If the TMD file is obtained from Nintendo's CDN, then it will have two certificates appended at the end of the file. Each certificate follows the following format:
+
If the TMD file is obtained from Nintendo's CDN, then it will have two certificates appended at the end of the file: .
−
{| class="wikitable"
+
{| class="wikitable" border="1"
|-
|-
−
! Offset
+
! CERTIFICATE
−
! Size
+
! SIGNATURE TYPE
−
! Description
+
! RETAIL CERT NAME
+
! DEBUG CERT NAME
+
! DESCRIPTION
|-
|-
−
| 0x000
+
| TMD
−
| 4
+
| RSA-2048
−
| Signature type
+
| CP0000000b
+
| CP0000000a
+
| Used to verify the TMD signature
|-
|-
−
| 0x004
+
| CA
−
| *
+
| RSA-4096
−
| Signature
+
| CA00000003
−
|-
+
| CA00000004
−
| 0x104
+
| Used to verify the TMD Certificate
−
| 64
−
| Issuer
−
|-
−
| 0x124
−
| 4
−
| Tag
−
|-
−
| 0x128
−
| 64
−
| Name
−
|-
−
| 0x168
−
|
−
| Key
|}
|}
+
+
The CA certificate is issued by 'Root', the public key for which is stored in NATIVE_FIRM.