X-Road (NIIS) · Schema
ApprovedCertificationService
certification service
CompanyGovernmentInteroperabilityData ExchangeOpen SourceDigital Public InfrastructureSecurity
Properties
| Name | Type | Description |
|---|---|---|
| id | integer | unique identifier |
| name | string | certification service name |
| issuer_distinguished_name | string | certificate issuer distinguished name |
| subject_distinguished_name | string | certificate subject distinguished name |
| not_after | string | certificate validity not after |
| not_before | string | certificate validity not before |
| certificate_profile_info | string | fully qualified class name that implements the ee.ria.xroad.common.certificateprofile.CertificateProfileInfoProvider interface |
| tls_auth | boolean | can the CA be used for TLS authentication |
| default_csr_format | object | |
| acme_server_directory_url | string | |
| acme_server_ip_address | string | |
| authentication_certificate_profile_id | string | |
| signing_certificate_profile_id | string |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://artifacts.apis.io/x-road-global/json-schema/x-road-global-approved-certification-service-schema.json",
"title": "ApprovedCertificationService",
"description": "certification service",
"x-generated": "2026-11-10",
"x-method": "derived",
"x-generator": "derive-json-schema.py",
"x-source": "openapi/x-road-global-central-server-admin-openapi.yml#/components/schemas/ApprovedCertificationService",
"properties": {
"id": {
"description": "unique identifier",
"format": "int32",
"readOnly": true,
"type": "integer"
},
"name": {
"description": "certification service name",
"format": "text",
"maxLength": 255,
"minLength": 1,
"type": "string"
},
"issuer_distinguished_name": {
"description": "certificate issuer distinguished name",
"format": "text",
"maxLength": 255,
"minLength": 1,
"type": "string"
},
"subject_distinguished_name": {
"description": "certificate subject distinguished name",
"format": "text",
"maxLength": 255,
"minLength": 1,
"type": "string"
},
"not_after": {
"description": "certificate validity not after",
"format": "date-time",
"maxLength": 24,
"minLength": 24,
"type": "string"
},
"not_before": {
"description": "certificate validity not before",
"format": "date-time",
"maxLength": 24,
"minLength": 24,
"type": "string"
},
"certificate_profile_info": {
"description": "fully qualified class name that implements the ee.ria.xroad.common.certificateprofile.CertificateProfileInfoProvider interface",
"format": "text",
"minLength": 1,
"type": "string"
},
"tls_auth": {
"description": "can the CA be used for TLS authentication",
"type": "boolean"
},
"default_csr_format": {
"$ref": "#/$defs/CsrFormat"
},
"acme_server_directory_url": {
"type": "string",
"format": "url",
"minLength": 1
},
"acme_server_ip_address": {
"type": "string",
"format": "text",
"minLength": 1
},
"authentication_certificate_profile_id": {
"format": "text",
"type": "string",
"minLength": 1
},
"signing_certificate_profile_id": {
"format": "text",
"type": "string",
"minLength": 1
}
},
"required": [
"id",
"tls_auth",
"certificate_profile_info"
],
"type": "object",
"$defs": {
"CsrFormat": {
"description": "CSR format",
"enum": [
"PEM",
"DER"
],
"type": "string"
}
}
}
Work with this as data
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/x-road-global-approved-certification-service"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.