Signing for Single APIs
Your requests contains data and to ensure its authenticity, you are required to sign the requests while using Rabobank APIs.
Reference: Signature draft
Start with sandbox
We recommend that you first develop your application using the Sandbox environment in the Rabobank developer portal. Read Get Started to set up your account.
Get the signing certificate
Use the following certificates based on your API
- PSD2 - An eIDAS QSEAL certificate issued by the Qualified Trust Service Provider of your choice.
- Premium - An EV SSL certificate for transport and an EV SSL signing certificate for signing messages.
- Rabobank accepts:
- EV SSL certificates from the certificate issuers listed in the Mozilla CA Certificate report.
- X.509 format
- RSA: key length should be at least 2048-bit
- Certificate should be valid for a maximum of one year.
- Rabobank accepts:
In case you don't yet have an official certificate, you can use an example certificate for Sandbox.
You can use these certificates to recreate the code example as shown below.
The signing certificate is sent with a signing request but not stored on the Rabobank developer portal. If you want to change/replace you can make changes on your own system.
You can also choose to have two valid certificates when allowed by your system.
Create the digest
The digest is a base64 encoded hash of the body, example: Base64(SHA512(body))
Pass the body of your request (or an empty string if there is no body) through a hashing algorithm.
We recommend using SHA 512 but you can also choose to use SHA 256- Make sure the hashed output is Binary format.
- Base64encode the output.
- Add the result to your digest header declaring the used hashing algorithm, i.e. (RSA-SHA512/RSA-SHA256).
Example
Examples of the digest header for various APIs and their bodies using SHA-512:
PSD2
Body - SEPA credit transfer:
{"creditorAccount":{"currency":"EUR","iban":"NL10RABO0123456789"},"creditorAddress":{"buildingNumber":"8","country":"NL","postcode":"2456RL","streetName":"Utrechtstraat","townName":"Utrecht"},"creditorAgent":"RABONL2U","creditorName":"Company","debtorAccount":{"currency":"EUR","iban":"NL10RABO0912345678"},"endToEndIdentification":"PI-123456789","instructedAmount":{"content":"10.25","currency":"EUR"},"remittanceInformationUnstructured":"Ref Number Merchant 235839479.3434","requestedExecutionDate":"2022-06-15"}Digest header PSD2 - SEPA credit transfer:
sha-512=97iSEKK+wtenUIu8DozlaGP+g2OjYy8F081o0gaLt4w6FomFJVEJktCPHEfrauwU48Tus44YStT8+q6erKA4Gg==
Premium
Body - Business Single Payment Initiation - sepa credit transfer
{"creditorAccount":{"iban":"NL10RABO0123456789","currency":"EUR"},"creditorName":"Company","debtorAccount":{"currency":"EUR","iban":"NL10RABO0912345678"},"instructedAmount":{"content":"10.25","currency":"EUR"},"creditorAddress":{"country":"NL","buildingNumber":"8","postcode":"2456RL","streetName":"Utrechtstraat","townName":"Utrecht"},"creditorAgent":"RABONL2U","debtorName":"Allen Martin","endToEndIdentification":"PI-123456789","remittanceInformationStructured":{"reference":"1515140706132013","referenceIssuer":"CUR","referenceType":"SCOR"},"requestedExecutionDate":"2023-01-25"}
Digest header - Business Single Payment Initiation - sepa credit transfer
sha-512=zHM9txFwU718P3n7PxunDWpzrpPNaa6Rb9JKoU5JIkLuLliiiobFYHYDEDoi7wO6Nj0Z00uqWtOcjjSDQzpxmw==Body - Business Single Payment Initiation - periodic sepa credit transfer
{"creditorAccount":{"iban":"NL10RABO0123456789","currency":"EUR"},"creditorName":"Company","debtorAccount":{"currency":"EUR","iban":"NL10RABO0912345678"},"frequency":"Quarterly","instructedAmount":{"content":"10.25","currency":"EUR"},"startDate":"2023-01-25","creditorAddress":{"country":"NL","buildingNumber":"8","postcode":"2456RL","streetName":"Utrechtstraat","townName":"Utrecht"},"creditorAgent":"RABONL2U","debtorName":"Allen Martin","endToEndIdentification":"PI-123456789","requestedExecutionDate":"2023-01-25","remittanceInformationStructured":{"reference":"1515140706132013","referenceIssuer":"CUR","referenceType":"SCOR"},"endDate":"2024-05-24"}
