Certificate

Top-level signed certificate artifact. Persisted as JSONB. The signed bytes are the canonical-JSON serialization of certificate (the signature wrapper is excluded).

certificate object

Everything that gets signed. Field order is significant for signature verification.

idstring

Example: cert_GPU4XBpCp7q

versioninteger

Example: 1

issued_atstring<date-time>

issuer object

namestring

verification_base_urlstring

jwks_urlstring

subject object

customer_idstring

declared_addressstring

verification object

verification_idstring

resultstring

verifiedboolean

confidencenumber<double>

device_distance_minteger

gps_accuracy_mnumber<double>nullable

methodstring

timestampstring<date-time>

address object

gps_codestring

regionstring

districtstring

areastring

latnumber<double>

lngnumber<double>

quality_scorenumber<double>

integrity object

spoof_riskstring

Possible values: [LOW, MEDIUM, HIGH]

fraud_risk_scorenumber<double>

fraud_risk_levelstring

disclaimerstring

signature object

algorithmstring

Possible values: [Ed25519]

kidstring

Identifies which key in the JWK Set was used.

Example: v1

signaturestring

Base64-encoded 64-byte Ed25519 signature.

Certificate

{
  "certificate": {
    "id": "cert_GPU4XBpCp7q",
    "version": 1,
    "issued_at": "2024-07-29T15:51:28.071Z",
    "issuer": {
      "name": "string",
      "verification_base_url": "string",
      "jwks_url": "string"
    },
    "subject": {
      "customer_id": "string",
      "declared_address": "string"
    },
    "verification": {
      "verification_id": "string",
      "result": "string",
      "verified": true,
      "confidence": 0,
      "device_distance_m": 0,
      "gps_accuracy_m": 0,
      "method": "string",
      "timestamp": "2024-07-29T15:51:28.071Z"
    },
    "address": {
      "gps_code": "string",
      "region": "string",
      "district": "string",
      "area": "string",
      "lat": 0,
      "lng": 0,
      "quality_score": 0
    },
    "integrity": {
      "spoof_risk": "LOW",
      "fraud_risk_score": 0,
      "fraud_risk_level": "string"
    },
    "disclaimer": "string"
  },
  "signature": {
    "algorithm": "Ed25519",
    "kid": "v1",
    "signature": "string"
  }
}