_anchor_cert_id":"iaca","root_ca":{"id":"iaca","name":"DEMO IACA National Issuing Authority (mDL)","role":"root","issuer_id":"","serial_hex":"81A50F59C7995F2F565A1E629F1FB7D1","sha256":"A0D44A428C74A869309B13AA6A391B66E193C60492CE4ADB7B30640270B8B12F","not_before":"2026-11-10T12:54:10Z","not_after":"2036-11-07T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/iaca.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/iaca.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl","issuer_alt_name":["email:iaca@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 172327451787135844810764917969363384273 (0x81a50f59c7995f2f565a1e629f1fb7d1)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO IACA National Issuing Authority (mDL),O=DEMO French Sovereign Authority (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000105\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 07 Nov 2036 12:54:10 UTC (2036-11-07T12:54:10Z)\n Subject: CN=DEMO IACA National Issuing Authority (mDL),O=DEMO French Sovereign Authority (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000105\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0457cc44f4f93055e419af5ea659e2561967c6135dcbbb02a4301207744332711cd418621553a6dac795d77d733ee92005fca68e9478e9e5c67cef19ca6963fdf5\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 80:72:CF:F7:FF:88:8B:2F:21:E2:36:67:0C:19:95:32:25:E8:09:8B\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl\n X509v3 Issuer Alternative Name:\n email:iaca@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[],"leaves":[{"id":"pubeaa-mdl-signer","name":"DEMO MDL Document Signer 01","role":"leaf","issuer_id":"iaca","serial_hex":"189453FFF4C614B0F8BF11E40F5F5131","sha256":"FFDD7968DF1D03C31EB934FADEE5BC2FC2CD77BAB0C9D9FEC703E2AFA76B95AB","not_before":"2026-11-10T12:54:10Z","not_after":"2027-11-10T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":["1.0.18013.5.1.2"],"qc_compliance":true,"qscd":true,"qc_types":["0.4.0.194126.1.3"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-mdl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-mdl-signer.pem","issuer_alt_name":["email:iaca@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 32671635552833487085337729303406661937 (0x189453fff4c614b0f8bf11e40f5f5131)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO IACA National Issuing Authority (mDL),O=DEMO French Sovereign Authority (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000105\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Wed, 10 Nov 2027 12:54:10 UTC (2027-11-10T12:54:10Z)\n Subject: CN=DEMO MDL Document Signer 01,O=DEMO PubEAA - MDL Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000105\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 042fce4653a74408747375a4557dce64d1e10634b28f5b3aa477a07a25acf1880065b1c2e8d6f3230a9a813bb56cfcee86f78aabafd4535d7dc69ad0281bba30ac\n X509v3 Extensions:\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Extended Key Usage: (critical)\n 1.0.18013.5.1.2\n X509v3 Subject Key Identifier:\n 1C:58:11:87:DE:45:05:FB:DC:7C:7C:B6:F8:FD:45:2D:E9:AF:E7:F1\n X509v3 Authority Key Identifier:\n keyid:80:72:CF:F7:FF:88:8B:2F:21:E2:36:67:0C:19:95:32:25:E8:09:8B\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/iaca.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194112.1.3 (QCP-l-qscd (Qualified Legal with QSCD))\n X509v3 Issuer Alternative Name:\n email:iaca@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcSSCD : Clé privée sur QSCD / SSCD (Dispositif Qualifié)\n id-etsi-qcs-QcType : 0.4.0.194126.1.3\n id-etsi-qcs-QcPDS : https://trust-model.wallee.demo.idenv.fr/pds/iaca.pdf (lang: en)\n"}],"tree":{"id":"iaca","name":"DEMO IACA National Issuing Authority (mDL)","role":"root","issuer_id":"","serial_hex":"81A50F59C7995F2F565A1E629F1FB7D1","sha256":"A0D44A428C74A869309B13AA6A391B66E193C60492CE4ADB7B30640270B8B12F","not_before":"2026-11-10T12:54:10Z","not_after":"2036-11-07T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/iaca.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/iaca.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl","issuer_alt_name":["email:iaca@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 172327451787135844810764917969363384273 (0x81a50f59c7995f2f565a1e629f1fb7d1)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO IACA National Issuing Authority (mDL),O=DEMO French Sovereign Authority (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000105\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 07 Nov 2036 12:54:10 UTC (2036-11-07T12:54:10Z)\n Subject: CN=DEMO IACA National Issuing Authority (mDL),O=DEMO French Sovereign Authority (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000105\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0457cc44f4f93055e419af5ea659e2561967c6135dcbbb02a4301207744332711cd418621553a6dac795d77d733ee92005fca68e9478e9e5c67cef19ca6963fdf5\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 80:72:CF:F7:FF:88:8B:2F:21:E2:36:67:0C:19:95:32:25:E8:09:8B\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl\n X509v3 Issuer Alternative Name:\n email:iaca@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-mdl","trust_anchor":"lote-mdl.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0284c7","children":[{"id":"pubeaa-mdl-signer","name":"DEMO MDL Document Signer 01","role":"leaf","issuer_id":"iaca","serial_hex":"189453FFF4C614B0F8BF11E40F5F5131","sha256":"FFDD7968DF1D03C31EB934FADEE5BC2FC2CD77BAB0C9D9FEC703E2AFA76B95AB","not_before":"2026-11-10T12:54:10Z","not_after":"2027-11-10T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":["1.0.18013.5.1.2"],"qc_compliance":true,"qscd":true,"qc_types":["0.4.0.194126.1.3"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-mdl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-mdl-signer.pem","issuer_alt_name":["email:iaca@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 32671635552833487085337729303406661937 (0x189453fff4c614b0f8bf11e40f5f5131)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO IACA National Issuing Authority (mDL),O=DEMO French Sovereign Authority (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000105\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Wed, 10 Nov 2027 12:54:10 UTC (2027-11-10T12:54:10Z)\n Subject: CN=DEMO MDL Document Signer 01,O=DEMO PubEAA - MDL Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000105\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 042fce4653a74408747375a4557dce64d1e10634b28f5b3aa477a07a25acf1880065b1c2e8d6f3230a9a813bb56cfcee86f78aabafd4535d7dc69ad0281bba30ac\n X509v3 Extensions:\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Extended Key Usage: (critical)\n 1.0.18013.5.1.2\n X509v3 Subject Key Identifier:\n 1C:58:11:87:DE:45:05:FB:DC:7C:7C:B6:F8:FD:45:2D:E9:AF:E7:F1\n X509v3 Authority Key Identifier:\n keyid:80:72:CF:F7:FF:88:8B:2F:21:E2:36:67:0C:19:95:32:25:E8:09:8B\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/iaca.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194112.1.3 (QCP-l-qscd (Qualified Legal with QSCD))\n X509v3 Issuer Alternative Name:\n email:iaca@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcSSCD : Clé privée sur QSCD / SSCD (Dispositif Qualifié)\n id-etsi-qcs-QcType : 0.4.0.194126.1.3\n id-etsi-qcs-QcPDS : https://trust-model.wallee.demo.idenv.fr/pds/iaca.pdf (lang: en)\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#0284c7","children":[]}]}},{"number":14,"id":"branch-ca-registrar","category":"jwt","category_name":"Pilier LoTE (JWT — ETSI TS 119 602)","name":"Registrar · Register","standard":"ETSI TS 119 602 / http://uri.etsi.org/19602/SvcType/Register","color":"#0891b2","color_bg":"#0891b21f","trust_anchor":"lote-registrars.jwt","trust_anchor_cert_id":"ca-registrar","root_ca":{"id":"ca-root-registrar","name":"DEMO Root AC Registrar (Idakto)","role":"root","issuer_id":"","serial_hex":"9B6BF1FE7CD9B4FAB74FE4ECAE0E9FBA","sha256":"A671EC46BBB3BE0C9A7084705E9CD700E3F754FB37C3B66951950F064FFAEC79","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-registrar.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-registrar.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 206590823333832278303621903451998298042 (0x9b6bf1fe7cd9b4fab74fe4ecae0e9fba)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Registrar (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC Registrar (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0435c5ffec098970cf9b9ddf1b92c2f93c772d0ec734a2cf70272a7ffbe1916936f0c1387599a8d8fcb62942c823dafaa2d6785b7e85d466e5b5ec77baa78ff4f4\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 8B:7A:5C:EE:1D:71:71:73:A3:7D:AD:42:03:98:E0:96:92:41:41:70\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-registrar","name":"DEMO AC Registrar (Idakto)","role":"ca","issuer_id":"ca-root-registrar","serial_hex":"653D3F41CC9274D9B0AC8BB83458957A","sha256":"FE08E465DB3A08D44E7786A53A7089FD90278848C4AD1C401A3D6ECD849054DA","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-registrar.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-registrar.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-registrar.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 134570040687594718114447836244702958970 (0x653d3f41cc9274d9b0ac8bb83458957a)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Registrar (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Registrar (Idakto),O=DEMO Registrar (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0442d565c1818df28c7a687922e4180469a44e2486e236304daf00b344f06fe7afa555b55ed1d73f462aa7d3de6b6b5aacd8a0a8e01f37ff02d3089b5ce1dd1e05\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 6B:BD:7B:B4:A1:17:73:42:E1:47:85:A2:8E:41:25:ED:6A:E2:D4:05\n X509v3 Authority Key Identifier:\n keyid:8B:7A:5C:EE:1D:71:71:73:A3:7D:AD:42:03:98:E0:96:92:41:41:70\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-registrar.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"registrar-signer","name":"DEMO Registrar (Registrar Signer) 01","role":"leaf","issuer_id":"ca-registrar","serial_hex":"45BCC29B73C45631AA285D8C2836DD6E","sha256":"3BAB941BD0D79E404525BE20177FF96C0E5919C5F81435C82B84F7BDDF28760D","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/registrar-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/registrar-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-registrar.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 92696830622220173589329282700215246190 (0x45bcc29b73c45631aa285d8c2836dd6e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Registrar (Idakto),O=DEMO Registrar (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Registrar (Registrar Signer) 01,O=DEMO Registrar (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04f89feae4dca6fff0063add117be70cf8ea82c284923d0b1b81d4f20690cb844c2b2a5645ae257f944a78219d369192fc96206c41b8e339dec8e9492e21cb766a\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 77:2E:F1:3C:4B:72:8F:38:9B:21:08:DA:02:3A:81:4A:24:76:CB:8D\n X509v3 Authority Key Identifier:\n keyid:6B:BD:7B:B4:A1:17:73:42:E1:47:85:A2:8E:41:25:ED:6A:E2:D4:05\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-registrar.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-registrar.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"tree":{"id":"ca-root-registrar","name":"DEMO Root AC Registrar (Idakto)","role":"root","issuer_id":"","serial_hex":"9B6BF1FE7CD9B4FAB74FE4ECAE0E9FBA","sha256":"A671EC46BBB3BE0C9A7084705E9CD700E3F754FB37C3B66951950F064FFAEC79","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-registrar.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-registrar.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 206590823333832278303621903451998298042 (0x9b6bf1fe7cd9b4fab74fe4ecae0e9fba)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Registrar (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC Registrar (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0435c5ffec098970cf9b9ddf1b92c2f93c772d0ec734a2cf70272a7ffbe1916936f0c1387599a8d8fcb62942c823dafaa2d6785b7e85d466e5b5ec77baa78ff4f4\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 8B:7A:5C:EE:1D:71:71:73:A3:7D:AD:42:03:98:E0:96:92:41:41:70\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-registrars","trust_anchor":"lote-registrars.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0891b2","children":[{"id":"ca-registrar","name":"DEMO AC Registrar (Idakto)","role":"ca","issuer_id":"ca-root-registrar","serial_hex":"653D3F41CC9274D9B0AC8BB83458957A","sha256":"FE08E465DB3A08D44E7786A53A7089FD90278848C4AD1C401A3D6ECD849054DA","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-registrar.