Search code examples
xmldigital-signaturetrusted-timestamp

Where is the certificate of a TSA stored in XAdES-T?

In XAdES-T, the <EncapsulatedTimeStamp/>-element contains the TimeStampToken received from a TSA and not the entire TimeStampResp. But this TimeStampToken does not contain the certificate of the TSA (which can be found in the SignerInfo of the SignedData container).

Where am I supposed to store this certificate in the XAdES-document?

Solution

  • While going over the RFC 3161 standard again, I found out that I mistook TimeStampToken for TSTInfo. TSTInfo does not contain the certificate, but TimeStampToken does.