Digest header - Business Single Payment Initiation - periodic sepa credit transfer
sha-512=HJcQr3G5Zt2izNQcFmfqBLONnSqb4pVQ4vaC7bAoAvS9Q9/5vyVqfm998CkKx+9v9QxTOmKLDbxvhxUhk/DZmw==Body - Business Single Payment Initiation - cross border credit transfer
{"chargeBearer":"DEBT","creditorAccount":{"currency":"USD","bban":"02100002112345678901234567"},"creditorAddress":{"country":"US","buildingNumber":"8C","postcode":"5017","streetName":"5th Ave","townName":"New York"},"creditorAgent":"BANKUS33XXX","creditorName":"Company","debtorAccount":{"currency":"EUR","iban":"NL10RABO0912345678"},"instructedAmount":{"content":"10.25","currency":"USD"},"debtorName":"Allen Martin","endToEndIdentification":"PI-123456789","remittanceInformationStructured":{"reference":"1515140706132013","referenceIssuer":"CUR","referenceType":"SCOR"},"requestedExecutionDate":"2023-01-25"}
Digest header - Business Single Payment Initiation - cross border credit transfer
sha-512=8szvAigpAj1WJbILK9EgRF/+nYDEO9CpLo7sKkcjlsHEQk7fgYnQ45gR1SjDmhk8mwLdtODagjm0ygAA/WCxIw==Body - Business Single Payment Initiation - periodic cross border credit transfer
{"chargeBearer":"CRED","creditorAccount":{"currency":"GBP","iban":"GB60BARC48291709876543"},"creditorAddress":{"country":"UK","buildingNumber":"54","postcode":"N1 1PX","streetName":"Islington Park St","townName":"London"},"creditorAgent":"BARCGB21","creditorName":"Company","debtorAccount":{"currency":"EUR","iban":"NL10RABO0912345678"},"frequency":"Quarterly","instructedAmount":{"content":"10.25","currency":"GBP"},"startDate":"2023-01-25","debtorName":"Allen Martin","endToEndIdentification":"PI-123456789","remittanceInformationStructured":{"reference":"1515140706132013","referenceIssuer":"CUR","referenceType":"SCOR"},"requestedExecutionDate":"2023-01-25","endDate":"2024-05-24"}
Digest header - Business Single Payment Initiation - periodic cross border credit transfer
sha-512=HSV/LRwpyaCZ5KwBRpN5ie4rQHigAJwqTOafADRuZ2ZltDrv0umuYmGYz38x5OAwKmAQgRctLJ68jNfIKHnQnQ==Body - Business Instant Payout
{"creditorAccount":{"currency":"EUR","iban":"NL40RABO8933084452"},"creditorAddress":{"buildingNumber":"8","country":"NL","postcode":"2456RL","streetName":"Utrechtstraat","townName":"Utrecht"},"creditorAgent":"RABONL2U","creditorName":"Company","debtorAccount":{"currency":"EUR","iban":"NL43RABO9012918502"},"debtorAgent":"RABONL2U","debtorName":"Allen Martin","endToEndIdentification":"PI-123456789","instructedAmount":{"content":"10.25","currency":"EUR"},"remittanceInformationStructured":{"reference":"Ref 2021-03-24","referenceIssuer":"CUR"},"urgencyIndicator":false,"uniqueRequestorReference":"0744f57f-d777-5369-b33e-d01641527faf"}Digest header - Business Instant Payout
sha-512=ZEmBwCCDcSOeoP8y4k5ZtHWA4/j0cLhwuXL551wyJgHCa9exEQCCi1kvSkU8NaW3lNDWqHRrMgkt4j0MGzApBQ==Body - Payment Request
{"amountCents":10000,"currency":"EUR","description":"Mchi Restaurant","iban":"NL19RABO0123456790","clientReference":"Client-Reference","numPayers":1,"hasVariableAmount":false}Digest header - Payment Request
sha-512=ttXH7VYT0BBoIFTsSrSkTMhKMbuBuC8ZaR3rZBSxwd1leleIsA4uLyfB0rHWUzALHUxA71iy6T2N
7dAcGr08Gw==Body - Account Notification Service - Subscriptions POST
{"account":{"iban":"NL52RABO0125618484","currencyCode":"EUR"},"transactionCriteria":{"raboDetailedTransactionType":356,"amount":{"minTransactionAmount":100,"maxTransactionAmount":500},"transactionType":"DEBIT","remittanceInformationStructured":"Ref111*","remittanceInformationUnstructured":"Parking fine*","raboTransactionTypeName":"EI","endToEndId":"R23-972838E*"},"endDate":"2027-12-03T14:07:56.302663Z","pushUri":"https://tpp.com/notify"}Digest header - Account Notification Service - Subscriptions POST
digest: sha-512=YwsbNchoFOeQku7TeKjq/bKCmxEUGaF6m1cuUaG4UvNg9cMJ+hkelyriTgIxC56Yv8zCkWe7VQ2/s6cT+wEZyA==Due to security regulation, spaces or line breaks between JSON elements cause incorrect digest error.
