{"id":23849015,"url":"https://github.com/openchargingcloud/pki","last_synced_at":"2026-01-28T13:01:13.823Z","repository":{"id":94922797,"uuid":"589025739","full_name":"OpenChargingCloud/PKI","owner":"OpenChargingCloud","description":"The public key infrastructure of the Open Charging Cloud","archived":false,"fork":false,"pushed_at":"2023-08-02T19:10:24.000Z","size":16,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-06-03T12:06:45.130Z","etag":null,"topics":["emobility","pki","security"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/OpenChargingCloud.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2023-01-14T20:20:09.000Z","updated_at":"2024-12-14T19:10:18.000Z","dependencies_parsed_at":"2023-09-23T11:12:16.664Z","dependency_job_id":null,"html_url":"https://github.com/OpenChargingCloud/PKI","commit_stats":{"total_commits":6,"total_committers":1,"mean_commits":6.0,"dds":0.0,"last_synced_commit":"1f47c8c3f33a7d82a021a41beeddaddba6ff0c34"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/OpenChargingCloud/PKI","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenChargingCloud%2FPKI","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenChargingCloud%2FPKI/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenChargingCloud%2FPKI/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenChargingCloud%2FPKI/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/OpenChargingCloud","download_url":"https://codeload.github.com/OpenChargingCloud/PKI/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenChargingCloud%2FPKI/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28845762,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-28T12:37:07.070Z","status":"ssl_error","status_checked_at":"2026-01-28T12:37:06.657Z","response_time":57,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["emobility","pki","security"],"created_at":"2025-01-02T21:50:15.676Z","updated_at":"2026-01-28T13:01:13.800Z","avatar_url":"https://github.com/OpenChargingCloud.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# Open Charging Cloud PKI\n\nPublic Key Infrastructures (PKIs) play a crucial role in ensuring the security and trustworthiness of digital communications.\nThis is especially important as whereever numerous competing companies, service providers, manufacturers, and other entities\nhave to coexist, distrust among each other can be a substantial barrier.\n\nUnfortunately the traditional X.509 certificate standard is limited to a tree like structure having a single entity at its root\nand a direct chain of trust from the root to each leaf entity. Nevertheless, the reality of relationships within e-mobility are\nnot simply one-to-one but involve multiple parties and are often many-to-many. This requires a more flexible and robust approach\nto secure communication and trust. Therefore deviating from the traditional X.509 certificate standard will provide significant\nbenefits, given the inherent complexities of the sector and its daily politics.\n\nRather than modelling the e-mobility secotor as a linear hierarchy, it can better be represented as a graph of interconnected\nenities, where multiple signatures per certificate are used to reflect and secure the complex, many-to-many relationships\ninherent to the e-mobility ecosystem. Multi-signature certificates can capture the nuanced and multi-faceted relationships in\ne-mobility. They allow for more than one party to sign and verify a certificate, which is particularly useful when multiple\nentities need to agree on the authenticity of an entity or the validity of an operation. This multi-signature feature ensures\nthat a single compromised key does not lead to a system-wide security breach, enhancing the overall security posture of the\ne-mobility ecosystem.