Hosted STIR/SHAKEN Certificate

​

Requirements

• STIR/SHAKEN certificate from an authorized STI-CA
• Certificate hosted at a public HTTPS URL (x5u)
• Unencrypted PEM-format private key (EC-P256 or RSA-2048)
• Outbound voice profile
• US phone number (for validation)

​

Upload certificate

{
  "x5u_url": "https://certificates.transnexus.com/xxx/xxxx.pem",
  "private_key": "-----BEGIN EC PRIVATE KEY-----[KEY]-----END EC PRIVATE KEY-----"
}

​

Associate with outbound voice profile

{
  "stir_shaken_cert_id": "e25c6e2e-4f77-42fb-b8d3-e5d8d0c7d019"
}

​

Verify signing

1. Create an IP connection with “Receive SHAKEN/STIR Identity SIP header” enabled
2. Assign a US phone number to this connection
3. Place a call from a connection using the configured outbound voice profile
4. Check the inbound INVITE for the Identity header:

Identity:[JWT];info=<https://[CERT_URL]>;alg=ES256;ppt="shaken"

​

Cost