<!--
{
  "availability" : [
    "iOS: 14.0.0 -",
    "iPadOS: 14.0.0 -",
    "macOS: 11.0.0 -",
    "visionOS: 1.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "BundleResources",
  "identifier" : "/documentation/BundleResources/Information-Property-List/NSPinnedCAIdentities",
  "metadataVersion" : "0.1.0",
  "role" : "Property List Key",
  "symbol" : {
    "kind" : "Property List Key",
    "modules" : [
      "Bundle Resources"
    ],
    "preciseIdentifier" : "plist:Information_Property_List.NSPinnedCAIdentities"
  },
  "title" : "NSPinnedCAIdentities"
}
-->

# NSPinnedCAIdentities

A list of allowed Certificate Authority certificates for a given domain name.

## Discussion

Provide an array of dictionaries as the value for this key. Each dictionary in the array contains the [`SPKI-SHA256-BASE64`](/documentation/BundleResources/Information-Property-List/NSPinnedCAIdentities/SPKI-SHA256-BASE64) key with a value that represents the Base64-encoded SHA-256 digest of an X.509 certificate’s DER-encoded ASN.1 Subject Public Key Info (SPKI) structure.

```console
NSPinnedCAIdentities : Array {
    Dictionary {
        SPKI-SHA256-BASE64 : String
    }
}
```

When making a network connection to a named domain, App Transport Security (ATS) blocks the connection unless it can find the SPKI digest of at least one Certificate Authority (CA) or sub-CA certificate in the chain presented by the server.

You must include this key or the [`NSPinnedLeafIdentities`](/documentation/BundleResources/Information-Property-List/NSPinnedLeafIdentities) key or both in each domain-specific [`NSPinnedDomains`](/documentation/BundleResources/Information-Property-List/NSAppTransportSecurity/NSPinnedDomains) subdictionary. If you include both, then both must produce a match.

## Topics

### Key Digests

[`SPKI-SHA256-BASE64`](/documentation/BundleResources/Information-Property-List/NSPinnedCAIdentities/SPKI-SHA256-BASE64)

The digest of an X.509 certificate’s Subject Public Key Info structure.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)