Create the signing string
The signing string contains several headers separated by line breaks.
The order is not crucial, as long as you define them in the same order in the signature header.
Signing headers per API
| Parameter | Required | Remark |
|---|---|---|
date | Yes | - |
digest | Yes | - |
x-request-id | Yes | - |
tpp-redirect-uri | No | Mandatory for HTTP POST requests |
tpp-nok-redirect-uri | No | This field should be included as a header of the HTTP POST request |
Example
PSD2
date: Thu, 24 May 2022 06:53:05 GMT
digest: sha-512=97iSEKK+wtenUIu8DozlaGP+g2OjYy8F081o0gaLt4w6FomFJVEJktCPHEfrauwU48Tus44YStT8+q6erKA4Gg==
x-request-id: 7d2da3f9-67d3-5034-b7cc-29f1a05ef1f5Premium - Business Single Payment Initiation - sepa credit transfer
date: Tue, 24 Jan 2023 06:53:05 GMT
digest: sha-512=zHM9txFwU718P3n7PxunDWpzrpPNaa6Rb9JKoU5JIkLuLliiiobFYHYDEDoi7wO6Nj0Z00uqWtOcjjSDQzpxmw==
X-Request-ID: 7d2da3f9-67d3-5034-b7cc-29f1a05ef1f5Premium - Business Single Payment Initiation - cross border credit transfer
date: Tue, 24 Jan 2023 06:53:05 GMT
digest: sha-512=8szvAigpAj1WJbILK9EgRF/+nYDEO9CpLo7sKkcjlsHEQk7fgYnQ45gR1SjDmhk8mwLdtODagjm0ygAA/WCxIw==
X-Request-ID: 7d2da3f9-67d3-5034-b7cc-29f1a05ef1f5Premium - Business Single Payment Initiation - periodic sepa credit transfer
date: Tue, 24 Jan 2023 06:53:05 GMT
digest: sha-512=HJcQr3G5Zt2izNQcFmfqBLONnSqb4pVQ4vaC7bAoAvS9Q9/5vyVqfm998CkKx+9v9QxTOmKLDbxvhxUhk/DZmw==
X-Request-ID: 7d2da3f9-67d3-5034-b7cc-29f1a05ef1f5Premium - Business Single Payment Initiation - periodic cross border credit transfer
date: Tue, 24 Jan 2023 06:53:05 GMT
digest: sha-512=HSV/LRwpyaCZ5KwBRpN5ie4rQHigAJwqTOafADRuZ2ZltDrv0umuYmGYz38x5OAwKmAQgRctLJ68jNfIKHnQnQ==
X-Request-ID: 7d2da3f9-67d3-5034-b7cc-29f1a05ef1f5Premium - Business Instant Payout
date: Thu,18 Mar 2021 15:10:46 GMT<
digest: sha-512=ZEmBwCCDcSOeoP8y4k5ZtHWA4/j0cLhwuXL551wyJgHCa9exEQCCi1kvSkU8NaW3lNDWqHRrMgkt4j0MGzApBQ==
x-request-id: e9c96b7e-8470-410a-937c-396fe9512feaPremium - Payment Request
date: Tue, 26 Okt 2021 08:12:31 GMT digest: sha-512=ttXH7VYT0BBoIFTsSrSkTMhKMbuBuC8ZaR3rZBSxwd1leleIsA4uLyfB0rHWUzALHUxA71iy6T2N7dAcGr08Gw== x-request-id: 95126d8f-ae9d-4ac3-ac9e-c357dcd78811
Premium - Account Notification Service - Subscriptions POST
date: Tue, 15 May 2024 08:12:31 GMT
digest: sha-512=YwsbNchoFOeQku7TeKjq/bKCmxEUGaF6m1cuUaG4UvNg9cMJ+hkelyriTgIxC56Yv8zCkWe7VQ2/s6cT+wEZyA==
x-request-id: 594d27d0-26d7-47dc-9d62-c307616220b6Sign using your Private key
The signature is the signing string signed with the private key: Base64(RSA-SHA512(signing_string))
- Create the signing string.
