Cloud Secure Area - Server Reference Implementation

Note: This reference implementation is not production quality. Use at your own risk.

Attestation Root

Certificate

SEQUENCE (8 elem)
  [0] (1 elem)
    INTEGER 2
  INTEGER 1
  SEQUENCE (1 elem)
    OBJECT IDENTIFIER 1.2.840.10045.4.3.2 ECDSA coupled with SHA-256
  SEQUENCE (1 elem)
    SET (1 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
        UTF8String csa_dev_root
  SEQUENCE (2 elem)
    UTCTime 2025-06-27T10:40:31Z
    UTCTime 2035-06-27T10:40:31Z
  SEQUENCE (1 elem)
    SET (1 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
        UTF8String Cloud Secure Area Attestation Root
  SEQUENCE (2 elem)
    SEQUENCE (2 elem)
      OBJECT IDENTIFIER 1.2.840.10045.2.1 Elliptic curve public key cryptography
      OBJECT IDENTIFIER 1.2.840.10045.3.1.7 NIST Curve P-256
    BIT STRING (520 bit) 0000010010001000010010101100110000101111000101101011101001110011010111000010011010101011111110010100110101110110010111011011100101010011110111111010110110111111000000101110000101010001100100001100100110011111100011101000111001010110110110111010001101011011011000000001010001110010011011111000110111100101110110000110011110110000010010100101011101011001111000000111000110000010001001011101001101000110010110010111001100001010011101011011100100011000101011111010101100100010110111000100000101001100010011100000111000001111
  [3] (1 elem)
    SEQUENCE (4 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.29.35 authorityKeyIdentifier (X.509 extension)
        OCTET STRING (24 byte) 30 16 80 14 2a 78 81 1d 84 a3 87 d1 fa ef 5b f5 58 21 0e c1 0a e7 7c 78 ("0.�.*x�.������[�X!.�.�|x")
      SEQUENCE (3 elem)
        OBJECT IDENTIFIER 2.5.29.15 keyUsage (X.509 extension)
        BOOLEAN true
        OCTET STRING (4 byte) 03 02 02 04 ("....")
      SEQUENCE (3 elem)
        OBJECT IDENTIFIER 2.5.29.19 basicConstraints (X.509 extension)
        BOOLEAN true
        OCTET STRING (5 byte) 30 03 01 01 ff ("0...�")
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.29.14 subjectKeyIdentifier (X.509 extension)
        OCTET STRING (22 byte) 04 14 0c 8e 43 0e bf 83 47 d2 49 05 87 41 97 8f 57 33 ed e4 fd 04 ("...�C.��G�I.�A��W3���.")

Certificate

SEQUENCE (8 elem)
  [0] (1 elem)
    INTEGER 2
  INTEGER b8 8f fe 9b 80 92 17 e2 af 67 2b 2f 8e 7b ee 84
  SEQUENCE (1 elem)
    OBJECT IDENTIFIER 1.2.840.10045.4.3.3 ECDSA coupled with SHA-384
  SEQUENCE (1 elem)
    SET (1 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
        UTF8String csa_dev_root
  SEQUENCE (2 elem)
    UTCTime 2025-06-27T10:40:31Z
    UTCTime 2035-06-27T10:40:31Z
  SEQUENCE (1 elem)
    SET (1 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
        UTF8String csa_dev_root
  SEQUENCE (2 elem)
    SEQUENCE (2 elem)
      OBJECT IDENTIFIER 1.2.840.10045.2.1 Elliptic curve public key cryptography
      OBJECT IDENTIFIER 1.3.132.0.34 EC Curve P-384
    BIT STRING (776 bit) 00000100000101011001110010111011110000110001001100101110111100001100010111100100100100110011111001101111110001001010100100000111100100010100101010000011011110111110000111101000100101001110011111001100110000110000111110001011011010101001001110101000101110010111011100011100111000110000011011000010100101110010001010011011011001100111111011111110001101010100100001000000101010101110001110010011101111100111110010100101101110000100011110001110001011111101101111011100110001111010100011100110001110010101101000100101100000010101100100011100101110000111101111101100111000110111010010001110101011001010000000001110011000110111101000000010110000000011111111101011100011100111110000100110001101000000001011111111010010111000001110111111101011100100100011000011010011100101110101110001
  [3] (1 elem)
    SEQUENCE (3 elem)
      SEQUENCE (3 elem)
        OBJECT IDENTIFIER 2.5.29.15 keyUsage (X.509 extension)
        BOOLEAN true
        OCTET STRING (4 byte) 03 02 02 04 ("....")
      SEQUENCE (3 elem)
        OBJECT IDENTIFIER 2.5.29.19 basicConstraints (X.509 extension)
        BOOLEAN true
        OCTET STRING (5 byte) 30 03 01 01 ff ("0...�")
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.29.14 subjectKeyIdentifier (X.509 extension)
        OCTET STRING (22 byte) 04 14 2a 78 81 1d 84 a3 87 d1 fa ef 5b f5 58 21 0e c1 0a e7 7c 78 ("..*x�.������[�X!.�.�|x")

