PaySaxas PSD2 sandbox certificates
==================================

sandbox-demo-tpp.pem + sandbox-demo-tpp.key
  A ready-to-use demo client credential. Download both and connect —
  nothing to request, nobody to email:

    curl https://xs2a.paysaxas.money/v1/accounts       --cert sandbox-demo-tpp.pem --key sandbox-demo-tpp.key       -H "X-Request-ID: $(uuidgen)"

  It carries all three PSD2 roles (AISP, PISP, CBPII), so one credential
  exercises every service.

  This private key is PUBLISHED DELIBERATELY and is shared by everyone. It
  has no security value and must never be reused outside this sandbox: it
  authenticates a fictional provider against fictional customers, is
  trusted only while the sandbox flag is on, and is refused in production.

paysaxas-psd2-test-ca.pem
  The certificate authority the sandbox trusts. Use it to verify the demo
  leaf, or send us a CSR carrying the ETSI TS 119 495 PSD2 QcStatement if
  you would rather test with an identity of your own.

  Its private key is NOT published and never will be — anyone holding it
  could mint certificates the sandbox trusts.

Production accepts only QWACs from QTSPs on the EU trusted list. None of
this is meaningful there.

Questions: tpp-support@paysaxas.com