Alkondor Geveltechniek makes aluminium window frames, and to carry the KOMO mark they need a product certificate. The certification body has to be sure which company it certifies and who is asking. Sanne van der Veen proves both from wallets: her Personal ID for who she is, the KVK's register extract for the company and her authority to act for it. This playground puts her Personal ID in your wallet. With it she collects the extract, and Keurhof Certificatie issues the certificate straight back into the business wallet.
How this works
Everything on this page follows the European Digital Identity standards. The terminology below is the same you will find in the specifications, so you can map what you see to what you read.
Issuer
The party that states something and signs it. Besides this playground there are two: the KVK issues the register extract and the EBW OID, and Keurhof Certificatie issues the product certificate.
Holder
You. Your credentials live in your wallet on your phone, not in our database. You decide each time whether to share, and what.
Verifier
The party that asks for proof. Keurhof is a verifier before it is an issuer: it checks the Personal ID when Sanne signs in, and the register extract before it puts the company's name on a certificate.
Issuance: OpenID4VCI
You scan a credential offer. Your wallet fetches the credential from the issuer and stores it, cryptographically bound to a key that only your phone holds.
Presentation: OpenID4VP
A verifier sends a query describing what it needs. Your wallet shows you the request, and only what you approve is sent back, signed.
Why the verifier learns less than you might expect
Credentials in SD-JWT VC format support selective disclosure. Keurhof asks the Personal ID only for a name and a date of birth, not for an address or a BSN. And a customer Alkondor later shows the certificate to can see the product and its performance without the audit dates.
Step 1
You need a wallet app to receive and share credentials. Any wallet that speaks OpenID4VCI and OpenID4VP can hold them, but it also has to accept credentials from an issuer it does not know yet, and not every wallet does.
Step 2
Scan the QR code with your wallet to receive the Personal ID. The data is fictional: you are receiving Sanne's Personal ID, so nothing about you is stored anywhere.
Your credentials
0 / 1
Personal ID (SD-JWT VC)
Issue the Personal ID first: it is how Sanne signs in at the KVK and at Keurhof.
Personal ID (SD-JWT VC)
Sanne's name, date of birth, nationality and address. It shows who she is when she signs in at the KVK and at Keurhof Certificatie.
Start here
Step 3
Issuing a credential is only half the story. The KVK and Keurhof Certificatie are live portals; together they take Alkondor from a registration to a certified product.
Sanne gets Alkondor's window frames certified
Sanne van der Veen handles certification at Alkondor Geveltechniek, which makes aluminium window frames and facade elements in Hengelo. To sell them with the KOMO mark, Alkondor needs a product certificate under BRL 2701, and the certification body has to know exactly which company it certifies and who is asking. Until now that meant typing the company's particulars into a customer portal and attaching a register extract as a PDF. In this demo you are Sanne: you sign in at Keurhof Certificatie with your Personal ID, supply the company's particulars from the business wallet and receive the certificate into that same wallet. Keurhof is fictional; the scheme, BRL 2701, is real.
What happens next
Get Sanne's Personal ID
Issue the Personal ID above and store it in the wallet app on your phone. It is how Sanne signs in, at the KVK and at Keurhof; the attestations about Alkondor go into the business wallet.
Collect the register extract and the EBW OID at the KVK
At mijnkvk.acc.credenco.com Sanne signs in with her Personal ID and collects two attestations into Alkondor's business wallet: the register extract (EUCC), with the name, KVK number, address and who may act for the company, and the EBW OID that identifies the business wallet itself.
Sign in at Keurhof with the Personal ID
At keurhof.acc.credenco.com Sanne opens the customer portal and signs in by scanning a QR code with her personal wallet. No account and no password: her name and date of birth are enough.
Supply the company particulars from the business wallet
Instead of a form, the portal asks the business wallet for the register extract and the EBW OID. Before it goes any further, Keurhof checks that Sanne is named in the extract as someone who may act for Alkondor.
Receive the KOMO product certificate
The certification file shows the assessment, the audit and the decision. One click issues the KOMO product certificate under BRL 2701 into Alkondor's business wallet: the holder as the register states it, the product and its performance from Keurhof's own file. Its status replaces the published list of suspended and withdrawn certificates.
You are missing Personal ID (SD-JWT VC). You can continue, but signing in at the portals will stop when they ask for it.
If something goes wrong
More to try
The same wallet, a different story. Each one issues what it needs and links to its own live service.
Our mock rental service
Wayfare Car Rental
View this use case
Our mock municipality
Municipality of Zuidvliet
View this use case
Louise joins Bundesanzeiger Verlag
Working in Cologne
View this use case
Karin gets Hanze Staffing admitted
Admission to the labour-hire market
View this use case
Sophie proves she may practise
The BIG register
View this use case
The Credenco PID Issuer for WE BUILD
WE BUILD PID issuer
View this use case