Hello,
My name is Cezar Bretan, I'm writing on behalf of Enable Banking Oy, an AISP on the EBA register (PSDFI-FINFSA-2988499-7).
I wanted to bring to your attention that we haven't been able to use your PSD2 API for AIS for over 4 months, even after changing the eIDAS certificates in your dev portal.
This is an example of a more recent exchange log, where we tried to retrieve the account information of one of your customers after they gave their consent (note that some of the data is obfuscated for privacy reasons):
*We redirected the PSU to https://gate.postbank.bg:444/postbank/psd2/live/oauth2/authorize?response_type=code&client_id=aec96f310eff5b9d57d25b4061ecd96d&redirect_uri=https%3A%2F%2Ftilisy.enablebanking.com%2F&scope=aisp&state=fab18067-381c-4df2-9197-a18b53cb8008*
*PSU redirected back to https://tilisy.enablebanking.com/ais/?code=AAN1RYousGjaBjounkGlg2s9cThnnmjJezXmb3x_Pe2Hnon8R6qRSK58R6HcEp599vb1oK3VffynqR-8OKBukeonsmfi6uQYM8RJtKuENLqrpVQjw8gf9kqHCN-WtCZazXbc_q2f5LvwcE0quOzjmPgIOZ2mtAsGrwmNpb5uoYbikZisXQypWSjRETe41s6568WvSDtotLn4n4Wsa5PRQe1y&state=fab18067-381c-4df2-9197-a18b53cb8008 , following successful authentication on your website*
2026-06-08 06:24:12.626Z Request('https://gate.postbank.bg:444/postbank/psd2/live/oauth2/token', method='POST', body='redirect_uri=https%3A%2F%2Ftilisy.enablebanking.com%2F&grant_type=authorization_code&code=AAN1RYousGjaBjounkGlg2s9cThnnmjJezXmb3x_Pe2Hnon8R6qRSK58R6HcEp599vb1oK3VffynqR-8OKBukeonsmfi6uQYM8RJtKuENLqrpVQjw8gf9kqHCN-WtCZazXbc_q2f5LvwcE0quOzjmPgIOZ2mtAsGrwmNpb5uoYbikZisXQypWSjRETe41s6568WvSDtotLn4n4Wsa5PRQe1y', headers={'PSU-IP-Address': '94.190.136.183', 'PSU-HTTP-Method': 'POST', 'PSU-Date': '1780899852', 'PSU-User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36', 'PSU-Referer': 'https://tilisy.enablebanking.com/ais/?code=AAN1RYousGjaBjounkGlg2s9cThnnmjJezXmb3x_Pe2Hnon8R6qRSK58R6HcEp599vb1oK3VffynqR-8OKBukeonsmfi6uQYM8RJtKuENLqrpVQjw8gf9kqHCN-WtCZazXbc_q2f5LvwcE0quOzjmPgIOZ2mtAsGrwmNpb5uoYbikZisXQypWSjRETe41s6568WvSDtotLn4n4Wsa5PRQe1y&state=fab18067-381c-4df2-9197-a18b53cb8008', 'PSU-Accept': 'application/json, text/plain, */*', 'PSU-Accept-Encoding': 'gzip, deflate, br', 'PSU-Accept-Language': 'en-US,en;q=0.9,bg;q=0.8', 'Accept': 'application/json', 'X-Request-ID': 'aa77f094-6302-11f1-a8c5-42004e494300', 'X-IBM-Client-Id': 'aec96f310eff5b9d57d25b4061ecd96d', 'X-IBM-Client-Secret': 'b32d5a292e0aa1bf385ca9e2f5250338', 'Date': 'Mon, 08 Jun 2026 06:24:12 GMT', 'Content-Type': 'application/x-www-form-urlencoded', 'Authorization': 'Basic YWVjOTZmMzEwZWZmNWI5ZDU3ZDI1YjQwNjFlY2Q5NmQ6YjMyZDVhMjkyZTBhYTFiZjM4NWNhOWUyZjUyNTAzMzg='}, tls={'crt': 'EnableBanking2026_cert', 'key': 'EnableBanking_key'})2026-06-08 06:24:12.812Z