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-registrar.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-registrar.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 134570040687594718114447836244702958970 (0x653d3f41cc9274d9b0ac8bb83458957a)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Registrar (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Registrar (Idakto),O=DEMO Registrar (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0442d565c1818df28c7a687922e4180469a44e2486e236304daf00b344f06fe7afa555b55ed1d73f462aa7d3de6b6b5aacd8a0a8e01f37ff02d3089b5ce1dd1e05\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 6B:BD:7B:B4:A1:17:73:42:E1:47:85:A2:8E:41:25:ED:6A:E2:D4:05\n X509v3 Authority Key Identifier:\n keyid:8B:7A:5C:EE:1D:71:71:73:A3:7D:AD:42:03:98:E0:96:92:41:41:70\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-registrar.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-registrars","trust_anchor":"lote-registrars.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0891b2","children":[{"id":"registrar-signer","name":"DEMO Registrar (Registrar Signer) 01","role":"leaf","issuer_id":"ca-registrar","serial_hex":"45BCC29B73C45631AA285D8C2836DD6E","sha256":"3BAB941BD0D79E404525BE20177FF96C0E5919C5F81435C82B84F7BDDF28760D","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/registrar-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/registrar-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-registrar.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 92696830622220173589329282700215246190 (0x45bcc29b73c45631aa285d8c2836dd6e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Registrar (Idakto),O=DEMO Registrar (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Registrar (Registrar Signer) 01,O=DEMO Registrar (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04f89feae4dca6fff0063add117be70cf8ea82c284923d0b1b81d4f20690cb844c2b2a5645ae257f944a78219d369192fc96206c41b8e339dec8e9492e21cb766a\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 77:2E:F1:3C:4B:72:8F:38:9B:21:08:DA:02:3A:81:4A:24:76:CB:8D\n X509v3 Authority Key Identifier:\n keyid:6B:BD:7B:B4:A1:17:73:42:E1:47:85:A2:8E:41:25:ED:6A:E2:D4:05\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-registrar.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-registrar.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#0891b2","children":[]}]}]}},{"number":15,"id":"branch-ca-trustmodel","category":"oob","category_name":"Gouvernance \u0026 Hors-Bande (Out-Of-Band)","name":"Trust Model Provider","standard":"Règlement (UE) 910/2014 (Hors-Bande)","color":"#64748b","color_bg":"rgba(100, 116, 139, 0.12)","trust_anchor":"Hors-Bande (JOUE / Schéma)","root_ca":{"id":"ca-root-tm","name":"DEMO Root AC Trust Model (Idakto)","role":"root","issuer_id":"","serial_hex":"E0E6D7C5438172589B02D5E542042E89","sha256":"340665BE1B3F8B1C52877D37B393B57930E1273B21E5CCBD20FAFE2296FE6B79","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-tm.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-tm.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 298945675680188953377253107846258896521 (0xe0e6d7c5438172589b02d5e542042e89)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Trust Model (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC Trust Model (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0401e5562dd3f7f6d8f5da89d260420990f21e73fe82fdfcb15256ef9597ded255612b394bf2a28320a5e96ffb311248218bc4dc040bc5bb76b9bf63bedcb15870\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 1B:0D:49:7A:0E:30:D8:FE:74:71:30:63:10:7B:C8:CE:1E:E2:2F:15\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-trustmodel","name":"DEMO AC Trust Model Provider (Idakto)","role":"ca","issuer_id":"ca-root-tm","serial_hex":"627657E318BCA1AA7C2C69AE24C63452","sha256":"A5B012ED047972B8D7B38E14715C6647BFCF5783444821F6C44A4B14493ABC48","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 130878817178312955373768916853743563858 (0x627657e318bca1aa7c2c69ae24c63452)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Trust Model (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Trust Model Provider (Idakto),O=DEMO Trust Model (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 044eb7b384850bc85f145c8fd6a879b936d674d65a74de98d9f2a1488d714e56ce3e29d091166b1fa85b396da0a175465034bf818b6e9e54f62b0c801c42351283\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 50:93:4B:8A:90:73:AE:E9:20:CE:58:BF:18:D4:70:42:83:16:3A:D0\n X509v3 Authority Key Identifier:\n keyid:1B:0D:49:7A:0E:30:D8:FE:74:71:30:63:10:7B:C8:CE:1E:E2:2F:15\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-tm.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[{"id":"tm-signer","name":"DEMO Trust Model Provider (TM Signer) 01","role":"leaf","issuer_id":"ca-trustmodel","serial_hex":"F009FD3FCE91971B6F9366149F6A3373","sha256":"E0D026E5091E68DECBFE60157FEC9C9F9BE05D200C39B3D2223D613962508975","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/tm-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/tm-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 319066586165040505067323086674858750835 (0xf009fd3fce91971b6f9366149f6a3373)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Trust Model Provider (Idakto),O=DEMO Trust Model (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Trust Model Provider (TM Signer) 01,O=DEMO Trust Model Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 047d189406ba626617c7b68307c42e4df7e5ac0a74e753a753dc0329abde6f4bf98a672d58a96c3abf4df83e5d4ff36957fc8217cbc3f60751b789116d6e73b09d\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n F5:2D:5B:69:23:8F:47:94:F3:C9:DA:B8:19:F3:12:1A:39:EE:83:64\n X509v3 Authority Key Identifier:\n keyid:50:93:4B:8A:90:73:AE:E9:20:CE:58:BF:18:D4:70:42:83:16:3A:D0\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},{"id":"lotl-signer","name":"DEMO EU List of Trusted Lists Signer 01","role":"leaf","issuer_id":"ca-trustmodel","serial_hex":"DB116ABB172F5978A5F6984F8E553C0C","sha256":"C73A9B671DC28F4293FF51CD28DC25C36144675EC3F7EC9CAE42D9178138CCDE","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/lotl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/lotl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 291191364881751442735712834763785321484 (0xdb116abb172f5978a5f6984f8e553c0c)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Trust Model Provider (Idakto),O=DEMO Trust Model (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO EU List of Trusted Lists Signer 01,O=DEMO European Commission / Scheme Operator (Idakto),C=EU,2.5.4.97=VAT-EU000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04be891b56aa6004454b488429da36ff374f6c88bfe2a6710a5f062698489ab3995e9a4ec348ef5935a85f1ed743535a0b8d92404c6ad6a4796f16ed5dffc2f102\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n CF:72:5B:2E:3D:C7:87:C9:25:D4:55:8E:EF:8B:6B:E5:93:0A:BA:95\n X509v3 Authority Key Identifier:\n keyid:50:93:4B:8A:90:73:AE:E9:20:CE:58:BF:18:D4:70:42:83:16:3A:D0\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},{"id":"lote-pointers-signer","name":"DEMO EU Pointers to LoTE Signer 01","role":"leaf","issuer_id":"ca-trustmodel","serial_hex":"93DC8D06B2FCF84316E0299B20BA0C58","sha256":"A8CB2A322B8C472F8F88D1F88E5126E090E34C7487A9C8653695B3149B955ADE","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/lote-pointers-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/lote-pointers-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 196541681039777538805462425782787378264 (0x93dc8d06b2fcf84316e0299b20ba0c58)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Trust Model Provider (Idakto),O=DEMO Trust Model (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO EU Pointers to LoTE Signer 01,O=DEMO European Commission / Scheme Operator (Idakto),C=EU,2.5.4.97=VAT-EU000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0490f3a26205ebd05ee39123682109b7069664035012cba6a7f9f770fe1d4e30b5dc6a838b7cc71c7b6435043ef81bd53709a996cc140222b4a83d1206ef5064a5\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n F7:79:41:76:7B:22:F4:22:09:6D:20:27:31:C9:37:C3:42:05:9D:3E\n X509v3 Authority Key Identifier:\n keyid:50:93:4B:8A:90:73:AE:E9:20:CE:58:BF:18:D4:70:42:83:16:3A:D0\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"tree":{"id":"ca-root-tm","name":"DEMO Root AC Trust Model (Idakto)","role":"root","issuer_id":"","serial_hex":"E0E6D7C5438172589B02D5E542042E89","sha256":"340665BE1B3F8B1C52877D37B393B57930E1273B21E5CCBD20FAFE2296FE6B79","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-tm.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-tm.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 298945675680188953377253107846258896521 (0xe0e6d7c5438172589b02d5e542042e89)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Trust Model (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC Trust Model (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0401e5562dd3f7f6d8f5da89d260420990f21e73fe82fdfcb15256ef9597ded255612b394bf2a28320a5e96ffb311248218bc4dc040bc5bb76b9bf63bedcb15870\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 1B:0D:49:7A:0E:30:D8:FE:74:71:30:63:10:7B:C8:CE:1E:E2:2F:15\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":false,"trust_anchor":"Hors-Bande (JOUE / Schéma)","trust_anchor_type":"oob_root","category":"oob","color":"#64748b","children":[{"id":"ca-trustmodel","name":"DEMO AC Trust Model Provider (Idakto)","role":"ca","issuer_id":"ca-root-tm","serial_hex":"627657E318BCA1AA7C2C69AE24C63452","sha256":"A5B012ED047972B8D7B38E14715C6647BFCF5783444821F6C44A4B14493ABC48","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 130878817178312955373768916853743563858 (0x627657e318bca1aa7c2c69ae24c63452)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Trust Model (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Trust Model Provider (Idakto),O=DEMO Trust Model (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 044eb7b384850bc85f145c8fd6a879b936d674d65a74de98d9f2a1488d714e56ce3e29d091166b1fa85b396da0a175465034bf818b6e9e54f62b0c801c42351283\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 50:93:4B:8A:90:73:AE:E9:20:CE:58:BF:18:D4:70:42:83:16:3A:D0\n X509v3 Authority Key Identifier:\n keyid:1B:0D:49:7A:0E:30:D8:FE:74:71:30:63:10:7B:C8:CE:1E:E2:2F:15\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-tm.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":false,"trust_anchor":"AC Intermédiaire (Hors-Liste)","trust_anchor_type":"internal_ca","category":"oob","color":"#64748b","children":[{"id":"tm-signer","name":"DEMO Trust Model Provider (TM Signer) 01","role":"leaf","issuer_id":"ca-trustmodel","serial_hex":"F009FD3FCE91971B6F9366149F6A3373","sha256":"E0D026E5091E68DECBFE60157FEC9C9F9BE05D200C39B3D2223D613962508975","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/tm-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/tm-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 319066586165040505067323086674858750835 (0xf009fd3fce91971b6f9366149f6a3373)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Trust Model Provider (Idakto),O=DEMO Trust Model (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Trust Model Provider (TM Signer) 01,O=DEMO Trust Model Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 047d189406ba626617c7b68307c42e4df7e5ac0a74e753a753dc0329abde6f4bf98a672d58a96c3abf4df83e5d4ff36957fc8217cbc3f60751b789116d6e73b09d\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n F5:2D:5B:69:23:8F:47:94:F3:C9:DA:B8:19:F3:12:1A:39:EE:83:64\n X509v3 Authority Key Identifier:\n keyid:50:93:4B:8A:90:73:AE:E9:20:CE:58:BF:18:D4:70:42:83:16:3A:D0\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Signataire LoTL/LoTE","trust_anchor_type":"tl_signer","category":"oob","color":"#64748b","children":[]},{"id":"lotl-signer","name":"DEMO EU List of Trusted Lists Signer 01","role":"leaf","issuer_id":"ca-trustmodel","serial_hex":"DB116ABB172F5978A5F6984F8E553C0C","sha256":"C73A9B671DC28F4293FF51CD28DC25C36144675EC3F7EC9CAE42D9178138CCDE","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/lotl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/lotl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 291191364881751442735712834763785321484 (0xdb116abb172f5978a5f6984f8e553c0c)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Trust Model Provider (Idakto),O=DEMO Trust Model (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO EU List of Trusted Lists Signer 01,O=DEMO European Commission / Scheme Operator (Idakto),C=EU,2.5.4.97=VAT-EU000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04be891b56aa6004454b488429da36ff374f6c88bfe2a6710a5f062698489ab3995e9a4ec348ef5935a85f1ed743535a0b8d92404c6ad6a4796f16ed5dffc2f102\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n CF:72:5B:2E:3D:C7:87:C9:25:D4:55:8E:EF:8B:6B:E5:93:0A:BA:95\n X509v3 Authority Key Identifier:\n keyid:50:93:4B:8A:90:73:AE:E9:20:CE:58:BF:18:D4:70:42:83:16:3A:D0\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Signataire LoTL/LoTE","trust_anchor_type":"tl_signer","category":"oob","color":"#64748b","children":[]},{"id":"lote-pointers-signer","name":"DEMO EU Pointers to LoTE Signer 01","role":"leaf","issuer_id":"ca-trustmodel","serial_hex":"93DC8D06B2FCF84316E0299B20BA0C58","sha256":"A8CB2A322B8C472F8F88D1F88E5126E090E34C7487A9C8653695B3149B955ADE","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/lote-pointers-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/lote-pointers-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 196541681039777538805462425782787378264 (0x93dc8d06b2fcf84316e0299b20ba0c58)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Trust Model Provider (Idakto),O=DEMO Trust Model (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO EU Pointers to LoTE Signer 01,O=DEMO European Commission / Scheme Operator (Idakto),C=EU,2.5.4.97=VAT-EU000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0490f3a26205ebd05ee39123682109b7069664035012cba6a7f9f770fe1d4e30b5dc6a838b7cc71c7b6435043ef81bd53709a996cc140222b4a83d1206ef5064a5\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n F7:79:41:76:7B:22:F4:22:09:6D:20:27:31:C9:37:C3:42:05:9D:3E\n X509v3 Authority Key Identifier:\n keyid:50:93:4B:8A:90:73:AE:E9:20:CE:58:BF:18:D4:70:42:83:16:3A:D0\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Signataire LoTL/LoTE","trust_anchor_type":"tl_signer","category":"oob","color":"#64748b","children":[]}]}]}},{"number":16,"id":"branch-ca-qscd","category":"oob","category_name":"Gouvernance \u0026 Hors-Bande (Out-Of-Band)","name":"Trust Service Provider QSCD","standard":"Règlement (UE) 910/2014 (Hors-Bande)","color":"#64748b","color_bg":"rgba(100, 116, 139, 0.12)","trust_anchor":"Hors-Bande (ANSSI / BSI)","root_ca":{"id":"ca-root-qscd","name":"DEMO Root AC QSCD (Idakto)","role":"root","issuer_id":"","serial_hex":"2D574CF30CB5B0309E612C1F6A7F932E","sha256":"A88B6E640849BDDD78BA2A947FDB429444012BCDF50B9D28854DAA49596E755A","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qscd.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qscd.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 60268550356520580502103266860646503214 (0x2d574cf30cb5b0309e612c1f6a7f932e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QSCD (Idakto),O=DEMO Trust Services QSCD (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC QSCD (Idakto),O=DEMO Trust Services QSCD (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0426b2223e4a819c6e3fbc99ae82d2a053a2f1d0d061c92f6b05cf9b1e3912f485a3fcf77b980a689caa39d89302c7a27d7d49982ed5b762d8b9e0ef6943aefd9a\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n B6:B3:5A:80:90:B2:21:9E:68:BD:C7:3C:61:9B:04:CC:CC:8C:27:5C\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"},"intermediate_cas":[{"id":"ca-qscd","name":"DEMO AC Trust Service Provider QSCD (Idakto)","role":"ca","issuer_id":"ca-root-qscd","serial_hex":"E9280DA0E22C76D5FCCF6CD003CED2F","sha256":"4BA8E83D67745952E8C55A604780E9ED92CC703249E60D8119000E993AB08531","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qscd.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qscd.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-qscd.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 19369880706878437961752699085747186991 (0xe9280da0e22c76d5fccf6cd003ced2f)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QSCD (Idakto),O=DEMO Trust Services QSCD (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Trust Service Provider QSCD (Idakto),O=DEMO Trust Service Provider QSCD (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0474befcd0e81b1b75f1a9eb74431e94c0ed6c5a07f93ba04ad55900c29a5c30c03453248a946adca788e49272650f9469bb8b0bc2cd90d407e1c322577e3de560\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 02:97:3E:51:40:3E:4B:4C:44:E5:C1:CE:78:82:37:72:E5:B7:E5:29\n X509v3 Authority Key Identifier:\n keyid:B6:B3:5A:80:90:B2:21:9E:68:BD:C7:3C:61:9B:04:CC:CC:8C:27:5C\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qscd.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n"}],"leaves":[],"tree":{"id":"ca-root-qscd","name":"DEMO Root AC QSCD (Idakto)","role":"root","issuer_id":"","serial_hex":"2D574CF30CB5B0309E612C1F6A7F932E","sha256":"A88B6E640849BDDD78BA2A947FDB429444012BCDF50B9D28854DAA49596E755A","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qscd.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qscd.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 60268550356520580502103266860646503214 (0x2d574cf30cb5b0309e612c1f6a7f932e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QSCD (Idakto),O=DEMO Trust Services QSCD (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC QSCD (Idakto),O=DEMO Trust Services QSCD (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0426b2223e4a819c6e3fbc99ae82d2a053a2f1d0d061c92f6b05cf9b1e3912f485a3fcf77b980a689caa39d89302c7a27d7d49982ed5b762d8b9e0ef6943aefd9a\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n B6:B3:5A:80:90:B2:21:9E:68:BD:C7:3C:61:9B:04:CC:CC:8C:27:5C\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":false,"trust_anchor":"Hors-Bande (ANSSI / BSI)","trust_anchor_type":"oob_root","category":"oob","color":"#64748b","children":[{"id":"ca-qscd","name":"DEMO AC Trust Service Provider QSCD (Idakto)","role":"ca","issuer_id":"ca-root-qscd","serial_hex":"E9280DA0E22C76D5FCCF6CD003CED2F","sha256":"4BA8E83D67745952E8C55A604780E9ED92CC703249E60D8119000E993AB08531","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qscd.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qscd.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-qscd.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 19369880706878437961752699085747186991 (0xe9280da0e22c76d5fccf6cd003ced2f)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QSCD (Idakto),O=DEMO Trust Services QSCD (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Trust Service Provider QSCD (Idakto),O=DEMO Trust Service Provider QSCD (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0474befcd0e81b1b75f1a9eb74431e94c0ed6c5a07f93ba04ad55900c29a5c30c03453248a946adca788e49272650f9469bb8b0bc2cd90d407e1c322577e3de560\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 02:97:3E:51:40:3E:4B:4C:44:E5:C1:CE:78:82:37:72:E5:B7:E5:29\n X509v3 Authority Key Identifier:\n keyid:B6:B3:5A:80:90:B2:21:9E:68:BD:C7:3C:61:9B:04:CC:CC:8C:27:5C\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qscd.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":false,"trust_anchor":"AC Intermédiaire (Hors-Liste)","trust_anchor_type":"internal_ca","category":"oob","color":"#64748b","children":[]}]}}],"domain":"trust-model.wallee.demo.idenv.fr","generated":"2026-11-11T17:52:22Z","supervision":{"lotes":{"format":"JSON / JWS (ETSI TS 119 602 / JAdES Baseline-B)","mdl":"https://trust-model.wallee.demo.idenv.fr/lote/lote-mdl.jwt","pid":"https://trust-model.wallee.demo.idenv.fr/lote/lote-pid.jwt","pointers":"https://trust-model.wallee.demo.idenv.fr/lote/lote-pointers.jwt","pubeaa":"https://trust-model.wallee.demo.idenv.fr/lote/lote-pubeaa.jwt","registrars":"https://trust-model.wallee.demo.idenv.fr/lote/lote-registrars.jwt","signer":"lote-pointers-signer","wallet":"https://trust-model.wallee.demo.idenv.fr/lote/lote-wallet.jwt","wrpac":"https://trust-model.wallee.demo.idenv.fr/lote/lote-wrpac.jwt","wrprc":"https://trust-model.wallee.demo.idenv.fr/lote/lote-wrprc.jwt"},"lotl":{"format":"XML (ETSI TS 119 612 / XAdES Baseline-B)","id":"eu-lotl","name":"eu-lotl","signer":"lotl-signer","url":"https://trust-model.wallee.demo.idenv.fr/tl/eu-lotl.xml"},"tl_fr":{"format":"XML (ETSI TS 119 612 / XAdES Baseline-B)","id":"fr-tl","name":"fr-tl","signer":"tm-signer","url":"https://trust-model.wallee.demo.idenv.fr/tl/fr-tl.xml"},"xml_lists":[{"format":"XML (ETSI TS 119 612 / XAdES Baseline-B)","id":"eu-lotl","name":"eu-lotl","signer":"lotl-signer","url":"https://trust-model.wallee.demo.idenv.fr/tl/eu-lotl.xml"},{"format":"XML (ETSI TS 119 612 / XAdES Baseline-B)","id":"fr-tl","name":"fr-tl","signer":"tm-signer","url":"https://trust-model.wallee.demo.idenv.fr/tl/fr-tl.xml"}]},"tree":[{"id":"ca-root-qeaa","name":"DEMO Root AC QEAA Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"5C3A64CC0A91F24F2FDDB102CAAC9F67","sha256":"1A1361BD73C76A0FE0F77510D9C8533FED7D1F3D0864E0D31E13FC312EFA3717","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 122592173236784087002060597850941464423 (0x5c3a64cc0a91f24f2fddb102caac9f67)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04e03871de7189df135eeaff62faf56dac0485ae6f9b710e653a84a827ad63be900ec0a3fb9952eedfbe9b34a0bc99fd60e5d19b8caabb69b5175ef3221d8f5309\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 53:48:2C:C5:B1:9E:24:87:00:57:51:0B:4C:2C:A9:97:52:BE:7A:77\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":false,"trust_anchor":"Racine PKI (Hors-Liste)","trust_anchor_type":"internal_root","category":"xml","color":"#059669","children":[{"id":"ca-qeaa-issuance","name":"DEMO AC QEAA Provider Issuance (Idakto)","role":"ca","issuer_id":"ca-root-qeaa","serial_hex":"52FE266B6C7067708FA8083FB9FD2141","sha256":"29978D9C627E5BFE4524A3C6EE66DDB458D6268A71E0BDB5C26CF18AD88D75DE","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-issuance.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-issuance.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-issuance.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 110316318298969544818155868047439372609 (0x52fe266b6c7067708fa8083fb9fd2141)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC QEAA Provider Issuance (Idakto),O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04492dc5fbb6f88aa915728d44f06e427c9d08b50a6b43f1842513a6bfa5678324c1851cd3dc7a12e1accdf569d97dead187f5cb120fbd26dc749b17a2bc6bd7db\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n C4:D5:4A:33:B3:2C:65:2F:87:A5:2C:B1:EB:C1:43:05:3D:D0:CD:A2\n X509v3 Authority Key Identifier:\n keyid:53:48:2C:C5:B1:9E:24:87:00:57:51:0B:4C:2C:A9:97:52:BE:7A:77\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"fr-tl","trust_anchor":"fr-tl.xml","trust_anchor_type":"tl_service","category":"xml","color":"#059669","children":[{"id":"qeaa-attestation-signer","name":"DEMO QEAA Provider (Attestation Signer) 01","role":"leaf","issuer_id":"ca-qeaa-issuance","serial_hex":"37DA305D6B3110AB5953F8FD99CEAF26","sha256":"AA7087102B494CE25AF17BAE917650B42A5307380A5FC620E8E8064D8C9D6F0B","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":true,"qc_types":["0.4.0.1862.1.6.2"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/qeaa-attestation-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/qeaa-attestation-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 74240441440385266674231545945140408102 (0x37da305d6b3110ab5953f8fd99ceaf26)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC QEAA Provider Issuance (Idakto),O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO QEAA Provider (Attestation Signer) 01,O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04216caca9523ff509caa76c3bf3c8462606a21580bd7cea6d30a01ecccabcf0d31c25870461835526a0c30e2a5946a87c9b0adf7496ada0fd152d6b151a3ce3aa\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n D0:60:67:B5:D7:1B:F8:10:48:71:E7:86:E5:75:3A:E1:88:CE:A8:67\n X509v3 Authority Key Identifier:\n keyid:C4:D5:4A:33:B3:2C:65:2F:87:A5:2C:B1:EB:C1:43:05:3D:D0:CD:A2\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194112.1.3 (QCP-l-qscd (Qualified Legal with QSCD))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcSSCD : Clé privée sur QSCD / SSCD (Dispositif Qualifié)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.2\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"xml","color":"#059669","children":[]}]}]},{"id":"ca-root-qeaa","name":"DEMO Root AC QEAA Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"5C3A64CC0A91F24F2FDDB102CAAC9F67","sha256":"1A1361BD73C76A0FE0F77510D9C8533FED7D1F3D0864E0D31E13FC312EFA3717","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 122592173236784087002060597850941464423 (0x5c3a64cc0a91f24f2fddb102caac9f67)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04e03871de7189df135eeaff62faf56dac0485ae6f9b710e653a84a827ad63be900ec0a3fb9952eedfbe9b34a0bc99fd60e5d19b8caabb69b5175ef3221d8f5309\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 53:48:2C:C5:B1:9E:24:87:00:57:51:0B:4C:2C:A9:97:52:BE:7A:77\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":false,"trust_anchor":"Racine PKI (Hors-Liste)","trust_anchor_type":"internal_root","category":"xml","color":"#059669","children":[{"id":"ca-qeaa-revocation","name":"DEMO AC QEAA Provider Revocation (Idakto)","role":"ca","issuer_id":"ca-root-qeaa","serial_hex":"1BC25EC09EBA9FC88C11467D662B6F01","sha256":"3594ABABDE02EBD3758488AB3277A7A47804FB6C6D0D2B00C745FF47084A567A","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-revocation.