#Credential Lifecycle

The Enterprise Stack Verifier validates credential lifecycle states—whether a credential is active, revoked, suspended, or expired—using globally adopted status mechanisms and validity timestamps.

#What's included

The Verifier capability supports lifecycle checks through dedicated verification policies:

#Status list verification

Check whether a credential has been revoked or suspended by fetching and validating its entry in the issuer's status list.

This means:

• Verifiers automatically fetch status credentials from issuer-hosted registries (S3, Azure Blob, etc.)
• Supports industry-standard formats: Bitstring Status List v1.0, TokenStatusList, StatusList2021
• Works across credential types: W3C VC, SD-JWT VC, ISO mdoc
• Verifiers can check revocation, suspension, or custom status purposes

#Validity window verification

Verify that credentials are being used within their intended validity period by checking validFrom (or notBefore) and validUntil (or expiresAt) timestamps.

This means:

• Prevents use of credentials before their activation date
• Rejects expired credentials automatically
• No external status list required—validity timestamps are embedded in the credential itself
• Verifiers can enforce strict temporal policies per tenant or use case

#FAQs

• Which status list formats are supported? — The Verifier supports W3C Bitstring Status List v1.0, TokenStatusList (IETF), and StatusList2021, covering all major standards for both JWT and JSON-LD credentials.
• Can I verify credentials offline? — Validity timestamps can be verified offline, but status list checks require network access to fetch the current status credential. For offline scenarios, verifiers need a cached copy of the status list.

#Where to go next

• Status policy – Learn about the credential status policy to check revocation and suspension status across multiple formats.
• Expiration & validity policies – Learn about the expiration and validity policies to check credential validity windows.