Status List Signers

Create a Status List Signer

POST/v2/credentials/mobile/status-list-signers

Uses an existing IACA to sign a status list signer (intermediate certificate) that can be used to sign status list tokens.

Only available in implementations using unmanaged (external) IACAs.
A maximum of three Status List Signers can be created per tenant.

Roles

adminissuer

Analytics Events

MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_CREATE_STARTMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_CREATE_SUCCESSMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_CREATE_FAIL

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

`application/json`

curl -X POST "https://example.com/v2/credentials/mobile/status-list-signers" \  -H "Content-Type: application/json" \  -d '{    "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6"  }'

{  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",  "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6",  "active": false,  "csrPem": "-----BEGIN CERTIFICATE REQUEST-----...-----END CERTIFICATE REQUEST-----"}

Revoke a Status List Signer

POST/v2/credentials/mobile/status-list-signers/{statusListSignerId}/revoke

Revokes an existing status list signer, making it unusable for signing new status lists.

If the verifier checks the CRL referenced in the IACA certificate, it must treat revoked status list signers and any status list they signed as untrusted.

Roles

adminissuer

Analytics Events

MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_REVOKE_STARTMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_REVOKE_SUCCESSMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_REVOKE_FAIL

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Path Parameters

statusListSignerId*string

Status list signer identifier

Formatuuid

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Empty request body for status list signer revocation

Response Body

`application/json`

curl -X POST "https://example.com/v2/credentials/mobile/status-list-signers/497f6eca-6276-4993-bfeb-53cbbbba6f08/revoke" \  -H "Content-Type: application/json" \  -d '{}'

{  "revoked": true,  "revocationDate": "2025-10-31T23:59:59Z"}

Retrieve all Status List Signers

GET/v2/credentials/mobile/status-list-signers

Retrieves all existing status list signers.

Roles

adminissuermanaged-issuer

Analytics Events

MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_LIST_STARTMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_LIST_SUCCESSMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_LIST_FAIL

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Response Body

`application/json`

curl -X GET "https://example.com/v2/credentials/mobile/status-list-signers"

{  "data": [    {      "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",      "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6",      "active": false,      "csrPem": "-----BEGIN CERTIFICATE REQUEST-----...-----END CERTIFICATE REQUEST-----"    }  ]}

Retrieve a Status List Signer

GET/v2/credentials/mobile/status-list-signers/{statusListSignerId}

Retrieves an existing status list signer.

Status list signer operations are only available in implementations using unmanaged (external) IACAs.

Roles

adminissuermanaged-issuer

Analytics Events

MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_STARTMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_SUCCESSMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_FAIL

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Path Parameters

statusListSignerId*string

Status list identifier

Formatuuid

Response Body

`application/json`

curl -X GET "https://example.com/v2/credentials/mobile/status-list-signers/497f6eca-6276-4993-bfeb-53cbbbba6f08"

{  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",  "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6",  "active": false,  "csrPem": "-----BEGIN CERTIFICATE REQUEST-----...-----END CERTIFICATE REQUEST-----"}

Update a Status List Signer

PUT/v2/credentials/mobile/status-list-signers/{statusListSignerId}

Updates the status of an existing status list signer.

Only available in implementations using unmanaged (external) IACAs.

Roles

adminissuer

Analytics Events

MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_UPDATE_STARTMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_UPDATE_SUCCESSMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_UPDATE_FAIL

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Path Parameters

statusListSignerId*string

Status list identifier

Formatuuid

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

`application/json`

curl -X PUT "https://example.com/v2/credentials/mobile/status-list-signers/497f6eca-6276-4993-bfeb-53cbbbba6f08" \  -H "Content-Type: application/json" \  -d '{}'

{  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",  "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6",  "active": true,  "certificatePem": "string",  "certificateFingerprint": "475DA948E4BA44D9B5BC31AB4B8006113FD5F538",  "certificateData": {    "notBefore": "2019-08-24T14:15:22Z",    "notAfter": "2019-08-24T14:15:22Z",    "country": "string",    "stateOrProvinceName": "string",    "organisationName": "string"  }}

Delete a Status List Signer

DELETE/v2/credentials/mobile/status-list-signers/{statusListSignerId}

Deletes an existing status list signer.

Only available in implementations using unmanaged (external) IACAs.

Roles

adminissuer

Analytics Events

MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_DELETE_STARTMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_DELETE_SUCCESSMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_DELETE_FAIL

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Path Parameters

statusListSignerId*string

Status list identifier

Formatuuid

Response Body

curl -X DELETE "https://example.com/v2/credentials/mobile/status-list-signers/497f6eca-6276-4993-bfeb-53cbbbba6f08"

Empty

Create a Status List Signer

POST/v2/credentials/mobile/status-list-signers

Uses an existing IACA to sign a status list signer (intermediate certificate) that can be used to sign status list tokens.

Only available in implementations using unmanaged (external) IACAs.
A maximum of three Status List Signers can be created per tenant.

Roles

adminissuer

Analytics Events

MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_CREATE_STARTMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_CREATE_SUCCESSMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_CREATE_FAIL

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

iacaId*string

Internal identifier of the IACA used to sign this status list signer:

Must be the same IACA used to sign credentials that are included in a status list signed by this status list signer.
Must be an unmanaged (external) IACA.