- Sign it using the hashing algorithm you used (RSA-SHA512/RSA-SHa256) and the private key of the signing certificate.
- Base64 encode the output.
Example
PSD2
LW0sGv1Ptg8vTNVDzVCZv4l3TQSC565AMGlWOKNMAO7HorDeaswYhQO6Af0Y8fUmQsCRQOefC9JhjdXqjlJQXN7XYs2Zstg1FczWF4sExx2eAPquW5gwNyittSkg9Ln8wJ6/dnaZIa8KfzVWOH5wFPqb3mMmMn7RFAVpPp3hGEcrZAbTXglwyLTyr37/0beEBHC1sdjVkE+U6E7/lQs1IE0bgMS+qgIoncp+wVpELLg4FUe6CN5vC51exiud1sSxyScdNVbAhRK2XTgaxzQhN4VoYcztruxcyoVpYyK6sZK44lOO034i+HnUowrpTXV543p1u1O1q8Q4tnbQg+poYQ=="Premium - Business Single Payment Initiation - sepa credit transfer
ZooLzRBY0Y/QGX/+lil/hhVoKt42HqU1YdayQnotACVqoRABqmfSfr0+jkW27QVbi1RgX57kG048HvhZaxWJD94WCzhZznIlB3mDOMJqa96GFJ+fqEMtnV5ZxPS9fCq5w3zz4UVRi9+Zi2qDocfH/9GgwnZ/TDkjI6Wxf/mUjYQC2OIDvPUY5jt2YggskCTnOHsUB1vSCFADQ7rf2n7FktwSvLmzCHRqpCzwC3ruISZaChKIDwgZsuhmwZUylvJMx5xuA+UdaMQ7Q98itGPXmilD/lx9wgJ+6Qlci0PwvnEQDoCP9pSlO7no2rCekyJE+D85u7plsjtk2sEhla7PvA==
Premium - Business Single Payment Initiation - cross border credit transfer
c41VkRwduLo2v+N5GgYwmEDUkHCN5TA/WmB26q6CcXDGqnquwLB9RKYw9eZX/JsRQrh+NQVBKTIyPNgYFd4RsBvPnrM7TE4/G4PqFOwHYFqJiJTFGPjiPrc8ijTKQ8hqjsBlU2hKhycnDj0ViqmBWFvwgPKWMblvC4jgeOdn2m2PB6auAun42TvRsejN7oEgTqL5BsUvBb5Xzvkerqb/Sgn3eWKOeTZmArn7RVHBR2RlVYSfz35Ymz5pN+jEqwavtBRYlEY2kJ6yACuQx9pmlFhQzjdgl7XiDsrEmpr6/NZNn29zMh42TO9qO+xkIylNBtBw+gJUDP0a3iMgTME/mA==
Premium - Business Single Payment Initiation - periodic sepa credit transfer
S+GB0JmjPrmypNrSJAU5zj0p6j1/rxjAVImmDvWFbiZsRtLbq1S/igehHeGgIh1SXJZzW1TCMvXoIi8UJcL+iheAd+9Njj8R0vF3l2n4NdVXOqAfBPyH2hzwXNwRsgthfdsFJH3Bi4u0pArPIi01bjfs9clFd40Ex3uODRIg2R9OAeWCNn83n9ZvbcsmsU9/5Mzi84vycJENK+tE69Uy9gbbqXauCSicxbHnuhOKsv5PiRmvimYdfh0H22QW3k803Hk8mgkEAuwgwhLGGnxsoLb3bN+VAyxr3cx0ed64dXPKN5mZyjkqM9dz5fp0A/u5nQNuuDxU5zUqDRllZKKXNg==Premium - Business Single Payment Initiation - periodic cross border credit transfer
GV/DUDamjX5WLLJOa0RUix1AneSSJ3ZVBj16rEWifTgm4ZD5PRJFakSo3Hp91p/sHY5bPj2XDSUWEKt+K70iTTH/eAZh2GWtNa1PvxHyDz4zTP29FP9MWXa7fsUuG8x9brcUDZW/I342OToo7nf6i35KTzubyJx/Q9o2OhfnYVUHOxkmSFABjUNLd/YXHmjXEHAq4jw89JkP6OXO31SimV+fNhYRQTI/f1B6nRYrnB/VJ8S9dl6Npy8G4wlhuWvZpR01LhLUXdyJisaHtbmSARF/KoHRWM0/wujVxyVM8P1od28y0uLQugA9aYsIx9TTZ6uVu3hzK4VO53HCOP6BZw==