Response(body='{"token_type": "Bearer", "access_token": "AAAaAAAaAAAaAaAaAAAaAAA1AAA1AAA1AaAaAaAaA1A1AaAaaa-AaAAAAAAAaa_Aa1aaaaaaaA1AaAaAA1111AaAaAaaAAa1AaA01AaaAAAAAaaAaaA1aaaAa1A0aaA1a_A1AaAA1A-A-aaAAAa-aA1AaAAAAAA1-AaAAAA1aaAA1AAaaA-a111aaAAAa1AA0AaaA_AAAA_aAaAAaaAaaAaaAAa1aaAAAAaaAA1A1AaAaaa", "expires_in": 3600, "consented_on": 1, "scope": "aisp", "refresh_token": "AAAaAaa-aaAAA_AAA1AaAa1a1A1AAaAaaAAAaaAaAaAAAa_-AaA11a1aA-1aAAAaaa1Aa1aAa1AAaaAaaAAa_AAaa1Aa1a0aaAa1AaaaaaA0AAaAA1aAA1Aa-a1aAaA_AAAAAAAa11AAAAAAAaAAA1AAA1aAAaaAaAaA1A0AaAAA1AaaAaAa1aAaaAaaaAaAA1aAAAAaAAa1aAaAaaaA1AA1", "refresh_token_expires_in": 1}', headers=[['X-Backside-Transport', 'FAIL FAIL'], ['Connection', 'Keep-Alive'], ['Transfer-Encoding', 'chunked'], ['Content-Type', 'application/json'], ['Cache-Control', 'private, no-store, no-cache, must-revalidate'], ['Pragma', 'no-cache'], ['Content-Security-Policy', "default-src 'self'; style-src 'unsafe-inline'"], ['Access-Control-Expose-Headers', 'APIm-Debug-Trans-Id, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, X-Global-Transaction-ID'], ['Access-Control-Allow-Origin', '*'], ['Access-Control-Allow-Methods', 'POST'], ['X-Global-Transaction-ID', 'ad2bf3706a26600c686c42d0'], ['Content-Encoding', 'gzip']], status=200)2026-06-08 06:24:12.927Z Request('https://gate.postbank.bg/postbank/psd2/live/v1/accounts', method='GET', body='', headers={'PSU-IP-Address': '94.190.136.183', 'PSU-HTTP-Method': 'POST', 'PSU-Date': '1780899852', 'PSU-User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36', 'PSU-Referer': 'https://tilisy.enablebanking.com/ais/?code=AAN1RYousGjaBjounkGlg2s9cThnnmjJezXmb3x_Pe2Hnon8R6qRSK58R6HcEp599vb1oK3VffynqR-8OKBukeonsmfi6uQYM8RJtKuENLqrpVQjw8gf9kqHCN-WtCZazXbc_q2f5LvwcE0quOzjmPgIOZ2mtAsGrwmNpb5uoYbikZisXQypWSjRETe41s6568WvSDtotLn4n4Wsa5PRQe1y&state=fab18067-381c-4df2-9197-a18b53cb8008', 'PSU-Accept': 'application/json, text/plain, */*', 'PSU-Accept-Encoding': 'gzip, deflate, br', 'PSU-Accept-Language': 'en-US,en;q=0.9,bg;q=0.8', 'Accept': 'application/json', 'X-Request-ID': 'aaa5dcf2-6302-11f1-a8c5-42004e494300', 'X-IBM-Client-Id': 'aec96f310eff5b9d57d25b4061ecd96d', 'X-IBM-Client-Secret': 'b32d5a292e0aa1bf385ca9e2f5250338', 'Date': 'Mon, 08 Jun 2026 06:24:12 GMT', 'X-Client-Certificate': '-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----', 'Authorization': 'Bearer ${access_token}'}, tls={'crt': 'EnableBanking2026_cert', 'key': 'EnableBanking_key'})2026-06-08 06:24:13.762Z Response(body='{ "httpCode":"503", "httpMessage":"Service Unavailable", "moreInformation":"" }', headers=[['Content-Type', 'application/json'], ['Access-Control-Allow-Origin', '*'], ['Access-Control-Expose-Headers', 'APIm-Debug-Trans-Id, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, X-Global-Transaction-ID'], ['X-Backside-Transport', 'FAIL FAIL'], ['Connection', 'close']], status=503)
I'd be grateful for any insights on the issue we're facing.
Best Regards,
Cezar Bretan
Software Engineer at Enable Banking Oy