OptionalalgAlgorithm published for this key (defaults to 'RS256')
Key identifier for this key. Must be unique across the active key and all other additional keys.
Public key to publish. Import from PEM with jose's importSPKI, or from JWK with importJWK.
A public key published in the tool's JWKS in addition to the active signing key.
Entries are publish-only: they are never used to sign anything. Their purpose is to keep a previous key verifiable during a rotation overlap, or to publish a key that is signed outside this library.