Formatuuid

Response Body

`application/json`

curl -X POST "https://example.com/v2/credentials/mobile/status-list-signers" \  -H "Content-Type: application/json" \  -d '{    "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6"  }'

{  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",  "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6",  "active": false,  "csrPem": "-----BEGIN CERTIFICATE REQUEST-----...-----END CERTIFICATE REQUEST-----"}

Revoke a Status List Signer

POST/v2/credentials/mobile/status-list-signers/{statusListSignerId}/revoke

Revokes an existing status list signer, making it unusable for signing new status lists.

If the verifier checks the CRL referenced in the IACA certificate, it must treat revoked status list signers and any status list they signed as untrusted.

Roles

adminissuer

Analytics Events

MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_REVOKE_STARTMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_REVOKE_SUCCESSMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_REVOKE_FAIL

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Path Parameters

statusListSignerId*string

Status list signer identifier

Formatuuid

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Empty request body for status list signer revocation

Response Body

`application/json`

curl -X POST "https://example.com/v2/credentials/mobile/status-list-signers/497f6eca-6276-4993-bfeb-53cbbbba6f08/revoke" \  -H "Content-Type: application/json" \  -d '{}'

{  "revoked": true,  "revocationDate": "2025-10-31T23:59:59Z"}

Retrieve all Status List Signers

GET/v2/credentials/mobile/status-list-signers

Retrieves all existing status list signers.

Roles

adminissuermanaged-issuer

Analytics Events

MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_LIST_STARTMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_LIST_SUCCESSMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_LIST_FAIL

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Response Body

`application/json`

curl -X GET "https://example.com/v2/credentials/mobile/status-list-signers"

{  "data": [    {      "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",      "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6",      "active": false,      "csrPem": "-----BEGIN CERTIFICATE REQUEST-----...-----END CERTIFICATE REQUEST-----"    }  ]}

Retrieve a Status List Signer

GET/v2/credentials/mobile/status-list-signers/{statusListSignerId}

Retrieves an existing status list signer.

Status list signer operations are only available in implementations using unmanaged (external) IACAs.

Roles

adminissuermanaged-issuer

Analytics Events

MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_STARTMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_SUCCESSMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_FAIL

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Path Parameters

statusListSignerId*string

Status list identifier

Formatuuid

Response Body

`application/json`

curl -X GET "https://example.com/v2/credentials/mobile/status-list-signers/497f6eca-6276-4993-bfeb-53cbbbba6f08"

{  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",  "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6",  "active": false,  "csrPem": "-----BEGIN CERTIFICATE REQUEST-----...-----END CERTIFICATE REQUEST-----"}

Update a Status List Signer

PUT/v2/credentials/mobile/status-list-signers/{statusListSignerId}

Updates the status of an existing status list signer.

Only available in implementations using unmanaged (external) IACAs.

Roles

adminissuer

Analytics Events

MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_UPDATE_STARTMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_UPDATE_SUCCESSMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_UPDATE_FAIL

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Path Parameters

statusListSignerId*string

Status list identifier

Formatuuid

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

active?boolean

Status list signer status. Must be set to true for this status list signer to be available for signing status lists.

certificatePem?string

Status list signer certificate in PEM format. The certificate must be:

Valid
Not expired
Compliant with the details provided in the Certificate Signing Request returned when the status list signer was created

Response Body

`application/json`

curl -X PUT "https://example.com/v2/credentials/mobile/status-list-signers/497f6eca-6276-4993-bfeb-53cbbbba6f08" \  -H "Content-Type: application/json" \  -d '{}'

{  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",  "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6",  "active": true,  "certificatePem": "string",  "certificateFingerprint": "475DA948E4BA44D9B5BC31AB4B8006113FD5F538",  "certificateData": {    "notBefore": "2019-08-24T14:15:22Z",    "notAfter": "2019-08-24T14:15:22Z",    "country": "string",    "stateOrProvinceName": "string",    "organisationName": "string"  }}

Delete a Status List Signer

DELETE/v2/credentials/mobile/status-list-signers/{statusListSignerId}

Deletes an existing status list signer.

Only available in implementations using unmanaged (external) IACAs.

Roles

adminissuer

Analytics Events

MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_DELETE_STARTMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_DELETE_SUCCESSMOBILE_CREDENTIAL_STATUS_LIST_SIGNER_DELETE_FAIL

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Path Parameters

statusListSignerId*string

Status list identifier

Formatuuid

Response Body

curl -X DELETE "https://example.com/v2/credentials/mobile/status-list-signers/497f6eca-6276-4993-bfeb-53cbbbba6f08"

Empty

Roles

Analytics Events

200application/json

409application/json

Roles

Analytics Events

200application/json

400application/json

404application/json

409application/json

Roles

Analytics Events

200application/json

Roles

Analytics Events

200application/json

Roles

Analytics Events

200application/json

Roles

Analytics Events

204

On this page

Status List Signers

Roles

Analytics Events

200application/json

409application/json

Roles

Analytics Events

200application/json

400application/json

404application/json

409application/json

Roles

Analytics Events

200application/json

Roles

Analytics Events

200application/json

Roles

Analytics Events

200application/json

Roles

Analytics Events

204

On this page

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`