Get desktop application:
View/edit binary Protocol Buffers messages
Used in: , ,
Used in: ,
x.509 metadata information for ease of reference note that the serial number as a hex string can be used with the Sectigo API
Issuer and subject information from Sectigo
Validity information
The ASN1 encoded full certificate without the trust chain
The complete trust chain including the leaf certificate as a gzip compressed PEM encoded file. This field can be deserialized into a trust.Provider.
Used in:
Name is required to identify and address the contact
An email address is required for all contacts
Phone number is optional, but it is strongly suggested
Optional KYC data if required for the directory service contact.
Extra data that might be stored by the directory service related to the Contact. Should not be populated by client code.
At least one of the following contact information is required for the VASP to be registered in a TRISA directory. Contact information should be kept private in the directory service and only used for email communication or verification.
Used in: ,
Used in:
An X.509 distinguished name with the common elements of a DN.
Used in:
Used in: ,
Used in: ,
Should be the name of the country or an ISO-3166-1 code.
Name of primary financial regulator or supervisory authority.
Is the VASP permitted to send and/or receive transfers of virtual assets in the jurisdictions in which it operates? One of yes, no, partially
Other jurisdictions in which the entity operates.
Does the VASP have a programme that sets minimum AML, CFT, KYC/CDD and sanctions standards per the requirements of the jurisdiction(s) regulatory regimes where it is licensed/approved/registered? Either yes or no
Does the VASP conduct KYC/CDD before permitting its customers to send/receive virtual asset transfers?
At what threshold does the VASP conduct KYC?
Is the VASP required to comply with the application of the Travel Rule standards in the jurisdiction(s) where it is licensed/approved/registered?
Applicable Travel Regulations the VASP must comply with.
What is the minimum threshold for travel rule compliance?
Is the VASP required by law to safeguard PII?
Does the VASP secure and protect PII, including PII received from other VASPs under the Travel Rule? (yes/no)
VASP represents the top-level directory entry for certificate public key exchange. The TRISA Directory service allows search and lookup of VASP entries and returns TRISA implementation details and certificate key material. VASPs must be registered with IVMS 101 identity data for the business entity as well as natural person entities for technical, legal, billing, and administrative contacts. A VASP entry is also the primary point of replication between directories that implement the directory replication service. It maintains the version information to detect changes with respect to a specific registered directory and faciliates anti-entropy gossip protocols.
A unique identifier generated by the directory service, should be a globally unique identifier generated by the directory specified in registered_directory.
The url of directory that registered this VASP, e.g. vaspdirectory.net. The id of the VASP must must be unique with respect to this field.
The legal entity IVMS 101 data for VASP KYC information exchange. This is the IVMS 101 data that should be exchanged in the TRISA P2P protocol as the Originator, Intermediate, or Beneficiary VASP fields. A complete and valid identity record with country of registration is required.
Technical, legal, billing, and administrative contacts for the VASP.
Certificate information and public key material issued to the VASP to facilitate mTLS connections between TRISA partners. If the VASP has not been verified then the certificate will not be issued. This field is the most recently issued certificate but may or may not be revoked. In the white paper, this is referred to as the Identity EV-Cert.
Signing-key certificates and public key material used to sign transactions. The primary use of signing-key certificates is to asymmetrically encrypt and sign per-transaction symmetric encryption keys. A VASP can maintain any number of signing certificates, which are idnetified by their signature or serial number.
Domain name of the TRISA endpoint used as the common name for the certificate. This field must be unique per VASP as it identifies the Certificate and is used directly in lookups.
Travel Rule Implementation Endpoint - where other TRISA peers should connect. This should be an addr:port combination, e.g. trisa.vaspbot.net:443
Business Information
Should be a date in YYYY-MM-DD format
TRIXO Questionnaire
Directory Service Metadata Should not be populated by client code.
Should be an RFC 3339 Timestamp
Should be an RFC 3339 Timestamp
Should be an RFC 3339 Timestamp
The legal entity signature that is used to verify uniqueness or detect changes. It is used primarily by the directory service because the hash of a VASP object is not specified in the whitepaper. Should not be populated by client code.
Version is used for anti-entropy based replication. It is used primarily by the directory service and is not specified in the TRISA whitepaper. Should not be populated by client code.
Extra data that might be stored by the directory service related to the VASP. Should not be populated by client code.
Certificate delivery preferences which determine how the VASP will receive issued certificates.
Webhook URL for delivering certificates
If true, do not send certificates via email
Used in: , , ,
Implements a distributed version as a Lamport Scalar
Used in:
Process ID - used to deconflict ties in the version number.
Montonically increasing version number.