base URL of the server is set by the issuer.