Premium - Business Instant Payout
UkZ0iS8ReKTvZJgOhGZv6QetJFKWGJDUZxHjglmEeg1AKjtpxDAMbIGid1fgT4dola6HZbnvFO9SjyPfAKtz/dnBqdKcWDAdL+PStY/EyFvXeshwmkIE1FZLpomvXoUTWZmsFqW2fdO3PgciQXwv/gHUCAp1A0ZEVR2W1KifcXSMeotzTaog3gw2XTfQU+LmDdWx1sbXQJDmgcBnRpYlMRIX5R2GP1pQ61rDFydMJqpwv4RUsUyB+dQoHLd13rU4jlbNKvankVxJnij2xyQrFh1wkJVQG0+ECrtxW4B7SECwh4I7meQqGlPeXpWGDS2mg2NmWRTfI0+m3isUwblQcw==Premium - Payment Request
0VOn8X/hNqt240+675ediIvcDNpiYEPXxQQ/d49NT6Zy3FPwCblhTN+0LVtaALVd8AR1/BYBHJjjxxm8QfDi5AWyZL0xWnPuqoASZrbIgPg8X/OxVTyEWfAX6DvVDZfOFEolwWmhkj/ngUEV47vQAvRQd00FhrUGm93W9LFU8ochn/8IfdQY51ZIjCnqW5/oL/mHRrjQ8V51UvDjbH5nYPeivvYvq2JOPaWw8mzSglVFa2c2FbKaakKGi+TfbI4CYNjMrkKBvuhFxmWtSXaYcz81KQre3BXMNKXwHVaYuIGm7x2TE0E07DqbrBGu9qetGuCQBsKLgUvKtEj4p/o01Q==Premium - Account Notification Service - Subscriptions POST
FHTbTEpqnJMDXaRoCd2U7e8Cdigm1yuDAdFPBmF5u7y+Gb6rhpzQ0ZXnrrmlz99ZqQfHYf3x0c2QBdyITn/M/8xbN6WZWCT6VJ5mhXqe4B3DEnaYkg3U11Dda1Zyw9p+cptzcMOEFDO6JH/biB3R57Vi28WHTgdishq+BmzFDw9mjxYOs2+LUAD1ExnAvl5ZcpJKZvsHdqLZPyVDq5YedTgAUAIhfPCRj+eF4qQv5pKJxjGANiwCif5BrVhKTcJ/gYo865xeAQBeAXuIWiq1QIjEyJrwZk0aErVhAo75B0fy5xPFEn6VJLRStuxnrE+mEgasp+H7RDYMdmmFvzSW2A==Create the Signature header
The signature header consists of the following components:
| Component | Example | Description |
|---|---|---|
| keyId | $ openssl x509 -in cert.pem -noout -text | The serial number of the certificate as defined in 'TPP-Signing-Certificate' header. The format should be Integer not hex. You can use the openssl command line tool to find the serial number. |
| algorithm | rsa-sha512 | Specify which algorithm was used when generating the signature:
|
| headers | "date digest x-request-id" | The list of headers contained in the signature:
|
| signature | The result from step 4. |
Example
The resulting signature header for our example:
PSD2
keyId="1523433508",algorithm="rsa-sha512",headers="date digest x-request-id tpp-redirect-uri",signature="LW0sGv1Ptg8vTNVDzVCZv4l3TQSC565AMGlWOKNMAO7HorDeaswYhQO6Af0Y8fUmQsCRQOefC9JhjdXqjlJQXN7XYs2Zstg1FczWF4sExx2eAPquW5gwNyittSkg9Ln8wJ6/dnaZIa8KfzVWOH5wFPqb3mMmMn7RFAVpPp3hGEcrZAbTXglwyLTyr37/0beEBHC1sdjVkE+U6E7/lQs1IE0bgMS+qgIoncp+wVpELLg4FUe6CN5vC51exiud1sSxyScdNVbAhRK2XTgaxzQhN4VoYcztruxcyoVpYyK6sZK44lOO034i+HnUowrpTXV543p1u1O1q8Q4tnbQg+poYQ=="Premium - Business Single Payment Initiation - sepa credit transfer
