<!--
{
  "availability" : [
    "iOS: 14.0.0 -",
    "iPadOS: 14.0.0 -",
    "macOS: 11.0.0 -",
    "visionOS: 1.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "BundleResources",
  "identifier" : "/documentation/BundleResources/Information-Property-List/NSPinnedLeafIdentities",
  "metadataVersion" : "0.1.0",
  "role" : "Property List Key",
  "symbol" : {
    "kind" : "Property List Key",
    "modules" : [
      "Bundle Resources"
    ],
    "preciseIdentifier" : "plist:Information_Property_List.NSPinnedLeafIdentities"
  },
  "title" : "NSPinnedLeafIdentities"
}
-->

# NSPinnedLeafIdentities

A list of allowed leaf certificates for a given domain name.

## Discussion

Provide an array of dictionaries as the value for this key. Each dictionary in the array contains the [`SPKI-SHA256-BASE64`](/documentation/BundleResources/Information-Property-List/NSPinnedLeafIdentities/SPKI-SHA256-BASE64) key with a value that represents the Base64-encoded SHA-256 digest of an X.509 certificate’s DER-encoded ASN.1 Subject Public Key Info (SPKI) structure.

```console
NSPinnedLeafIdentities : Array {
    Dictionary {
        SPKI-SHA256-BASE64 : String
    }
}
```

When making a network connection to a named domain, App Transport Security (ATS) blocks the connection unless it can find the SPKI digest of the leaf certificate presented by the server among the digests in this array. Consider including more than one leaf certificate to allow for server-side configuration changes.

You must include this key or the [`NSPinnedCAIdentities`](/documentation/BundleResources/Information-Property-List/NSPinnedCAIdentities) key or both in each domain-specific [`NSPinnedDomains`](/documentation/BundleResources/Information-Property-List/NSAppTransportSecurity/NSPinnedDomains) subdictionary. If you include both, then both must produce a match.

## Topics

### Key Digests

[`SPKI-SHA256-BASE64`](/documentation/BundleResources/Information-Property-List/NSPinnedLeafIdentities/SPKI-SHA256-BASE64)

The digest of an X.509 certificate’s Subject Public Key Info structure.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)