---
title: "Credential Lifecycle"
description: "How the Enterprise Verifier checks credential status, expiration, and validity using standard status lists and verification policies."
stack: "Enterprise Stack (commercial) — version 0.21.0"
stack_version: "0.21.0"
stack_comparison: https://docs.walt.id/community-vs-enterprise.md
canonical_url: https://docs.walt.id/enterprise-stack/capabilities/verifier/credential-lifecycle
generated: 2026-07-20
---
# Credential Lifecycle

The Enterprise Stack Verifier validates credential lifecycle states—whether a credential is active, revoked, suspended, or expired—using globally adopted status mechanisms and validity timestamps. 

**Note:**

The Verifier doesn't manage credential status itself—it verifies status by checking issuer-hosted status lists and credential validity fields during presentation verification.

## What's included

The Verifier capability supports lifecycle checks through dedicated verification policies:

#### Status list verification

Check whether a credential has been revoked or suspended by fetching and validating its entry in the issuer's status list.

**This means:**
- Verifiers automatically fetch status credentials from issuer-hosted registries (S3, Azure Blob, etc.)
- Supports industry-standard formats: Bitstring Status List v1.0, TokenStatusList, StatusList2021
- Works across credential types: W3C VC, SD-JWT VC, ISO mdoc
- Verifiers can check revocation, suspension, or custom status purposes

#### Validity window verification

Verify that credentials are being used within their intended validity period by checking `validFrom` (or `notBefore`) and `validUntil` (or `expiresAt`) timestamps.

**This means:**
- Prevents use of credentials before their activation date
- Rejects expired credentials automatically
- No external status list required—validity timestamps are embedded in the credential itself
- Verifiers can enforce strict temporal policies per tenant or use case

## FAQs

- **Which status list formats are supported?** — The Verifier supports W3C Bitstring Status List v1.0, TokenStatusList (IETF), and StatusList2021, covering all major standards for both JWT and JSON-LD credentials.

- **Can I verify credentials offline?** — Validity timestamps can be verified offline, but status list checks require network access to fetch the current status credential. For offline scenarios, verifiers need a cached copy of the status list.

## Where to go next

- **[Status policy](https://docs.walt.id/enterprise-stack/services/verifier-service/policies/parameterized-verification-policies.md#credential-status)** – Learn about the credential status policy to check revocation and suspension status across multiple formats.
- **[Expiration & validity policies](https://docs.walt.id/enterprise-stack/services/verifier-service/policies/static-verification-policies.md#expiredn)** – Learn about the expiration and validity policies to check credential validity windows.