<status value="active" /> <description value="PCM-managed read-only projection of one or more certificate thumbprints (x5t#S256, base64url SHA-256 of the DER certificate) explicitly associated with this resource under the current participant-registration policy. The association may be established by the current manual process or by a future automated process without changing this representation. The extension is certificate inventory metadata: it does not describe PCM's complete trust store, prove current certificate presentation or authorization, or declare that an OAuth access token is certificate-bound." /> <fhirVersion value="4.0.1" /> <kind value="complex-type" /> <abstract value="false" /> <context> <type value="element" /> <expression value="Organization" /> </context> <context> <type value="element" /> <expression value="Endpoint" /> </context> <type value="Extension" /> <baseDefinition value="http://hl7.org/fhir/StructureDefinition/Extension" /> <derivation value="constraint" /> <differential> <element id="Extension"> <path value="Extension" /> <short value="Ext: Applicable certificates" /> <definition value="PCM-managed read-only projection of one or more certificate thumbprints (x5t#S256, base64url SHA-256 of the DER certificate) explicitly associated with this resource under the current participant-registration policy. The association may be established by the current manual process or by a future automated process without changing this representation. The extension is certificate inventory metadata: it does not describe PCM's complete trust store, prove current certificate presentation or authorization, or declare that an OAuth access token is certificate-bound." /> </element> <element id="Extension.extension"> <path value="Extension.extension" /> <min value="1" /> </element> <element id="Extension.extension:thumbprint"> <path value="Extension.extension" /> <sliceName value="thumbprint" /> <min value="1" /> <max value="*" /> </element> <element id="Extension.extension:thumbprint.extension"> <path value="Extension.extension.extension" /> <max value="0" /> </element> <element id="Extension.extension:thumbprint.url"> <path value="Extension.extension.url" /> <fixedUri value="thumbprint" /> </element> <element id="Extension.extension:thumbprint.value[x]"> <path value="Extension.extension.value[x]" /> <short value="Associated certificate thumbprint (x5t#S256)" /> <comment value="PCM derives this base64url value without padding from the SHA-256 hash of the DER-encoded X.509 certificate associated with the resource. The applicable create/update request profiles prohibit client-supplied values; PCM alone populates and maintains the authoritative inventory." /> <min value="1" /> <type> <code value="string" /> </type> </element> <element id="Extension.url"> <path value="Extension.url" /> <fixedUri value="http://pcm.fhir.health.gov.il/StructureDefinition/ext-applicable-certificates" /> </element> <element id="Extension.value[x]"> <path value="Extension.value[x]" /> <max value="0" /> </element> </differential> </StructureDefinition>