For some Attestation Types there are some Requirements placed on the Attestation certificate (x5c[0]).
For example for packed the following applies:
https://www.w3.org/TR/webauthn-2/#sctn-packed-attestation-cert-requirements
Version 3
Subject-C is a valid country
Subject-O and Subject-CN set.
Subject-OU specifically set to Authenticator Attestation
Basic Constraints: CA:FALSE
Similar ones exist for other attestation formats but this is likely the easiest to achieve.
For some Attestation Types there are some Requirements placed on the Attestation certificate (
x5c[0]).For example for
packedthe following applies:https://www.w3.org/TR/webauthn-2/#sctn-packed-attestation-cert-requirements
Version 3
Subject-C is a valid country
Subject-O and Subject-CN set.
Subject-OU specifically set to
Authenticator AttestationBasic Constraints:
CA:FALSESimilar ones exist for other attestation formats but this is likely the easiest to achieve.