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-revocation.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-revocation.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 36898383284182677434043734562320379649 (0x1bc25ec09eba9fc88c11467d662b6f01)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC QEAA Provider Revocation (Idakto),O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 046e27719afe67380b3534e7a7c7ca046ffaa056d61d00db3b4b86c48dba736b440bb7a8b212a4b61adbd5007f40ca2b6dfbcb587ec9b4531141b1ec0392cefefc\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n BD:49:59:85:A5:59:5B:8E:32:D1:0C:4A:E3:75:A1:31:AC:2D:87:11\n X509v3 Authority Key Identifier:\n keyid:53:48:2C:C5:B1:9E:24:87:00:57:51:0B:4C:2C:A9:97:52:BE:7A:77\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qeaa.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"fr-tl","trust_anchor":"fr-tl.xml","trust_anchor_type":"tl_service","category":"xml","color":"#059669","children":[{"id":"qeaa-tsl-signer","name":"DEMO QEAA Provider (TSL Signer) 01","role":"leaf","issuer_id":"ca-qeaa-revocation","serial_hex":"1C3EA030460CB2766D8EB862C8F74779","sha256":"4DF7D8906F2DE08C9DF0E4D72245E0A7D50E16FF0C4C10EDB58676A1CE4B207B","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/qeaa-tsl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/qeaa-tsl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-revocation.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 37543555297374489269405256297227962233 (0x1c3ea030460cb2766d8eb862c8f74779)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC QEAA Provider Revocation (Idakto),O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO QEAA Provider (TSL Signer) 01,O=DEMO QEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0485365d6b7da0fcde602ddbd1ed04b790c2cbc0775c4376ca3babc48fa92c3bc7f526b9c9660c514bd060ef29259545d15e89a01970c2d03c4f4e8ab1396b9775\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n F8:6D:41:5B:97:0C:F2:0D:A7:84:0F:F4:CB:AA:09:87:05:7F:5D:EA\n X509v3 Authority Key Identifier:\n keyid:BD:49:59:85:A5:59:5B:8E:32:D1:0C:4A:E3:75:A1:31:AC:2D:87:11\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-qeaa-revocation.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-qeaa-revocation.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"xml","color":"#059669","children":[]}]}]},{"id":"ca-root-qes","name":"DEMO Root AC QES QSCD (Idakto)","role":"root","issuer_id":"","serial_hex":"A6B79B197B78801A5776B7F3E734A2FC","sha256":"0421ACB8E75BE15B965470387A620F4998D31BF7E12B426D13BF80CB0EE1A652","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qes.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qes.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 221605183417812869478783983669216584444 (0xa6b79b197b78801a5776b7f3e734a2fc)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QES QSCD (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC QES QSCD (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 048be1d8e58216a1c47ae6a197fef5a163005a9380125c55082f198766702d965a22c8236e8f3813c1cf049fd1e8ab7ae60bfef068b65da09a9d28d20445a9b3c9\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n D5:D6:08:33:BF:60:69:FD:D3:1C:45:78:6C:A7:3C:20:F8:07:A1:D5\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":false,"trust_anchor":"Racine PKI (Hors-Liste)","trust_anchor_type":"internal_root","category":"xml","color":"#059669","children":[{"id":"ca-qes","name":"DEMO AC Qualified Signature (Idakto)","role":"ca","issuer_id":"ca-root-qes","serial_hex":"5BA8FE9183B7E9F8D5D511A4AC62EDD8","sha256":"BBA88EDA7EB2F95E6DD9B829CE1EF6706309E691AABCD9D5D1BF6F737B3415D4","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qes.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qes.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-qes.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 121837216749548962181633160682823413208 (0x5ba8fe9183b7e9f8d5d511a4ac62edd8)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QES QSCD (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Qualified Signature (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0406be955886c576c715eba70df65eccda7d8ef461ad0ff4d1e910de01c063d4b9e08d7622cebc35b1635730f116c04ab45efffd649b9c9a2c0cb3e3d2292867d1\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n CA:EC:3B:A3:57:58:7E:05:63:6F:43:FF:39:FA:9D:58:91:5A:43:B9\n X509v3 Authority Key Identifier:\n keyid:D5:D6:08:33:BF:60:69:FD:D3:1C:45:78:6C:A7:3C:20:F8:07:A1:D5\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qes.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qes.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"fr-tl","trust_anchor":"fr-tl.xml","trust_anchor_type":"tl_service","category":"xml","color":"#059669","children":[{"id":"qes-signer","name":"Jeanne DEMO-TESTEUR (Qualified Signature on QSCD)","role":"leaf","issuer_id":"ca-qes","serial_hex":"BE1C1DDF4A720AF2972155C15F973C86","sha256":"DBB80F34CFC4A529CF5E2928072356B0127E817FF6AEEB577D2AE6676D7431C0","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["nonRepudiation"],"ext_key_usage":null,"qc_compliance":true,"qscd":true,"qc_types":["0.4.0.1862.1.6.1"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/qes-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/qes-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-qes.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 252699309391971497573594350189765147782 (0xbe1c1ddf4a720af2972155c15f973c86)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Qualified Signature (Idakto),O=DEMO Qualified Trust Service Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=Jeanne DEMO-TESTEUR (Qualified Signature on QSCD),C=FR\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04b7f584a5b648918db2cea0bb65fdff9f8c3b66063e1b570983244fca4c5362ffe8d62e60efcbb203d6af5b5d65ed7bc99ac19aaeeb6740825b53d46c6da1305b\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Content Commitment (Non-Repudiation)\n X509v3 Subject Key Identifier:\n C2:F0:74:77:5F:B0:10:C5:A8:45:8D:C2:A7:6E:92:14:AD:D0:33:21\n X509v3 Authority Key Identifier:\n keyid:CA:EC:3B:A3:57:58:7E:05:63:6F:43:FF:39:FA:9D:58:91:5A:43:B9\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-qes.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-qes.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194112.1.2 (QCP-n-qscd (Qualified Natural with QSCD))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcSSCD : Clé privée sur QSCD / SSCD (Dispositif Qualifié)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.1\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"xml","color":"#059669","children":[]}]}]},{"id":"ca-root-wrpac","name":"DEMO Root AC WRPAC (Idakto)","role":"root","issuer_id":"","serial_hex":"2DA56DFF8E5B71CD40781CC0C1DC0A0E","sha256":"0210B51966D27F70A03991B719D250148221C246708715F82B76D5A4268AC0C2","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrpac.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrpac.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 60674219821865121066717671235063122446 (0x2da56dff8e5b71cd40781cc0c1dc0a0e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0445f4a797b4e51be3f63447644e4e1421294562cdac708c5caee3cb7b5310e88515b8c3b160862621a2445238d4b9ef715a98980ba8c15a08f065fd7bf947dc5c\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 04:DD:60:AD:18:F3:06:97:0C:77:54:40:32:5B:89:31:BD:AE:3C:9A\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-wrpac","trust_anchor":"lote-wrpac.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"ca-wrpac","name":"DEMO AC WRPAC (Idakto)","role":"ca","issuer_id":"ca-root-wrpac","serial_hex":"61BA0E1CDC6B6EA378657901AF446374","sha256":"A2684206F876FD895EB11C6B12C6C351CD247E989F56530D685E35BF000CFC65","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 129901169047163898832565898467294339956 (0x61ba0e1cdc6b6ea378657901af446374)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0404ea31ac9f5f7a71380ad2d5bb8580c5506c6d41d1e49db195353e89f5cd8ffe51813244fc729f55273254a6cce91269e48849ab13ce8f05ec4770ca66af04d8\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n FD:04:BE:D7:64:86:38:CA:7F:47:23:28:85:F3:6B:35:83:26:AC:84\n X509v3 Authority Key Identifier:\n keyid:04:DD:60:AD:18:F3:06:97:0C:77:54:40:32:5B:89:31:BD:AE:3C:9A\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrpac.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrpac.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-wrpac","trust_anchor":"lote-wrpac.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"wrpac-for-pid","name":"DEMO WRPAC PID Provider Access 01","role":"leaf","issuer_id":"ca-wrpac","serial_hex":"F2AB0E5C85BE821CC2E8BF6D6C258EA5","sha256":"65550B469CEB4C615202BC5BC9B7523B965AD56930065A15C01459A6AAFECDFC","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":false,"qc_types":["0.4.0.1862.1.6.2"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-for-pid.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-for-pid.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 322561349026876315853066984043678371493 (0xf2ab0e5c85be821cc2e8bf6d6c258ea5)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPAC PID Provider Access 01,O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 042319b269e765c2bba50f38304b188e8c9a0758a38107eb4ce19359f3f5d59eef95d49a8c680621d5f87c0f95b88fb2a9280e87759cfeab1fd83bd2dcba27bee6\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n FE:5C:3E:40:5C:47:C0:EE:48:89:D9:71:95:55:BA:69:53:20:23:76\n X509v3 Authority Key Identifier:\n keyid:FD:04:BE:D7:64:86:38:CA:7F:47:23:28:85:F3:6B:35:83:26:AC:84\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194118.1.4 (QCP-l-eudiwrp (Qualified Legal Person WRPAC))\n X509v3 Subject Alternative Name:\n email:wallet-support@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/support\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.2\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]},{"id":"wrpac-for-one-verifier","name":"DEMO WRPAC Verifier 01","role":"leaf","issuer_id":"ca-wrpac","serial_hex":"815AD81E1FF61E99923E762AD68F00B4","sha256":"C5B3D792121593564AABF5FA3039A8DCC75D5DA3A7A06CDA144C2BA139B1F5BC","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":false,"qc_types":["0.4.0.1862.1.6.2"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-for-one-verifier.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-for-one-verifier.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 171942101560733121839871771237208228020 (0x815ad81e1ff61e99923e762ad68f00b4)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPAC Verifier 01,O=DEMO Verifier (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0495ae0961769bf8848d6c2c06a3aafc210b201a348bd5c3b90cf545e02f2c613a1adeff2d38946a9bf8e616b205796413190b04ebcf6ecdff93d0136a3ef455a2\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n FE:02:7A:24:D4:55:41:D7:0D:42:3D:3E:DD:B0:12:BB:FC:B3:4D:02\n X509v3 Authority Key Identifier:\n keyid:FD:04:BE:D7:64:86:38:CA:7F:47:23:28:85:F3:6B:35:83:26:AC:84\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194118.1.4 (QCP-l-eudiwrp (Qualified Legal Person WRPAC))\n X509v3 Subject Alternative Name:\n email:wallet-support@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/support\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.2\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]},{"id":"wrpac-qualified","name":"DEMO WRPAC Qualified Verifier 01","role":"leaf","issuer_id":"ca-wrpac","serial_hex":"739326D81E61346671F992A2A6A2452C","sha256":"E748B80A3D0367ED934FC4CFE564156C16C2B3E0FEB01AF69EBCF3BCCB9FE54C","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":false,"qc_types":["0.4.0.1862.1.6.2"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-qualified.