SHP Specification
SHP-CTA-2.1
SHP Certification Trust Architecture v2.1
SHP Certification Trust Architecture v2.1
The Certification Trust Architecture defines the SHP trust, issuance and certification-authority architecture.
Version 2.1 is Active from 26 September 2026 and supersedes CTA v2.0.
The architecture preserves hierarchical SHP signing authority: the root does not directly sign certification manifests, and production issuance remains subject to the governed qualification and key-authority requirements.
Activation of CTA does not itself establish platform support, production signing readiness, certification-service availability or signing authority for any implementation, platform, operator or key.
The normative publication artefact is the immutable ODT linked above. The SHA-256 digest published with this page identifies its exact bytes.
Repository provenance
The repository object identified below is byte-identical to the normative publication artefact. Its SHA-256 digest matches the publication digest shown above.
View commit-bound repository object · View repository commit
Repository location and commit history provide provenance and traceability. They do not determine SHP normative authority, lifecycle status, platform support, or certification eligibility.