Cloud Binding Key Attestation Root

Certificate

SEQUENCE (8 elem)
  [0] (1 elem)
    INTEGER 2
  INTEGER 1
  SEQUENCE (1 elem)
    OBJECT IDENTIFIER 1.2.840.10045.4.3.2 ECDSA coupled with SHA-256
  SEQUENCE (1 elem)
    SET (1 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
        UTF8String Cloud Secure Area Cloud Binding Key Attestation Root
  SEQUENCE (2 elem)
    UTCTime 2025-06-27T10:40:31Z
    UTCTime 2035-06-27T10:40:31Z
  SEQUENCE (1 elem)
    SET (1 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
        UTF8String Cloud Secure Area Cloud Binding Key Attestation Root
  SEQUENCE (2 elem)
    SEQUENCE (2 elem)
      OBJECT IDENTIFIER 1.2.840.10045.2.1 Elliptic curve public key cryptography
      OBJECT IDENTIFIER 1.2.840.10045.3.1.7 NIST Curve P-256
    BIT STRING (520 bit) 0000010011101011111110011011110011010001110110001111100111111001110011010011111100111110001111111000010110010001001101000000010111100001100101001011100110111110110101000101000001011010100100001111011011010111101011101011010010111001010011011111011101001010011000110001100110000011011101011000011011010011010110111011000010100111101110010101101000000111100100110110000000111011011010111111010100001011100101001000010001011001001111010110100011110110011100010000010011000010111011100000100101010010100110101010101110011100
  [3] (1 elem)
    SEQUENCE (4 elem)
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.29.35 authorityKeyIdentifier (X.509 extension)
        OCTET STRING (24 byte) 30 16 80 14 2a 78 81 1d 84 a3 87 d1 fa ef 5b f5 58 21 0e c1 0a e7 7c 78 ("0.�.*x�.������[�X!.�.�|x")
      SEQUENCE (3 elem)
        OBJECT IDENTIFIER 2.5.29.15 keyUsage (X.509 extension)
        BOOLEAN true
        OCTET STRING (4 byte) 03 02 02 04 ("....")
      SEQUENCE (3 elem)
        OBJECT IDENTIFIER 2.5.29.19 basicConstraints (X.509 extension)
        BOOLEAN true
        OCTET STRING (5 byte) 30 03 01 01 ff ("0...�")
      SEQUENCE (2 elem)
        OBJECT IDENTIFIER 2.5.29.14 subjectKeyIdentifier (X.509 extension)
        OCTET STRING (22 byte) 04 14 49 d9 25 c4 b6 2a a7 2f 76 6f 84 e4 56 d3 a9 e7 f0 08 84 ef ("..I�%Ķ*�/vo��Vө��.��")