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrpac-qualified.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 153625275007720050441885557548057249068 (0x739326d81e61346671f992a2a6a2452c)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPAC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPAC Qualified Verifier 01,O=DEMO Verifier (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0438da671f461e3c09fb722376694202bec619ca0124319f85feaee545533543941aa33318b98dd1fed148772f754d331fa37589c544f5edcad57622a278ca141e\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n EE:86:97:DE:68:33:C2:F0:A2:7F:E1:63:28:C0:C9:14:22:52:5D:20\n X509v3 Authority Key Identifier:\n keyid:FD:04:BE:D7:64:86:38:CA:7F:47:23:28:85:F3:6B:35:83:26:AC:84\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrpac.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrpac.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194118.1.4 (QCP-l-eudiwrp (Qualified Legal Person WRPAC))\n X509v3 Subject Alternative Name:\n email:wallet-support@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/support\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcType : 0.4.0.1862.1.6.2\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]}]}]},{"id":"ca-root-wrprc","name":"DEMO Root AC WRPRC (Idakto)","role":"root","issuer_id":"","serial_hex":"626563547B1CA257B7BB49E3E1AEC0E0","sha256":"69E21CB9EFFF42A21FEBE10CDFFA282A8665BCED4CA928F67EEC824FA40EC4DD","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrprc.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrprc.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 130790780221451458621081869810268029152 (0x626563547b1ca257b7bb49e3e1aec0e0)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 042bfb60d8b18177aa3f1bf2a03fb4af68b036c8a8a10283ed9b17648ca7f202facd857f9621d58e7b004ce7be341d29205b41644959cb1e1e19f3e9e1d1ece998\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 66:CB:98:CD:15:F5:1F:CC:4A:CB:0D:81:96:76:95:23:B2:9C:7D:ED\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-wrprc","trust_anchor":"lote-wrprc.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#9333ea","children":[{"id":"ca-wrprc-signer","name":"DEMO AC WRPRC (Idakto)","role":"ca","issuer_id":"ca-root-wrprc","serial_hex":"789C706740E4DDBE90E971AF24E5768E","sha256":"6D64AE3C74F0F0FE3C4846CB9ECA2DDC019A2589E57F6261811FC0F415C3AF7A","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wrprc-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wrprc-signer.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 160319637614581408688576169142884071054 (0x789c706740e4ddbe90e971af24e5768e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04ba37f2215729bc6591cb711b73eb24c1ed5b12409df3f373d6daee54a0ff435ca8c702cb72d6a1cc66b2454c4333ccf838d1d395902cf4725697e0ff29207a19\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n C7:63:EE:62:46:8F:57:62:FC:2A:FD:41:A9:5F:D1:29:E8:AA:F4:BF\n X509v3 Authority Key Identifier:\n keyid:66:CB:98:CD:15:F5:1F:CC:4A:CB:0D:81:96:76:95:23:B2:9C:7D:ED\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wrprc.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wrprc.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-wrprc","trust_anchor":"lote-wrprc.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#9333ea","children":[{"id":"wrprc-signer","name":"DEMO WRPRC Provider Signer 01","role":"leaf","issuer_id":"ca-wrprc-signer","serial_hex":"875B5CE1D5A7A4BBDEC68F0587003010","sha256":"E3BF685C842E5CFECCF5056CE8C3E3B70AB8A83C2A6FAFA9706028AF7C7A7D30","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrprc-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrprc-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 179920162319233389456884340290079436816 (0x875b5ce1d5a7a4bbdec68f0587003010)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPRC Provider Signer 01,O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000002\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0495c9877cf4cbc4856fef6d56f9cf2215eab03ce36841800eaf52e7d1b2d6f07456f2629677c4e93785bd2464fabbaca582dbce1762fdb97cc1922dac15067b0c\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 80:5F:47:F4:05:A3:0B:DF:BD:11:49:8C:D9:09:C6:D7:58:9A:A3:00\n X509v3 Authority Key Identifier:\n keyid:C7:63:EE:62:46:8F:57:62:FC:2A:FD:41:A9:5F:D1:29:E8:AA:F4:BF\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrprc-signer.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#9333ea","children":[]},{"id":"wrprc-statuslist-signer","name":"DEMO WRPRC Status List Signer 01","role":"leaf","issuer_id":"ca-wrprc-signer","serial_hex":"C13C62A05BBF0AEF48749DF6B8277257","sha256":"F66C1EADBDE49FDC77EAC5B9BA11ABA630265D5C07E2EB62B9DD02FBD9F0FAD6","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrprc-statuslist-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wrprc-statuslist-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 256854541379042105637088583501883077207 (0xc13c62a05bbf0aef48749df6b8277257)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC WRPRC (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO WRPRC Status List Signer 01,O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000002\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04f568a77e883ccdeb4f9bda5663eb2f92a763da3f979fb3a1ead4150a0f2c4f706d4e7c60f9f9e1312a0fbdcde69e78878ef373251c3f87457cbd7843045efa01\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 4C:8A:75:6D:D0:58:E9:0F:9C:29:FF:BE:75:33:33:6F:82:F8:09:B9\n X509v3 Authority Key Identifier:\n keyid:C7:63:EE:62:46:8F:57:62:FC:2A:FD:41:A9:5F:D1:29:E8:AA:F4:BF\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wrprc-signer.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wrprc-signer.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":true,"trust_list_id":"lote-wrprc","trust_anchor":"lote-wrprc.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#9333ea","children":[]}]}]},{"id":"ca-root-pid","name":"DEMO Root AC PID Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"EFF38E57ADEC25BA38FEF7E63E86CF2C","sha256":"86A86D986517C671DD71434D5649971208377E505A6F8BF37E10F78013402BD5","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 318950106178059105371223374902948450092 (0xeff38e57adec25ba38fef7e63e86cf2c)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0400d71b8963d9cfda4b7152eb377e90d6f2583e65053cb955351a7e106b7c97ea6aff5fb87fe26acad206b90d2b3d224111f2f1c09dbf10db5501c49b3f6d5bec\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 24:EB:34:8C:22:D7:B9:67:0D:14:CC:32:9A:0F:D0:D9:EA:B4:80:A9\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-pid","trust_anchor":"lote-pid.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0891b2","children":[{"id":"ca-pid-issuance","name":"DEMO AC PID Provider Issuance (Idakto)","role":"ca","issuer_id":"ca-root-pid","serial_hex":"6B12112FEEB6C4E2A3B7857418F366BE","sha256":"AAB2CD36648E15C980E0D2BA792D1B097709094BE92353D407F6C0AC6EFDCBCE","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-issuance.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-issuance.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-issuance.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 142321205491004912148083814841476933310 (0x6b12112feeb6c4e2a3b7857418f366be)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC PID Provider Issuance (Idakto),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04da055b0f9a027b8f59b4317791b98927b6afe23c92a2e4460612c61f5f848d84fbc3fe29d43fa8319ef42c12ad4dd4711357be228603de2ecb1732b59930454a\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 54:44:98:E0:E3:CE:76:7D:43:5D:8F:03:A4:01:A3:7B:89:BA:C2:53\n X509v3 Authority Key Identifier:\n keyid:24:EB:34:8C:22:D7:B9:67:0D:14:CC:32:9A:0F:D0:D9:EA:B4:80:A9\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-pid","trust_anchor":"lote-pid.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0891b2","children":[{"id":"pidprovider-issuer-metadata-signer","name":"DEMO PID Provider (DPOP) 01","role":"leaf","issuer_id":"ca-pid-issuance","serial_hex":"28E295D456553AF46602174A1F50A807","sha256":"CD1B90F2CE8F30255D8A4A2F6EA914B6C9D866890C3D5887AEDCB940EDC62D76","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pidprovider-issuer-metadata-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pidprovider-issuer-metadata-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 54345617823545651028047855517053265927 (0x28e295d456553af46602174a1f50a807)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC PID Provider Issuance (Idakto),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO PID Provider (DPOP) 01,O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0480ca16e8eba91fe57192857c6dc5a0c569a9d95e2c705a5ed610ca1147d02d260be815af2a6fbf1f2e9b8e5b62c765ae3964175f37c2a85002a6c495bca75481\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 53:F9:ED:EE:41:41:EE:AE:55:4B:DC:C0:0D:84:85:81:F9:83:51:7A\n X509v3 Authority Key Identifier:\n keyid:54:44:98:E0:E3:CE:76:7D:43:5D:8F:03:A4:01:A3:7B:89:BA:C2:53\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#0891b2","children":[]}]}]},{"id":"ca-root-pid","name":"DEMO Root AC PID Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"EFF38E57ADEC25BA38FEF7E63E86CF2C","sha256":"86A86D986517C671DD71434D5649971208377E505A6F8BF37E10F78013402BD5","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 318950106178059105371223374902948450092 (0xeff38e57adec25ba38fef7e63e86cf2c)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0400d71b8963d9cfda4b7152eb377e90d6f2583e65053cb955351a7e106b7c97ea6aff5fb87fe26acad206b90d2b3d224111f2f1c09dbf10db5501c49b3f6d5bec\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 24:EB:34:8C:22:D7:B9:67:0D:14:CC:32:9A:0F:D0:D9:EA:B4:80:A9\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-pid","trust_anchor":"lote-pid.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0891b2","children":[{"id":"ca-pid-revocation","name":"DEMO AC PID Provider Revocation (Idakto)","role":"ca","issuer_id":"ca-root-pid","serial_hex":"CC8AFCCD977D143C022205BD630550ED","sha256":"031C0233DEC5B19DB649370D90F6986580D377A42CD4784F08FEB3A3B74C1143","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-revocation.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-revocation.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-revocation.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 271884175562477527695012817662466412781 (0xcc8afccd977d143c022205bd630550ed)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PID Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC PID Provider Revocation (Idakto),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04abfd0aea995aac058c73d4258953612599ef4ae1f907e9e16a8127ec419a7ed4dd55a41ce050883977d535b23a3c390f8eb1f782f7375fcdfc7fa137342fa036\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n C3:10:A4:F9:5C:C5:50:BC:9E:9E:60:AD:D8:D7:CE:48:92:B4:A1:64\n X509v3 Authority Key Identifier:\n keyid:24:EB:34:8C:22:D7:B9:67:0D:14:CC:32:9A:0F:D0:D9:EA:B4:80:A9\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pid.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pid.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-pid","trust_anchor":"lote-pid.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0891b2","children":[{"id":"pid-tsl-signer","name":"DEMO PID Provider (TSL Signer) 01","role":"leaf","issuer_id":"ca-pid-revocation","serial_hex":"38A3B7CBF15B170087EFC0DC74298459","sha256":"1106DED0B436EF400FAB2FDEB97C79418916973CCA2DE756E556E3904F00F8D0","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pid-tsl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pid-tsl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-revocation.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 75286839990866932678165238700808176729 (0x38a3b7cbf15b170087efc0dc74298459)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC PID Provider Revocation (Idakto),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO PID Provider (TSL Signer) 01,O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04c5f0258f940e7690d33cb68bef58e87482ba9bc2494db552ea4df242640804a39fb8ae5498549507ac5b877cfd97e9ecbf730ee509e4c09978e99140ee1fc77b\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 74:DD:F1:A2:40:FA:DC:D1:D7:4C:58:78:F3:E8:49:6A:79:6B:92:D2\n X509v3 Authority Key Identifier:\n keyid:C3:10:A4:F9:5C:C5:50:BC:9E:9E:60:AD:D8:D7:CE:48:92:B4:A1:64\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-pid-revocation.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-pid-revocation.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#0891b2","children":[]}]}]},{"id":"iaca-pid","name":"DEMO IACA National Issuing Authority (PID)","role":"root","issuer_id":"","serial_hex":"6BF856B0E1E90E57FEB0E56DD570ECC9","sha256":"7AA8C70FF6C6B60889450CF10D94F39C301224BAA1FCCF6A2B869F4FBEB759EA","not_before":"2026-11-10T12:54:10Z","not_after":"2036-11-07T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/iaca-pid.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/iaca-pid.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl","issuer_alt_name":["email:iaca-pid@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 143516843471201026868885558856965483721 (0x6bf856b0e1e90e57feb0e56dd570ecc9)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO IACA National Issuing Authority (PID),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 07 Nov 2036 12:54:10 UTC (2036-11-07T12:54:10Z)\n Subject: CN=DEMO IACA National Issuing Authority (PID),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04ffdec5b4bc10acd49a5742a148caa9e6b023cd8d3dd1c44309e54e5e33e7fe1d13716ccb95e3a4e51766f327730606b028017995ba2693790ecb2e12972a0bf3\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n CD:3A:87:5C:DC:88:F8:54:FC:FC:31:88:08:97:2B:03:D3:FB:54:F8\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl\n X509v3 Issuer Alternative Name:\n email:iaca-pid@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-pid","trust_anchor":"lote-pid.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#4f46e5","children":[{"id":"pid-attestation-signer","name":"DEMO PID Provider (Attestation Signer) 01","role":"leaf","issuer_id":"iaca-pid","serial_hex":"387310CFDBB71A01DC060EB9D9712737","sha256":"8CAF93692EE933FE0A0CEF656B243A0DEB7A474EB73DD789608867D012C63CE8","not_before":"2026-11-10T12:54:10Z","not_after":"2027-11-10T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":["1.0.18013.5.1.2"],"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pid-attestation-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pid-attestation-signer.pem","issuer_alt_name":["email:iaca-pid@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 75034222889468666331032589076945512247 (0x387310cfdbb71a01dc060eb9d9712737)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO IACA National Issuing Authority (PID),O=DEMO PID Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Wed, 10 Nov 2027 12:54:10 UTC (2027-11-10T12:54:10Z)\n Subject: CN=DEMO PID Provider (Attestation Signer) 01,O=DEMO PID Provider (Idakto),C=FR\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04a0fe6d1c07c2dbfb25680a0fe6006278544e87464833572b69710eb6db137ff1e2ccc7d47a60a95978ee416f0e4d2781989c714ccb2697856af4a26613bb9265\n X509v3 Extensions:\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Extended Key Usage: (critical)\n 1.0.18013.5.1.2\n X509v3 Subject Key Identifier:\n 97:70:15:45:56:F0:DC:9F:8E:C6:FD:23:5B:27:B7:34:1C:69:B3:9A\n X509v3 Authority Key Identifier:\n keyid:CD:3A:87:5C:DC:88:F8:54:FC:FC:31:88:08:97:2B:03:D3:FB:54:F8\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/iaca-pid.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/iaca-pid.crl\n X509v3 Issuer Alternative Name:\n email:iaca-pid@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#4f46e5","children":[]}]},{"id":"ca-root-wp","name":"DEMO Root AC Wallet Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"4538D1DC7A8B25F2C961D5E4FCB01A63","sha256":"98F639A50C84592B3E21363CE5232BCE0703EB26D0D19706CF25A75EBDDAF8C5","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 92011756824965453008146849017092905571 (0x4538d1dc7a8b25f2c961d5e4fcb01a63)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 045465865521c2dd7e14c6d047859fed1ea6fe742a00e9fd1c1d6c3a74c68783f9f7ac7f29e9caa0a341c232c51cd59d88f0eb8db79cb1d8ab4d3c856ef1f19129\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 37:89:18:A8:16:EA:9A:21:64:65:86:57:54:86:05:9A:0A:44:6F:4C\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-wallet","trust_anchor":"lote-wallet.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"ca-wallet-provider-issuance","name":"DEMO AC Wallet Provider Issuance (Idakto)","role":"ca","issuer_id":"ca-root-wp","serial_hex":"686240FD393D63455490A2C91A76EE29","sha256":"4E34C09D401AC345E149F499CEE6D91D470555CFE6CD9BE188EBE0E7390442C6","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-issuance.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-issuance.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 138749874790422272533390322458374368809 (0x686240fd393d63455490a2c91a76ee29)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Wallet Provider Issuance (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 046e6c11b350c52c818715287254954ef7eafb342d15b873f45dba0bcb74445d072eb9651338a4af3b151655c54e8e7371b43ebbd3447a5c6715831030757828f7\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n B5:0C:EC:87:2C:3F:D1:66:B4:AE:9C:9D:66:06:D6:06:8E:25:AD:C7\n X509v3 Authority Key Identifier:\n keyid:37:89:18:A8:16:EA:9A:21:64:65:86:57:54:86:05:9A:0A:44:6F:4C\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-wallet","trust_anchor":"lote-wallet.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"wp-wia-signer","name":"DEMO Wallet Provider (WIA) 01","role":"leaf","issuer_id":"ca-wallet-provider-issuance","serial_hex":"C24C1566A3E15D2A1BF6129618129EE3","sha256":"917063B5BC2222DDB851FA11873CAE03EC6A83AF96CD501ED567F48E8D20C466","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-wia-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-wia-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 258265279806115084250301738907574902499 (0xc24c1566a3e15d2a1bf6129618129ee3)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Wallet Provider Issuance (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Wallet Provider (WIA) 01,O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 040783a9bd2fc97627b4fc9285ae7718e0b73b6d2c769b655f79de41743e641faaa648d4dfe716a2ca84375bd6a6721411aa7504736f42383c43671955d0fe7e5d\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 59:12:62:48:01:BF:EF:17:36:3F:A8:53:CD:2C:2F:5D:DD:16:74:4B\n X509v3 Authority Key Identifier:\n keyid:B5:0C:EC:87:2C:3F:D1:66:B4:AE:9C:9D:66:06:D6:06:8E:25:AD:C7\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]},{"id":"wp-ka-signer","name":"DEMO Wallet Provider (KA) 01","role":"leaf","issuer_id":"ca-wallet-provider-issuance","serial_hex":"D6460495E7EBF9BEFAE4162B5E233B","sha256":"80B765CF7D65171C0DF3F271B427606AC1539A23A7E3F46787BE1772134DAE3B","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-ka-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-ka-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 1112571659705001477328258591123972923 (0xd6460495e7ebf9befae4162b5e233b)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Wallet Provider Issuance (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Wallet Provider (KA) 01,O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 047eacbeeafc6f73a6fe94fa920eacbe64bbdc7497abe87050bb24ca5f7787a468fb2d4b42732084d3785e683c07839cbb0d2c83c8f1283bd346cbd07b182e0925\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 73:87:BE:11:CB:E8:40:94:54:99:78:A8:5D:E3:62:E4:AC:27:A2:DD\n X509v3 Authority Key Identifier:\n keyid:B5:0C:EC:87:2C:3F:D1:66:B4:AE:9C:9D:66:06:D6:06:8E:25:AD:C7\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]}]}]},{"id":"ca-root-wp","name":"DEMO Root AC Wallet Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"4538D1DC7A8B25F2C961D5E4FCB01A63","sha256":"98F639A50C84592B3E21363CE5232BCE0703EB26D0D19706CF25A75EBDDAF8C5","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 92011756824965453008146849017092905571 (0x4538d1dc7a8b25f2c961d5e4fcb01a63)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 045465865521c2dd7e14c6d047859fed1ea6fe742a00e9fd1c1d6c3a74c68783f9f7ac7f29e9caa0a341c232c51cd59d88f0eb8db79cb1d8ab4d3c856ef1f19129\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 37:89:18:A8:16:EA:9A:21:64:65:86:57:54:86:05:9A:0A:44:6F:4C\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-wallet","trust_anchor":"lote-wallet.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"ca-wallet-provider-revocation","name":"DEMO AC Wallet Provider Revocation (Idakto)","role":"ca","issuer_id":"ca-root-wp","serial_hex":"D033D89F850C4A2B837E12AB6238C983","sha256":"EEFA6C8CCA476B944E73E8B019224EB938770DDCEE74B113A430BB6DE85534B1","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-revocation.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-revocation.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-revocation.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 276748623901976369975767202237947365763 (0xd033d89f850c4a2b837e12ab6238c983)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Wallet Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Wallet Provider Revocation (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0408b7bcaffd3dc235c7fcd68f3e014271e1748daf257663c9a0e7e33c96299ff89f9bfa1fe7948b7f9ab4818151f3fae6b22b201df4ca931d40fa0843543587d9\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 10:05:D9:BE:4E:55:79:CB:10:8B:1A:1C:F9:E5:DA:52:FB:03:13:F0\n X509v3 Authority Key Identifier:\n keyid:37:89:18:A8:16:EA:9A:21:64:65:86:57:54:86:05:9A:0A:44:6F:4C\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-wp.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-wp.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-wallet","trust_anchor":"lote-wallet.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"wp-tsl-signer","name":"DEMO Wallet Provider (KA \u0026 WIA TSL Signer) 01","role":"leaf","issuer_id":"ca-wallet-provider-revocation","serial_hex":"39A1DD67A0D1A0901477CAB3D29FC3AC","sha256":"BEB3E9BF89B8625AE781296D74BFE81637C690DD8DA2A7614C84BC6387C576FF","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-tsl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/wp-tsl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-revocation.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 76606446176758483296258821350102123436 (0x39a1dd67a0d1a0901477cab3d29fc3ac)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Wallet Provider Revocation (Idakto),O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Wallet Provider (KA \u0026 WIA TSL Signer) 01,O=DEMO Wallet Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04d22ba9289d614c1464688034f26ecd7a0e65ca25a3155ddfdbd40844bafcd8c82c4531d37342e2605212eb530be596b8481d00fbe6a5f90bf947f80727e9a706\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n E2:36:F5:A0:45:8D:8E:C5:6F:1B:49:9D:AC:01:14:61:27:26:21:13\n X509v3 Authority Key Identifier:\n keyid:10:05:D9:BE:4E:55:79:CB:10:8B:1A:1C:F9:E5:DA:52:FB:03:13:F0\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-wallet-provider-revocation.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-wallet-provider-revocation.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]}]}]},{"id":"ca-root-pubeaa","name":"DEMO Root AC PubEAA Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"5F4F010F572570255A4AA631C9E99E8E","sha256":"D24DE11AADE4D3679FFF848DBC61D06188A56C40C8D0789FF8658A4001F2A48D","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 126686872549193756378015637517550329486 (0x5f4f010f572570255a4aa631c9e99e8e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 043e88ac63a7dd60fc5a8354df308fc023cff7b26ea1c069f47557c828084e3f28b3c379904e4262d3a2430b221868fbd5febf7fda1e7e5c4ad1ce4246cd4fdaad\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 26:03:AF:98:55:4C:32:1C:C7:48:DE:A8:15:E9:CC:9D:F3:5D:E7:E5\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-pubeaa","trust_anchor":"lote-pubeaa.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"ca-pubeaa-issuance","name":"DEMO AC PubEAA Provider Issuance (Idakto)","role":"ca","issuer_id":"ca-root-pubeaa","serial_hex":"688599DB2DE940BBC49A9D778EEBDF42","sha256":"2635D1328D351E70CFA12071D741D0F0D6768667132BCEFA66AB0B49E0479E89","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-issuance.