x5c request-object chain excludes the root trust anchor

HAIP 1.0 §5MUSTRoles: verifier, wallet

Requirement as recorded in the ProtocolSoup registry

The x5c request-object certificate chain excludes the root trust anchor.

Read §5 in HAIP 1.0

Self-test verdict

PassCommit 97df6a8Evaluated 2026-10-11

This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.

Tests

TestCreateAuthorizationRequestBuildsX509SANDNSRequestObject
./internal/protocols/oid4vp
Pass

Implementation

backend/internal/protocols/oid4vp/verifier_identity.go

Related requirements

CW-H014Key attestations supported; no unproven hardware or ISO 18045 claims HAIP-VP-002Independently issued SD-JWT VCs validate to a configured trust anchor

All HAIP 1.0 requirements · OID4VCI protocol page