Sigstore · Schema

Sigstore Fulcio Signing Certificate

Schema representing a short-lived signing certificate issued by Fulcio CA.

Certificate AuthorityCode SigningContainersCryptographyOpen-SourcePKISecuritySoftware Supply ChainTransparency Log

Properties

Name Type Description
signedCertificateEmbeddedSct object Certificate response with an embedded SCT (Signed Certificate Timestamp).
signedCertificateDetachedSct object Certificate response with a detached SCT.
View JSON Schema on GitHub

JSON Schema

sigstore-certificate-schema.json Raw ↑
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/sigstore/refs/heads/main/json-schema/sigstore-certificate-schema.json",
  "title": "Sigstore Fulcio Signing Certificate",
  "description": "Schema representing a short-lived signing certificate issued by Fulcio CA.",
  "type": "object",
  "properties": {
    "signedCertificateEmbeddedSct": {
      "type": "object",
      "description": "Certificate response with an embedded SCT (Signed Certificate Timestamp).",
      "properties": {
        "chain": {
          "type": "object",
          "description": "Certificate chain from the issued certificate to the root.",
          "properties": {
            "certificates": {
              "type": "array",
              "description": "DER-encoded X.509 certificates in the chain.",
              "items": {
                "type": "string",
                "format": "byte"
              }
            }
          }
        }
      }
    },
    "signedCertificateDetachedSct": {
      "type": "object",
      "description": "Certificate response with a detached SCT.",
      "properties": {
        "chain": {
          "type": "object",
          "properties": {
            "certificates": {
              "type": "array",
              "items": {
                "type": "string",
                "format": "byte"
              }
            }
          }
        },
        "signedCertificateTimestamp": {
          "type": "string",
          "format": "byte",
          "description": "The detached Signed Certificate Timestamp."
        }
      }
    }
  }
}