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-issuance.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-issuance.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 138933407617662143039148878042487316290 (0x688599db2de940bbc49a9d778eebdf42)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC PubEAA Provider Issuance (Idakto),O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 048dc3f6f82ab728e407f3fbe6a1305cd150cb752d95df5a3a27210719747aa18b596f3d5a1946bd3c1710d60f4e9798e6b4165b08ac1436d960ba0af85b19c0f5\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n DF:13:A5:E3:8C:31:0A:F7:71:03:93:93:45:E6:9B:82:DE:24:0C:D5\n X509v3 Authority Key Identifier:\n keyid:26:03:AF:98:55:4C:32:1C:C7:48:DE:A8:15:E9:CC:9D:F3:5D:E7:E5\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-pubeaa","trust_anchor":"lote-pubeaa.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"pubeaa-attestation-signer","name":"DEMO PubEAA Provider (Attestation Signer) 01","role":"leaf","issuer_id":"ca-pubeaa-issuance","serial_hex":"2AC06F6F139453701645B6AE8AACF05","sha256":"05DB5CC754F6DC5AAA288C219F8E8D06F685A900D2808F9E193810B9200C857F","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":true,"qscd":true,"qc_types":["0.4.0.194126.1.3"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-attestation-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-attestation-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-issuance.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 3551672310478545513585194276118777605 (0x2ac06f6f139453701645b6ae8aacf05)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC PubEAA Provider Issuance (Idakto),O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO PubEAA Provider (Attestation Signer) 01,O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 041c0af3d617aa789ecceead241e889823e46ebb7c006672fc7292881b1900af3a967c242597adaa53524ff04a0939a9b4041c514b1ebc4d3e0ad3a5868726a71f\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n D1:96:0F:AF:49:67:49:38:1A:BD:D5:36:36:4B:22:90:09:D4:87:A2\n X509v3 Authority Key Identifier:\n keyid:DF:13:A5:E3:8C:31:0A:F7:71:03:93:93:45:E6:9B:82:DE:24:0C:D5\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-issuance.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-issuance.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194112.1.3 (QCP-l-qscd (Qualified Legal with QSCD))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcSSCD : Clé privée sur QSCD / SSCD (Dispositif Qualifié)\n id-etsi-qcs-QcType : 0.4.0.194126.1.3\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]}]}]},{"id":"ca-root-pubeaa","name":"DEMO Root AC PubEAA Provider (Idakto)","role":"root","issuer_id":"","serial_hex":"5F4F010F572570255A4AA631C9E99E8E","sha256":"D24DE11AADE4D3679FFF848DBC61D06188A56C40C8D0789FF8658A4001F2A48D","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 126686872549193756378015637517550329486 (0x5f4f010f572570255a4aa631c9e99e8e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 043e88ac63a7dd60fc5a8354df308fc023cff7b26ea1c069f47557c828084e3f28b3c379904e4262d3a2430b221868fbd5febf7fda1e7e5c4ad1ce4246cd4fdaad\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 26:03:AF:98:55:4C:32:1C:C7:48:DE:A8:15:E9:CC:9D:F3:5D:E7:E5\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-pubeaa","trust_anchor":"lote-pubeaa.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"ca-pubeaa-revocation","name":"DEMO AC PubEAA Provider Revocation (Idakto)","role":"ca","issuer_id":"ca-root-pubeaa","serial_hex":"CEFF6ECAA6C3086D8C31B4DF3FB1A024","sha256":"451CFA15AC1CE9F01C0A00B61AEB938C13869053ABDDBBEFAAEFD18B47435248","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-revocation.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-revocation.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-revocation.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 275147249951374572393499514474213777444 (0xceff6ecaa6c3086d8c31b4df3fb1a024)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC PubEAA Provider (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC PubEAA Provider Revocation (Idakto),O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 049a0f8c4ba5782f1500154d7de05f579857bcdd6df86b12f0d0d3599b9c29c89921d0b5dc2d4595a05f8c48e30cf3e86ba7e55f46e8af1ed19653884dcbbf53d1\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n C1:F0:D9:BA:D0:62:88:8F:97:C3:86:84:6D:11:98:7D:AB:46:1B:6D\n X509v3 Authority Key Identifier:\n keyid:26:03:AF:98:55:4C:32:1C:C7:48:DE:A8:15:E9:CC:9D:F3:5D:E7:E5\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-pubeaa.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-pubeaa.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-mdl","trust_anchor":"lote-mdl.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#d97706","children":[{"id":"pubeaa-tsl-signer","name":"DEMO PubEAA Provider (TSL Signer) 01","role":"leaf","issuer_id":"ca-pubeaa-revocation","serial_hex":"8BE2BDAB28140E19E499A76BB2826F53","sha256":"165AE67A6341B46F5371D4B9A9FBA299F932CC19E1707716C8A66206DD2D4EC0","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-tsl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-tsl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-revocation.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 185939997439966702982606766619219881811 (0x8be2bdab28140e19e499a76bb2826f53)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC PubEAA Provider Revocation (Idakto),O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO PubEAA Provider (TSL Signer) 01,O=DEMO PubEAA Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0465e05429ca9388df847486a9930b8c173298830124f497310f479cc7ce72b5232a6042e33a18240d2c44cb47a86675473cec990ace13f395c807736200b5d9ca\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n D2:29:6A:50:7B:38:38:17:56:73:42:AD:A8:6B:6B:65:D3:32:42:18\n X509v3 Authority Key Identifier:\n keyid:C1:F0:D9:BA:D0:62:88:8F:97:C3:86:84:6D:11:98:7D:AB:46:1B:6D\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-pubeaa-revocation.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-pubeaa-revocation.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#d97706","children":[]}]}]},{"id":"iaca","name":"DEMO IACA National Issuing Authority (mDL)","role":"root","issuer_id":"","serial_hex":"81A50F59C7995F2F565A1E629F1FB7D1","sha256":"A0D44A428C74A869309B13AA6A391B66E193C60492CE4ADB7B30640270B8B12F","not_before":"2026-11-10T12:54:10Z","not_after":"2036-11-07T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/iaca.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/iaca.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl","issuer_alt_name":["email:iaca@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 172327451787135844810764917969363384273 (0x81a50f59c7995f2f565a1e629f1fb7d1)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO IACA National Issuing Authority (mDL),O=DEMO French Sovereign Authority (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000105\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 07 Nov 2036 12:54:10 UTC (2036-11-07T12:54:10Z)\n Subject: CN=DEMO IACA National Issuing Authority (mDL),O=DEMO French Sovereign Authority (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000105\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0457cc44f4f93055e419af5ea659e2561967c6135dcbbb02a4301207744332711cd418621553a6dac795d77d733ee92005fca68e9478e9e5c67cef19ca6963fdf5\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 80:72:CF:F7:FF:88:8B:2F:21:E2:36:67:0C:19:95:32:25:E8:09:8B\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl\n X509v3 Issuer Alternative Name:\n email:iaca@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-mdl","trust_anchor":"lote-mdl.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0284c7","children":[{"id":"pubeaa-mdl-signer","name":"DEMO MDL Document Signer 01","role":"leaf","issuer_id":"iaca","serial_hex":"189453FFF4C614B0F8BF11E40F5F5131","sha256":"FFDD7968DF1D03C31EB934FADEE5BC2FC2CD77BAB0C9D9FEC703E2AFA76B95AB","not_before":"2026-11-10T12:54:10Z","not_after":"2027-11-10T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":["1.0.18013.5.1.2"],"qc_compliance":true,"qscd":true,"qc_types":["0.4.0.194126.1.3"],"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-mdl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/pubeaa-mdl-signer.pem","issuer_alt_name":["email:iaca@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 32671635552833487085337729303406661937 (0x189453fff4c614b0f8bf11e40f5f5131)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO IACA National Issuing Authority (mDL),O=DEMO French Sovereign Authority (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000105\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Wed, 10 Nov 2027 12:54:10 UTC (2027-11-10T12:54:10Z)\n Subject: CN=DEMO MDL Document Signer 01,O=DEMO PubEAA - MDL Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000105\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 042fce4653a74408747375a4557dce64d1e10634b28f5b3aa477a07a25acf1880065b1c2e8d6f3230a9a813bb56cfcee86f78aabafd4535d7dc69ad0281bba30ac\n X509v3 Extensions:\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Extended Key Usage: (critical)\n 1.0.18013.5.1.2\n X509v3 Subject Key Identifier:\n 1C:58:11:87:DE:45:05:FB:DC:7C:7C:B6:F8:FD:45:2D:E9:AF:E7:F1\n X509v3 Authority Key Identifier:\n keyid:80:72:CF:F7:FF:88:8B:2F:21:E2:36:67:0C:19:95:32:25:E8:09:8B\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/iaca.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/iaca.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.194112.1.3 (QCP-l-qscd (Qualified Legal with QSCD))\n X509v3 Issuer Alternative Name:\n email:iaca@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n QCStatements (ETSI EN 319 412-5 / EUDI Wallet):\n id-etsi-qcs-QcCompliance : Conforme Règlement (UE) n° 910/2014 (eIDAS)\n id-etsi-qcs-QcSSCD : Clé privée sur QSCD / SSCD (Dispositif Qualifié)\n id-etsi-qcs-QcType : 0.4.0.194126.1.3\n id-etsi-qcs-QcPDS : https://trust-model.wallee.demo.idenv.fr/pds/iaca.pdf (lang: en)\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#0284c7","children":[]}]},{"id":"ca-root-registrar","name":"DEMO Root AC Registrar (Idakto)","role":"root","issuer_id":"","serial_hex":"9B6BF1FE7CD9B4FAB74FE4ECAE0E9FBA","sha256":"A671EC46BBB3BE0C9A7084705E9CD700E3F754FB37C3B66951950F064FFAEC79","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-registrar.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-registrar.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 206590823333832278303621903451998298042 (0x9b6bf1fe7cd9b4fab74fe4ecae0e9fba)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Registrar (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC Registrar (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0435c5ffec098970cf9b9ddf1b92c2f93c772d0ec734a2cf70272a7ffbe1916936f0c1387599a8d8fcb62942c823dafaa2d6785b7e85d466e5b5ec77baa78ff4f4\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 8B:7A:5C:EE:1D:71:71:73:A3:7D:AD:42:03:98:E0:96:92:41:41:70\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":true,"trust_list_id":"lote-registrars","trust_anchor":"lote-registrars.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0891b2","children":[{"id":"ca-registrar","name":"DEMO AC Registrar (Idakto)","role":"ca","issuer_id":"ca-root-registrar","serial_hex":"653D3F41CC9274D9B0AC8BB83458957A","sha256":"FE08E465DB3A08D44E7786A53A7089FD90278848C4AD1C401A3D6ECD849054DA","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-registrar.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-registrar.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-registrar.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 134570040687594718114447836244702958970 (0x653d3f41cc9274d9b0ac8bb83458957a)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Registrar (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Registrar (Idakto),O=DEMO Registrar (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0442d565c1818df28c7a687922e4180469a44e2486e236304daf00b344f06fe7afa555b55ed1d73f462aa7d3de6b6b5aacd8a0a8e01f37ff02d3089b5ce1dd1e05\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 6B:BD:7B:B4:A1:17:73:42:E1:47:85:A2:8E:41:25:ED:6A:E2:D4:05\n X509v3 Authority Key Identifier:\n keyid:8B:7A:5C:EE:1D:71:71:73:A3:7D:AD:42:03:98:E0:96:92:41:41:70\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-registrar.