Attribute certificate template example

Use the following example to understand how an RFC-5755 attribute certificate template can be configured to issue attribute certificates.

Example:

{
  "version": 1,
  "signature_algorithm": {
    "allowed_algorithms": [
      "sha256WithRSA",
      "sha384WithRSA",
      "sha512WithRSA",
      "sha256WithECDSA",
      "sha384WithECDSA",
      "sha512WithECDSA",
      "pureEd25519",
      "hashedEd25519",
      "match_issuer"
    ],
    "default_algorithm": "match_issuer"
  },
  "holder_source": "certificate",
  "serial_number_size": 16,
  "attributes": [
    {
      "type": "services",
      "include": "yes",
      "allowed_source": [
        "fixed_value",
        "user_supplied"
      ]
    }
  ],
  "extensions": {
    "pki_role": {
      "critical": true,
      "allow_critical_override": true,
      "include": "yes",
      "allowed_values": [
        "enhanced_rights"
      ],
      "default_value": "enhanced_rights"
    },
    "aki": {
      "critical": false,
      "allow_critical_override": true,
      "include": "yes"
    },
    "prod_qualifier": {
      "critical": true,
      "allow_critical_override": true,
      "include": "yes",
      "allowed_values": [
        "standard"
      ],
      "default_value": "standard"
    },
    "target_ecu": {
      "critical": true,
      "allow_critical_override": true,
      "include": "yes"
    },
    "target_vin": {
      "critical": true,
      "allow_critical_override": true,
      "include": "yes"
    },
    "target_ski": {
      "critical": true,
      "allow_critical_override": true,
      "include": "yes"
    }
  },
  "validity": {
    "min_duration": {
      "value": 1,
      "unit": "days"
    },
    "max_duration": {
      "value": 10,
      "unit": "years"
    },
    "default_duration": {
      "value": 10,
      "unit": "years"
    }
  },
  "certificate_size_check_settings": {
    "enforce": true,
    "certificate_format": "pem",
    "max_size_in_bytes": 1200
  }
}