Register Token Diagnostics
Checks for the client assertion JWT sent to the CDR Register token endpoint.
Configuration
- client_id
- e83e4a45-a9e2-48f6-8ff5-62c5b63e8730
- key_id (kid)
- NDL
- token_endpoint
- https://secure.api.cdrsandbox.gov.au/idp/connect/token
- aud (MtlsBaseURI + /idp)
- https://secure.api.cdrsandbox.gov.au/idp
- register_base_uri
- https://api.cdrsandbox.gov.au
Key Checks
✔ Private key parse: RSA 2048-bit key
✔ Certificate parse: CN=ndl_client2, Issuer=CDR Sandbox Intermediate CA
✔ Certificate validity: Valid until 2027-07-02T04:45:58Z
✔ Key pair match: Private key matches certificate public key
Generated JWT Header
{
"alg": "PS256",
"kid": "NDL",
"typ": "JWT"
}
Generated JWT Claims
{
"iss": "e83e4a45-a9e2-48f6-8ff5-62c5b63e8730",
"sub": "e83e4a45-a9e2-48f6-8ff5-62c5b63e8730",
"aud": "https://secure.api.cdrsandbox.gov.au/idp",
"jti": "(uuid)",
"exp": 1785129929,
"iat": 1785129629
}
Token Request Result
API Error 400: {"error":"invalid_client","error_description":"Client certificate validation failed"}