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-registrar.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":true,"trust_list_id":"lote-registrars","trust_anchor":"lote-registrars.jwt","trust_anchor_type":"tl_service","category":"jwt","color":"#0891b2","children":[{"id":"registrar-signer","name":"DEMO Registrar (Registrar Signer) 01","role":"leaf","issuer_id":"ca-registrar","serial_hex":"45BCC29B73C45631AA285D8C2836DD6E","sha256":"3BAB941BD0D79E404525BE20177FF96C0E5919C5F81435C82B84F7BDDF28760D","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/registrar-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/registrar-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-registrar.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 92696830622220173589329282700215246190 (0x45bcc29b73c45631aa285d8c2836dd6e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Registrar (Idakto),O=DEMO Registrar (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Registrar (Registrar Signer) 01,O=DEMO Registrar (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04f89feae4dca6fff0063add117be70cf8ea82c284923d0b1b81d4f20690cb844c2b2a5645ae257f944a78219d369192fc96206c41b8e339dec8e9492e21cb766a\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n 77:2E:F1:3C:4B:72:8F:38:9B:21:08:DA:02:3A:81:4A:24:76:CB:8D\n X509v3 Authority Key Identifier:\n keyid:6B:BD:7B:B4:A1:17:73:42:E1:47:85:A2:8E:41:25:ED:6A:E2:D4:05\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-registrar.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-registrar.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Émis sous l'AC (Hors-Liste)","trust_anchor_type":"leaf_issued","category":"jwt","color":"#0891b2","children":[]}]}]},{"id":"ca-root-tm","name":"DEMO Root AC Trust Model (Idakto)","role":"root","issuer_id":"","serial_hex":"E0E6D7C5438172589B02D5E542042E89","sha256":"340665BE1B3F8B1C52877D37B393B57930E1273B21E5CCBD20FAFE2296FE6B79","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-tm.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-tm.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 298945675680188953377253107846258896521 (0xe0e6d7c5438172589b02d5e542042e89)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Trust Model (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC Trust Model (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0401e5562dd3f7f6d8f5da89d260420990f21e73fe82fdfcb15256ef9597ded255612b394bf2a28320a5e96ffb311248218bc4dc040bc5bb76b9bf63bedcb15870\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 1B:0D:49:7A:0E:30:D8:FE:74:71:30:63:10:7B:C8:CE:1E:E2:2F:15\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":false,"trust_anchor":"Hors-Bande (JOUE / Schéma)","trust_anchor_type":"oob_root","category":"oob","color":"#64748b","children":[{"id":"ca-trustmodel","name":"DEMO AC Trust Model Provider (Idakto)","role":"ca","issuer_id":"ca-root-tm","serial_hex":"627657E318BCA1AA7C2C69AE24C63452","sha256":"A5B012ED047972B8D7B38E14715C6647BFCF5783444821F6C44A4B14493ABC48","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 130878817178312955373768916853743563858 (0x627657e318bca1aa7c2c69ae24c63452)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC Trust Model (Idakto),O=DEMO Trust Services (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Trust Model Provider (Idakto),O=DEMO Trust Model (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 044eb7b384850bc85f145c8fd6a879b936d674d65a74de98d9f2a1488d714e56ce3e29d091166b1fa85b396da0a175465034bf818b6e9e54f62b0c801c42351283\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 50:93:4B:8A:90:73:AE:E9:20:CE:58:BF:18:D4:70:42:83:16:3A:D0\n X509v3 Authority Key Identifier:\n keyid:1B:0D:49:7A:0E:30:D8:FE:74:71:30:63:10:7B:C8:CE:1E:E2:2F:15\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-tm.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-tm.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":false,"trust_anchor":"AC Intermédiaire (Hors-Liste)","trust_anchor_type":"internal_ca","category":"oob","color":"#64748b","children":[{"id":"tm-signer","name":"DEMO Trust Model Provider (TM Signer) 01","role":"leaf","issuer_id":"ca-trustmodel","serial_hex":"F009FD3FCE91971B6F9366149F6A3373","sha256":"E0D026E5091E68DECBFE60157FEC9C9F9BE05D200C39B3D2223D613962508975","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/tm-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/tm-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 319066586165040505067323086674858750835 (0xf009fd3fce91971b6f9366149f6a3373)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Trust Model Provider (Idakto),O=DEMO Trust Model (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO Trust Model Provider (TM Signer) 01,O=DEMO Trust Model Provider (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000101\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 047d189406ba626617c7b68307c42e4df7e5ac0a74e753a753dc0329abde6f4bf98a672d58a96c3abf4df83e5d4ff36957fc8217cbc3f60751b789116d6e73b09d\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n F5:2D:5B:69:23:8F:47:94:F3:C9:DA:B8:19:F3:12:1A:39:EE:83:64\n X509v3 Authority Key Identifier:\n keyid:50:93:4B:8A:90:73:AE:E9:20:CE:58:BF:18:D4:70:42:83:16:3A:D0\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Signataire LoTL/LoTE","trust_anchor_type":"tl_signer","category":"oob","color":"#64748b","children":[]},{"id":"lotl-signer","name":"DEMO EU List of Trusted Lists Signer 01","role":"leaf","issuer_id":"ca-trustmodel","serial_hex":"DB116ABB172F5978A5F6984F8E553C0C","sha256":"C73A9B671DC28F4293FF51CD28DC25C36144675EC3F7EC9CAE42D9178138CCDE","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/lotl-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/lotl-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 291191364881751442735712834763785321484 (0xdb116abb172f5978a5f6984f8e553c0c)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Trust Model Provider (Idakto),O=DEMO Trust Model (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO EU List of Trusted Lists Signer 01,O=DEMO European Commission / Scheme Operator (Idakto),C=EU,2.5.4.97=VAT-EU000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 04be891b56aa6004454b488429da36ff374f6c88bfe2a6710a5f062698489ab3995e9a4ec348ef5935a85f1ed743535a0b8d92404c6ad6a4796f16ed5dffc2f102\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n CF:72:5B:2E:3D:C7:87:C9:25:D4:55:8E:EF:8B:6B:E5:93:0A:BA:95\n X509v3 Authority Key Identifier:\n keyid:50:93:4B:8A:90:73:AE:E9:20:CE:58:BF:18:D4:70:42:83:16:3A:D0\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Signataire LoTL/LoTE","trust_anchor_type":"tl_signer","category":"oob","color":"#64748b","children":[]},{"id":"lote-pointers-signer","name":"DEMO EU Pointers to LoTE Signer 01","role":"leaf","issuer_id":"ca-trustmodel","serial_hex":"93DC8D06B2FCF84316E0299B20BA0C58","sha256":"A8CB2A322B8C472F8F88D1F88E5126E090E34C7487A9C8653695B3149B955ADE","not_before":"2026-11-10T12:54:10Z","not_after":"2029-11-09T12:54:10Z","key_usage":["digitalSignature"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/lote-pointers-signer.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/lote-pointers-signer.pem","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 196541681039777538805462425782787378264 (0x93dc8d06b2fcf84316e0299b20ba0c58)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO AC Trust Model Provider (Idakto),O=DEMO Trust Model (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Fri, 09 Nov 2029 12:54:10 UTC (2029-11-09T12:54:10Z)\n Subject: CN=DEMO EU Pointers to LoTE Signer 01,O=DEMO European Commission / Scheme Operator (Idakto),C=EU,2.5.4.97=VAT-EU000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0490f3a26205ebd05ee39123682109b7069664035012cba6a7f9f770fe1d4e30b5dc6a838b7cc71c7b6435043ef81bd53709a996cc140222b4a83d1206ef5064a5\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:FALSE\n X509v3 Key Usage: (critical)\n Digital Signature\n X509v3 Subject Key Identifier:\n F7:79:41:76:7B:22:F4:22:09:6D:20:27:31:C9:37:C3:42:05:9D:3E\n X509v3 Authority Key Identifier:\n keyid:50:93:4B:8A:90:73:AE:E9:20:CE:58:BF:18:D4:70:42:83:16:3A:D0\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-trustmodel.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-trustmodel.crl\n X509v3 Certificate Policies:\n Policy: 0.4.0.2042.1.1 (NCP (Normalized Certificate Policy))\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"SIGNATAIRE / FEUILLE","in_trust_list":false,"trust_anchor":"Signataire LoTL/LoTE","trust_anchor_type":"tl_signer","category":"oob","color":"#64748b","children":[]}]}]},{"id":"ca-root-qscd","name":"DEMO Root AC QSCD (Idakto)","role":"root","issuer_id":"","serial_hex":"2D574CF30CB5B0309E612C1F6A7F932E","sha256":"A88B6E640849BDDD78BA2A947FDB429444012BCDF50B9D28854DAA49596E755A","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qscd.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qscd.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 60268550356520580502103266860646503214 (0x2d574cf30cb5b0309e612c1f6a7f932e)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QSCD (Idakto),O=DEMO Trust Services QSCD (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO Root AC QSCD (Idakto),O=DEMO Trust Services QSCD (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0426b2223e4a819c6e3fbc99ae82d2a053a2f1d0d061c92f6b05cf9b1e3912f485a3fcf77b980a689caa39d89302c7a27d7d49982ed5b762d8b9e0ef6943aefd9a\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:1\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n B6:B3:5A:80:90:B2:21:9E:68:BD:C7:3C:61:9B:04:CC:CC:8C:27:5C\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC RACINE","in_trust_list":false,"trust_anchor":"Hors-Bande (ANSSI / BSI)","trust_anchor_type":"oob_root","category":"oob","color":"#64748b","children":[{"id":"ca-qscd","name":"DEMO AC Trust Service Provider QSCD (Idakto)","role":"ca","issuer_id":"ca-root-qscd","serial_hex":"E9280DA0E22C76D5FCCF6CD003CED2F","sha256":"4BA8E83D67745952E8C55A604780E9ED92CC703249E60D8119000E993AB08531","not_before":"2026-11-10T12:54:10Z","not_after":"2046-11-05T12:54:10Z","key_usage":["keyCertSign","cRLSign"],"ext_key_usage":null,"qc_compliance":false,"qscd":false,"qc_types":null,"cert_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qscd.crt","pem_url":"https://trust-model.wallee.demo.idenv.fr/certs/ca-qscd.pem","crl_url":"https://trust-model.wallee.demo.idenv.fr/crl/ca-qscd.crl","issuer_alt_name":["email:pki@trust-model.wallee.demo.idenv.fr","URI:https://trust-model.wallee.demo.idenv.fr/"],"crl_distribution_points":["https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl"],"decoded_text":"Certificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 19369880706878437961752699085747186991 (0xe9280da0e22c76d5fccf6cd003ced2f)\n Signature Algorithm: ECDSA-SHA256\n Issuer: CN=DEMO Root AC QSCD (Idakto),O=DEMO Trust Services QSCD (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Validity:\n Not Before: Tue, 10 Nov 2026 12:54:10 UTC (2026-11-10T12:54:10Z)\n Not After : Mon, 05 Nov 2046 12:54:10 UTC (2046-11-05T12:54:10Z)\n Subject: CN=DEMO AC Trust Service Provider QSCD (Idakto),O=DEMO Trust Service Provider QSCD (Idakto),C=FR,2.5.4.97=NTRFR-DEMO000000001\n Subject Public Key Info:\n Public Key Algorithm: ECDSA\n NIST CURVE: P-256\n Public Key Value: 0474befcd0e81b1b75f1a9eb74431e94c0ed6c5a07f93ba04ad55900c29a5c30c03453248a946adca788e49272650f9469bb8b0bc2cd90d407e1c322577e3de560\n X509v3 Extensions:\n X509v3 Basic Constraints: (critical)\n CA:TRUE, pathlen:0\n X509v3 Key Usage: (critical)\n Certificate Sign, CRL Sign\n X509v3 Subject Key Identifier:\n 02:97:3E:51:40:3E:4B:4C:44:E5:C1:CE:78:82:37:72:E5:B7:E5:29\n X509v3 Authority Key Identifier:\n keyid:B6:B3:5A:80:90:B2:21:9E:68:BD:C7:3C:61:9B:04:CC:CC:8C:27:5C\n X509v3 Authority Information Access:\n CA Issuers - URI:https://trust-model.wallee.demo.idenv.fr/certs/ca-root-qscd.crt\n X509v3 CRL Distribution Points:\n Full Name: URI:https://trust-model.wallee.demo.idenv.fr/crl/ca-root-qscd.crl\n X509v3 Issuer Alternative Name:\n email:pki@trust-model.wallee.demo.idenv.fr\n URI:https://trust-model.wallee.demo.idenv.fr/\n","role_title":"AC INTERMÉDIAIRE","in_trust_list":false,"trust_anchor":"AC Intermédiaire (Hors-Liste)","trust_anchor_type":"internal_ca","category":"oob","color":"#64748b","children":[]}]}]}