RootCertificate Property

Contains the certificate used to verify the signature of the PARes message returned by the ACS.

Object Oriented Interface

public function getRootCertificate();
public function setRootCertificate($value);

Procedural Interface

in3dsecure_mpi_get($res, 47 );
in3dsecure_mpi_set($res, 47, $value );

Default Value

''

Remarks

This property contains the CA signing certificate used to verify the signature of the Payer Authentication Response (PARes), stored in the AuthenticationCertificate property. This verification takes place after calling the method CheckAuthenticationResponse with the PARes packet returned from the Access Control Server (ACS).

To support multiple CA signing certificates, add all the certificates in the chain by prepending a '+' character to the Base-64 encoded certificate body. For example, the code below adds three certs to the RootCertificate property.

class.RootCertificate = "MIIC6jCCAdKgAwIBAgICAIowDQYJ..."
class.RootCertificate = "+MIIDSjCCAjKgAwIBAgIBATANBgkq..."
class.RootCertificate = "+MIIDdjCCAl6gAwIBAgIBBjANBgkq..."

If verification of the AuthenticationCertificate fails, the RootCertificate will be compared byte-by-byte to the AuthenticationCertificate. This feature allows the developer to set the RootCertificate to the exact certificate he or she expects to receive. This is useful for testing, but use this feature with caution. The RootCertificate property should always be set to a proper CA signing certificate on production systems.

Data Type

Binary String