JWK Thumbprint and Key ID Diagnostics
Calculate SHA-256 public JWK thumbprints and inspect missing, duplicate or mismatched key IDs.
Parsing and hashing run in your browser; private and symmetric keys are rejected.
Using JWK Thumbprint and Key ID Diagnostics for open banking
Calculate SHA-256 public JWK thumbprints and inspect missing, duplicate or mismatched key IDs.
Sandbox example and expected result
Load the public demo JWKS, set the expected kid to sandbox-key-1, and inspect the thumbprint and matching-key count.
Limitations and troubleshooting
A thumbprint identifies key material; it does not verify a JWT, certificate or issuer. kid need not equal a thumbprint. Only public RSA, EC and OKP JWKs are accepted.
Where your input is processed
Parsing and hashing run in your browser; private and symmetric keys are rejected. Use synthetic test data.
Maintained by OpenFinanceTools. Guidance updated 23 October 2026. Testing and editorial approach