JWS Key and Certificate Rollover - February 2026
Start date and time | 2026-02-11 09:00 |
End date and time | 2026-02-11 10:00 |
Impact | Validation of JWS signatures returned by Freja |
Description | We will a change the JWS signing key and certificate in Freja eID Production system whereafter you longer can validate the JWS signature returned by Freja with the current certificate. |
Action | If you validate JWS signatures returned by Freja, we suggest implement selection of the verification certificates based on the JWS header x5t value, see REST API Documentation | JWScertificatesintest for more details. |
The key change will be implemented in our TEST environment at 2026-01-21 09:00-10:00 where you can test out your implementation handles the rollover properly.
To simplify handling of Freja JWS Signature validation in the future the signing certificates for Customer test and Production environments will be available online at https://www.frejaeid.com/tc/jwscerts/x5t_header_value.pem ,see table below for examples.
JWS certificates in TEST
x5t | From/Until | URL |
DiZbzBfysUm6-IwI-GtienEsbjc | From 2023-02-23 | https://www.frejaeid.com/tc/jwscerts/DiZbzBfysUm6-IwI-GtienEsbjc.pem |
9zhEUbKM_mwGlyISQnBfRxfWsXY | From 2026-01-21 | https://www.frejaeid.com/tc/jwscerts/9zhEUbKM_mwGlyISQnBfRxfWsXY.pem |
JWS certificates in PRODUCTION
x5t | From/Until | URL |
wSYLdhe93ToPR2X1UrNXxOg1juI | From 2023-02-23 | https://www.frejaeid.com/tc/jwscerts/wSYLdhe93ToPR2X1UrNXxOg1juI.pem |
RlUGKZ-oT3OLBFSKIpdUQj_EJ1o | From 2026-02-11 | https://www.frejaeid.com/tc/jwscerts/RlUGKZ-oT3OLBFSKIpdUQj_EJ1o.pem |
Please contact Freja eID Partner Support if you have any questions related to this matter at: