Mutual TLS
Mutual TLS
Also known as mTLS or Client Certificates, Mutual TLS means that not just the server but also the client sends an SSL certificate.
All requests from the Oblivious Network Relay include an optional client certificate, making it possible to enable mTLS for any Gateway server.
Use this client certificate chain to be sure that your traffic is coming from an Oblivious Network Relay. If you choose to pin any certificates, we recommend pinning the intermediate.
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----To verify that certificate chain, use this Certificate Authority.
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----