1. Introduction

The Open Finance UAE ecosystem makes use of chains of certificates and the TLS protocol to guarantee the confidentiality, authentication and integrity of the communication channel used by the APIs of the participating organisations, as well as the customers of each of the participants.

...

The certificate issuing and revocation processes, the practices, availability , and values can be found on the Open Finance UAE Certificate Practice Statement < Include Link Once Issued >. http://repository.pki.openfinance.ae

2.1 Certificate Types

The Open Finance UAE Ecosystem supports four types of certificates, differentiated by their use cases: two are designed for digital signatures and the other two are for mutual TLS (mTLS) authentication.

...

Distinguished Name : C=AE, O=Open Finance UAE, OU=Open Finance UAE Production Trust Framework, CN= Open Finance UAE Production Root CA - G1

< Include Link to Intermediate CA JWKS once issued >.

< Include Link to intermediate CA OCSP responder and CRL list >The Issuing CA Certificate in PEM Format can be reached at : http://crl.pki.openfinance.ae/issuer-ca.pem

The Issuing CA OCSP can be reached at : http://ocsp.pki.openfinance.ae

The Issuing CA CRL can be reached at : http://crl.pki.openfinance.ae/issuer.crl

The following root certificate authority will be used on the Trust Framework :

Distinguished Name : C=AE, O=Open Finance UAE, OU=Open Finance UAE Production Trust Framework, CN= Open Finance UAE Production Issuing CA - G1

< Include Link to Root CA JWKS once issued >. The Root CA Certificate in PEM Format can be reached at : http://crl.pki.openfinance.ae/root-ca.pem

All intermediate and root issuers will use the following algorithms:

...

Distinguished Name : C=AE, O=Open Finance UAE, OU=Open Finance UAE Sandbox Trust Framework, CN= Open Finance UAE Sandbox Root CA - G1

< Include Link to Intermediate CA JWKS once issued >.

< Include Link to intermediate CA OCSP responder and CRL list >The Issuing CA Certificate in PEM Format can be reached at : http://crl.sandbox.pki.openfinance.ae/issuer-ca.pem

The Issuing CA OCSP can be reached at : http://ocsp.sandbox.pki.openfinance.ae

The Issuing CA CRL can be reached at : http://crl.sandbox.pki.openfinance.ae/issuer.crl

The following root certificate authority will be used on the Trust Framework :

Distinguished Name : C=AE, O=Open Finance UAE, OU=Open Finance UAE Sandbox Trust Framework, CN= Open Finance UAE Sandbox Issuing CA - G1

< Include Link to Root CA JWKS once issued >. The Root CA Certificate in PEM Format can be reached at : http://crl.sandbox.pki.openfinance.ae/root-ca.pem

All intermediate and root issuers will use the following algorithms:

...

...