keyId="1523433508",algorithm="rsa-sha512",headers="date digest x-request-id",signature="ZooLzRBY0Y/QGX/+lil/hhVoKt42HqU1YdayQnotACVqoRABqmfSfr0+jkW27QVbi1RgX57kG048HvhZaxWJD94WCzhZznIlB3mDOMJqa96GFJ+fqEMtnV5ZxPS9fCq5w3zz4UVRi9+Zi2qDocfH/9GgwnZ/TDkjI6Wxf/mUjYQC2OIDvPUY5jt2YggskCTnOHsUB1vSCFADQ7rf2n7FktwSvLmzCHRqpCzwC3ruISZaChKIDwgZsuhmwZUylvJMx5xuA+UdaMQ7Q98itGPXmilD/lx9wgJ+6Qlci0PwvnEQDoCP9pSlO7no2rCekyJE+D85u7plsjtk2sEhla7PvA=="
Premium - Business Single Payment Initiation - cross border credit transfer
keyId="1523433508",algorithm="rsa-sha512",headers="date digest x-request-id",signature="c41VkRwduLo2v+N5GgYwmEDUkHCN5TA/WmB26q6CcXDGqnquwLB9RKYw9eZX/JsRQrh+NQVBKTIyPNgYFd4RsBvPnrM7TE4/G4PqFOwHYFqJiJTFGPjiPrc8ijTKQ8hqjsBlU2hKhycnDj0ViqmBWFvwgPKWMblvC4jgeOdn2m2PB6auAun42TvRsejN7oEgTqL5BsUvBb5Xzvkerqb/Sgn3eWKOeTZmArn7RVHBR2RlVYSfz35Ymz5pN+jEqwavtBRYlEY2kJ6yACuQx9pmlFhQzjdgl7XiDsrEmpr6/NZNn29zMh42TO9qO+xkIylNBtBw+gJUDP0a3iMgTME/mA=="
Premium - Business Single Payment Initiation - periodic sepa credit transfer
keyId="1523433508",algorithm="rsa-sha512",headers="date digest x-request-id",signature="S+GB0JmjPrmypNrSJAU5zj0p6j1/rxjAVImmDvWFbiZsRtLbq1S/igehHeGgIh1SXJZzW1TCMvXoIi8UJcL+iheAd+9Njj8R0vF3l2n4NdVXOqAfBPyH2hzwXNwRsgthfdsFJH3Bi4u0pArPIi01bjfs9clFd40Ex3uODRIg2R9OAeWCNn83n9ZvbcsmsU9/5Mzi84vycJENK+tE69Uy9gbbqXauCSicxbHnuhOKsv5PiRmvimYdfh0H22QW3k803Hk8mgkEAuwgwhLGGnxsoLb3bN+VAyxr3cx0ed64dXPKN5mZyjkqM9dz5fp0A/u5nQNuuDxU5zUqDRllZKKXNg=="Premium - Business Single Payment Initiation - periodic cross border credit transfer
keyId="1523433508",algorithm="rsa-sha512",headers="date digest x-request-id",signature="GV/DUDamjX5WLLJOa0RUix1AneSSJ3ZVBj16rEWifTgm4ZD5PRJFakSo3Hp91p/sHY5bPj2XDSUWEKt+K70iTTH/eAZh2GWtNa1PvxHyDz4zTP29FP9MWXa7fsUuG8x9brcUDZW/I342OToo7nf6i35KTzubyJx/Q9o2OhfnYVUHOxkmSFABjUNLd/YXHmjXEHAq4jw89JkP6OXO31SimV+fNhYRQTI/f1B6nRYrnB/VJ8S9dl6Npy8G4wlhuWvZpR01LhLUXdyJisaHtbmSARF/KoHRWM0/wujVxyVM8P1od28y0uLQugA9aYsIx9TTZ6uVu3hzK4VO53HCOP6BZw=="
Premium - Business Instant Payout
keyId="1523433508",algorithm="rsa-sha512",headers="date digest x-request-id",signature="UkZ0iS8ReKTvZJgOhGZv6QetJFKWGJDUZxHjglmEeg1AKjtpxDAMbIGid1fgT4dola6HZbnvFO9SjyPfAKtz/dnBqdKcWDAdL+PStY/EyFvXeshwmkIE1FZLpomvXoUTWZmsFqW2fdO3PgciQXwv/gHUCAp1A0ZEVR2W1KifcXSMeotzTaog3gw2XTfQU+LmDdWx1sbXQJDmgcBnRpYlMRIX5R2GP1pQ61rDFydMJqpwv4RUsUyB+dQoHLd13rU4jlbNKvankVxJnij2xyQrFh1wkJVQG0+ECrtxW4B7SECwh4I7meQqGlPeXpWGDS2mg2NmWRTfI0+m3isUwblQcw=="Premium - Payment Request
keyId="1523433508",algorithm="rsa-sha512",headers="date digest x-request-id",signature="0VOn8X/hNqt240+675ediIvcDNpiYEPXxQQ/d49NT6Zy3FPwCblhTN+0LVtaALVd8AR1/BYBHJjjxxm8QfDi5AWyZL0xWnPuqoASZrbIgPg8X/OxVTyEWfAX6DvVDZfOFEolwWmhkj/ngUEV47vQAvRQd00FhrUGm93W9LFU8ochn/8IfdQY51ZIjCnqW5/oL/mHRrjQ8V51UvDjbH5nYPeivvYvq2JOPaWw8mzSglVFa2c2FbKaakKGi+TfbI4CYNjMrkKBvuhFxmWtSXaYcz81KQre3BXMNKXwHVaYuIGm7x2TE0E07DqbrBGu9qetGuCQBsKLgUvKtEj4p/o01Q=="Premium - Account Notification Service - Subscriptions POST
keyId="1523433508",algorithm="rsa-sha512",headers="date digest x-request-id",signature="FHTbTEpqnJMDXaRoCd2U7e8Cdigm1yuDAdFPBmF5u7y+Gb6rhpzQ0ZXnrrmlz99ZqQfHYf3x0c2QBdyITn/M/8xbN6WZWCT6VJ5mhXqe4B3DEnaYkg3U11Dda1Zyw9p+cptzcMOEFDO6JH/biB3R57Vi28WHTgdishq+BmzFDw9mjxYOs2+LUAD1ExnAvl5ZcpJKZvsHdqLZPyVDq5YedTgAUAIhfPCRj+eF4qQv5pKJxjGANiwCif5BrVhKTcJ/gYo865xeAQBeAXuIWiq1QIjEyJrwZk0aErVhAo75B0fy5xPFEn6VJLRStuxnrE+mEgasp+H7RDYMdmmFvzSW2A=="Create a header containing the certificate
In order to verify your signature, you are required to send us a public certificate in a request Header.
To do so:
- Strip the pem certificate from its begin and end tags.
- Remove all the line breaks.
Example
The result with our example certificate would be:
PSD2
TPP-Signature-Certificate: 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Premium
Signature-Certificate: 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Get examples
To see Get examples, see Signing for APIs - Get
More information on signatures
See:
https://tools.ietf.org/html/draft-cavage-http-signatures-10
https://tools.ietf.org/html/rfc3230