\n\nThis new, graph-based PKI concept places an emphasis on collaborative security via a quorum of multiple private keys belonging\nto various stakeholders at its center. In practice, it means that core certificates within the system will be signed by\nmultiple parties, reflecting their collective approval or agreement. This quorum-based validation principle not only boost\nsecurity but also introduces a unique sense of shared responsibility and trust among the diverse entities within the e-mobility\necosystem. By requiring a majority of signatures, it ensures that no single entity can unilaterally validate a certificate,\npreventing any potential misuse or compromise of a single private key from causing widespread damage.\n\nIn conclusion, this unique PKI with multi-signature quorum-based certificates represents a more accurate, secure, and flexible\napproach to managing and securing the complex web of relationships in the e-mobility ecosystem. This approach moves away from the\nlimitations of the traditional X.509 model, embracing a graph-based representation of reality to ensure secure, trusted\ndigital communications in e-mobility.\n\n\n## Fundamental Quorum\n\nThe following three [secp521r1](https://neuromancer.sk/std/nist/P-521) public keys define the fundamental 2/3 quorum.    \nThe encoding is base64.\n\n```\nPublic Key A: BADD1aCeLgfcCUR8fUOhcz6KVJnhClIkEny1Sy4TTZvntLVInmVLezbX0c3606Y6ZZRqwuIBjAdJSwmEIqXlZZaSPQEKB2MBlGuHY/Zzhd13y+V/GZgv2WkzUlALd8hhAAMKCuNR15qSYeHuVrNPuht2/O3uRMlnj+Lla2TDYH6DP0ouDg==\nPublic Key B: BADk0FLDzC8745NqTw3A8jgSJJdRX9E7Cfj6vY4e8m1Sbc8qKoKfq5Jr4wjWfSIRAYD0dqp5mspRLyTWZu1CAKi7kAGFUADBZ024C38cpPMHrMgp6XVrpWoHnoH3uEKPNMa/u4oSBwM3pV7V1T3cuNybH0o1oxEUcG/WSqC51Td8LUOTqw==\nPublic Key C: BACXVG3Impsg27S+C/blhbaXUy6q73ff2YYSFxMWQv+aXunsZ4U2xF0dFBNBQt85knrZdfvFOauDfggsSX75NDg8vgFJCMRIvrCDG9uObRyVsdUgJSYxpOymYW2XtpW2xmrQadXbccjhRLPsQPzD7P9fSOnnby7Hb/z8gd2P7u7bdlyLYA==\n```\n\n\n## Core Certificates\n\n```\nVirtual PTB\nBAFVws8yNnS4BA2U81zRftgoRwz6tCmkIXaPLApk5qMlNyK+ZA86ry81rviNUX9OqNsi/iIceT+t820x73kcFWPgewHSeqbkgatGSfUl8/80NailwIWqBqVRk2qrp+U3E4dHaU1vsINEQ+v5qrgbs3FZXCfHnJW6Mec2G04YuwFqo00TZg==\n\nCharging Station Manufacturers 1\nBAHQS8Nidech7dfV9kYnZU1e3oM59WYAwPBTLXvdeCuuVCswhKerv9v74alNtoEGHzFmirt8F4byPp9LC1PuuxvgOwDstWnIcEAop3l7BD/XnzcG6yHk2rdjeW1ppS0VdjAq1wnM6Rej5iKxq+b6hpFjIceodM4a/8v+QTCJEA+N6ZjYWQ==\n\nSmart Energy Meter Manufacturers 1\nBAFCVbvgh+ZcnMJr4e1XCN5WyO/jNINP0onuQk65pKvAvRm/3y2820kXkO7F2QzMDGD8nwPQkTuHZ5wiuoPnqf8NwwG10idlVZDEBjkuxLfBDe3FVQutP7u4FQtGhSbuA/HzZPCNSDdgtlQFGuMpI9FOdJ+2AqJr/b52lLVDzkkcAwBwfw==\n\nCharging Station Operators 1\nBAAbjGykjuGHF4pCAYlsCB8BnvEpGzR5k2Pmr7xdCylvasXnN3CpGlMRtgcmv1TG5f4O+XAeTqwcIT1lWxQwHYdvmgGtwgtDDcOgfMqFyazm6j2k6UkH3BbqpwqaThD5+Avbf0UMSs3GZgQVnwhxGr1Z37guNJqrWkY+ZiP60YvR0JdiTw==\n\nE-Mobility Roaming Providers 1\nBAF8hPattHqFZFk+oVtefcaJ5uF2G+DSVxB1a+f8sYSC87fLG439G4Q6Ku6jZc0rUaOTKiJkPkGJQZIZTpRYO0qqBgA6dXj15rCG+aLIhzkVKwmmu01ewUj/KIi4Mhvv98i6FriWfflqnJoxGFCFlZ0Ce4/eUHFbrK0oNuy8bvANupNIxQ==\n\nE-Mobility Providers 1\nBAFjgYZ8kz4PFXEg21Mg45b2f31dDpEE3Etr3K+mIvLgfk2UZhKzJK5LT7MUFo072L+E7Ryr2zMiCIo5ZXs/DlOrtQBM3cXz/hugoEnq1dfmmKhRX6xWH0vQFecGa/1p7qmJ3U0UohYEGlDmroPmhsT9/iGphjzZ/cjgXjznPROV/2b/lQ==\n\nE-Vehicle Manufacturers 1\nBAGs0xYywMkIetRSXL6Aoi19X7YeDAY2wTFxzNNflXfPib2V6IiqHGeXNdfAyiyuMwWsuFKu1PGSL1ln7KL0bvKcrwA9CA0zvnDZH17SFra9hbYgiuoaVcIvp1ZiILr20kDxOG4opnR4+Qi1xwbJeN6DKNdSq3P1N0KDB/Xx+LAro2HNpg==\n\nGrid Operators 1\nBAD1esW3tsFNQ84Tft1JUxGO4MSIdmayQWWXJq2yEeSscZWCM3a0jtC9KHiDjMJa7IUNmsokcVaUogEDzd9SJpTzSQEWihM6hZ2xwoykh6VLdXEW4792BEBydRhiUOEPGgMfoYSrN0q+kTcK5xMTRBIl55uYLXukM3PCTBkQTpYMz4IbBw==\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fopenchargingcloud%2Fpki","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fopenchargingcloud%2Fpki","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fopenchargingcloud%2Fpki/lists"}