Master List Signer

ENTERPRISE EDITION This is a SignServer Enterprise Edition (EE) feature.

The signer has the fully qualified class name: org.signserver.module.masterlist.signer.MasterListSigner.


The Master List signer produces a signed list of CSCA certificates according to the ICAO specification MRTD TR CSCA countersigning and Master List issuance, version 1.0. As mandated by the specification, both the signer certificate and the CSCA certificates are included in the signature. The INCLUDE_CERTIFICATE_LEVELS property is thus not allowed.

Available Properties




Specifying the algorithm used to sign the data. Default: depending on the signing key: SHA256withDSA for DSA keys, SHA256withECDSA for ECDSA keys, and otherwise SHA256withRSA.