Cloud Secure Area - Server Reference Implementation

Note: This reference implementation is not production quality. Use at your own risk.

Attestation Root

Certificate

SEQUENCE (8 elem)
  [0] (1 elem)
    INTEGER 2
  INTEGER 1
  SEQUENCE (1 elem)
    OBJECT IDENTIFIER 1.2.840.10045.4.3.3 ECDSA coupled with SHA-384
  SEQUENCE (1 elem)
    SET (1 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
        UTF8String csa_dev_root
  SEQUENCE (2 elem)
    UTCTime 2025-12-10T11:08:53Z
    UTCTime 2035-12-10T11:08:53Z
  SEQUENCE (1 elem)
    SET (1 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
        UTF8String Cloud Secure Area Attestation Root
  SEQUENCE (2 elem)
    SEQUENCE (2 elem)
      OBJECT IDENTIFIER 1.2.840.10045.2.1 Elliptic curve public key cryptography
      OBJECT IDENTIFIER 1.2.840.10045.3.1.7 NIST Curve P-256
    BIT STRING (520 bit) 0000010000000010100101100111000101010001001101100010101110010001110111001111010000001100101111111101000100001100111001101010110111000111111010011011011010110010110001000101010010000010110101011010100101111000110101110000011101110101110011011010010100000111111100011001100101110011100000000111111110000000000101000100100000110011000101001110010100011101000011000010010111101111011001010100111100001110010010110011101100110001000011000110101000000001001101010101001110011110111101111010001100011001011101101000111000000001
  [3] (1 elem)
    SEQUENCE (4 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.29.35 authorityKeyIdentifier (X.509 extension)
        OCTET STRING (24 byte) 30 16 80 14 c5 68 82 30 19 37 0c af f5 c3 b8 d9 23 c2 a6 5e 4c e5 03 a4 ("0.�.�h�0.7.��ø�#¦^L�.�")
      SEQUENCE (3 elem)
        OBJECT IDENTIFIER 2.5.29.15 keyUsage (X.509 extension)
        BOOLEAN true
        OCTET STRING (4 byte) 03 02 02 04 ("....")
      SEQUENCE (3 elem)
        OBJECT IDENTIFIER 2.5.29.19 basicConstraints (X.509 extension)
        BOOLEAN true
        OCTET STRING (5 byte) 30 03 01 01 ff ("0...�")
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.29.14 subjectKeyIdentifier (X.509 extension)
        OCTET STRING (22 byte) 04 14 43 d0 1c c0 ac 85 54 30 87 51 93 4d 59 d8 cb 9d e1 17 59 82 ("..C�.���T0�Q�MY�˝�.Y�")

Certificate

SEQUENCE (8 elem)
  [0] (1 elem)
    INTEGER 2
  INTEGER 5d 69 60 06 30 c1 05 72 54 7c 8d 46 a9 15 62 82
  SEQUENCE (1 elem)
    OBJECT IDENTIFIER 1.2.840.10045.4.3.3 ECDSA coupled with SHA-384
  SEQUENCE (1 elem)
    SET (1 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
        UTF8String csa_dev_root
  SEQUENCE (2 elem)
    UTCTime 2025-12-10T11:08:53Z
    UTCTime 2035-12-10T11:08:53Z
  SEQUENCE (1 elem)
    SET (1 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
        UTF8String csa_dev_root
  SEQUENCE (2 elem)
    SEQUENCE (2 elem)
      OBJECT IDENTIFIER 1.2.840.10045.2.1 Elliptic curve public key cryptography
      OBJECT IDENTIFIER 1.3.132.0.34 EC Curve P-384
    BIT STRING (776 bit) 00000100001000101111000101010011110110001110001101111000011000100001101101111011011101011110100000101010000101010010110111101000011001110110110111000101010111001010100001001000100011000010001100101110001111101100101101101100111001110011110001011101011101000000111100001010101011110011101010101111000011001011011110110100111110001101011111001110100000111011111110111100110110000010110110001111100101011001100001011101000111000110001110010010001011110100000000110010001001111000111010111011011010011011001011101001001001011110101011100001000110001000001111111010100011111110110011101110101111101001000001111101111011010101110110101001100000100110000000100011110010001010000100000000101010011100001110001000101010101011110010001000100110111100110101110010101100110110100101100010
  [3] (1 elem)
    SEQUENCE (3 elem)
      SEQUENCE (3 elem)
        OBJECT IDENTIFIER 2.5.29.15 keyUsage (X.509 extension)
        BOOLEAN true
        OCTET STRING (4 byte) 03 02 02 04 ("....")
      SEQUENCE (3 elem)
        OBJECT IDENTIFIER 2.5.29.19 basicConstraints (X.509 extension)
        BOOLEAN true
        OCTET STRING (5 byte) 30 03 01 01 ff ("0...�")
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.29.14 subjectKeyIdentifier (X.509 extension)
        OCTET STRING (22 byte) 04 14 c5 68 82 30 19 37 0c af f5 c3 b8 d9 23 c2 a6 5e 4c e5 03 a4 ("..�h�0.7.��ø�#¦^L�.�")

Cloud Binding Key Attestation Root

Certificate

SEQUENCE (8 elem)
  [0] (1 elem)
    INTEGER 2
  INTEGER 1
  SEQUENCE (1 elem)
    OBJECT IDENTIFIER 1.2.840.10045.4.3.2 ECDSA coupled with SHA-256
  SEQUENCE (1 elem)
    SET (1 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
        UTF8String Cloud Secure Area Cloud Binding Key Attestation Root
  SEQUENCE (2 elem)
    UTCTime 2025-12-10T11:08:53Z
    UTCTime 2035-12-10T11:08:53Z
  SEQUENCE (1 elem)
    SET (1 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
        UTF8String Cloud Secure Area Cloud Binding Key Attestation Root
  SEQUENCE (2 elem)
    SEQUENCE (2 elem)
      OBJECT IDENTIFIER 1.2.840.10045.2.1 Elliptic curve public key cryptography
      OBJECT IDENTIFIER 1.2.840.10045.3.1.7 NIST Curve P-256
    BIT STRING (520 bit) 0000010010110100111011111011110011110111001011011011011001110100100100001001101000111101011111010111010101000110111110110000000110000001010001011011000110101110110011011001011110101011010010000111000001101011010010010001101111101100001011010100000010100110011110000100000010001101110111110100001001001110111001011000010110100110011101010001000100101001100110000110100011000110111011010101111001001011110011101001001000011101001001010011111110101100100010010011100000011110100101111010010001110111000011100011111001111111
  [3] (1 elem)
    SEQUENCE (3 elem)
      SEQUENCE (3 elem)
        OBJECT IDENTIFIER 2.5.29.15 keyUsage (X.509 extension)
        BOOLEAN true
        OCTET STRING (4 byte) 03 02 02 04 ("....")
      SEQUENCE (3 elem)
        OBJECT IDENTIFIER 2.5.29.19 basicConstraints (X.509 extension)
        BOOLEAN true
        OCTET STRING (5 byte) 30 03 01 01 ff ("0...�")
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.29.14 subjectKeyIdentifier (X.509 extension)
        OCTET STRING (22 byte) 04 14 ef 09 2c a9 20 59 2d 80 37 94 67 dd e6 8f 51 ef 92 9d 82 2e ("..�.,�.Y-�7�g��Q�.")