indispensable/at.asitplus.signum.indispensable.pki/TbsCertificate

TbsCertificate

@Serializable

data class TbsCertificate constructor(val version: Int? = 2, val serialNumber: ByteArray, val signatureAlgorithm: X509SignatureAlgorithm, val issuerName: List<RelativeDistinguishedName>, val validFrom: Asn1Time, val validUntil: Asn1Time, val subjectName: List<RelativeDistinguishedName>, val publicKey: CryptoPublicKey, val issuerUniqueID: Asn1BitString? = null, val subjectUniqueID: Asn1BitString? = null, val extensions: List<X509CertificateExtension>? = null) : Asn1Encodable<Asn1Sequence>

Very simple implementation of the meat of an X.509 Certificate: The structure that gets signed

Constructors

TbsCertificate

constructor(version: Int? = 2, serialNumber: ByteArray, signatureAlgorithm: X509SignatureAlgorithm, issuerName: List<RelativeDistinguishedName>, validFrom: Asn1Time, validUntil: Asn1Time, subjectName: List<RelativeDistinguishedName>, publicKey: CryptoPublicKey, issuerUniqueID: Asn1BitString? = null, subjectUniqueID: Asn1BitString? = null, extensions: List<X509CertificateExtension>? = null)

Types

Companion

object Companion : Asn1Decodable<Asn1Sequence, TbsCertificate>

Properties

extensions

val extensions: List<X509CertificateExtension>? = null

issuerAlternativeNames

@Transient

val issuerAlternativeNames: AlternativeNames?

Contains IssuerAlternativeNames parsed from extensions. This property is initialized right away. This incurs some structural validation, but still allows for contents violating RFC 5280, e.g. all UTF-8 strings are accepted, even though this is too lenient.

issuerName

val issuerName: List<RelativeDistinguishedName>

issuerUniqueID

@Serializable(with = Asn1BitStringSerializer::class)

val issuerUniqueID: Asn1BitString? = null

publicKey

val publicKey: CryptoPublicKey

serialNumber

@Serializable(with = ByteArrayBase64Serializer::class)

val serialNumber: ByteArray

signatureAlgorithm

val signatureAlgorithm: X509SignatureAlgorithm

subjectAlternativeNames

@Transient

val subjectAlternativeNames: AlternativeNames?

Contains SubjectAlternativeNames parsed from extensions. This property is initialized right away. This incurs some structural validation, but still allows for contents violating RFC 5280, e.g. all UTF-8 strings are accepted, even though this is too lenient.

subjectName

val subjectName: List<RelativeDistinguishedName>

subjectUniqueID

@Serializable(with = Asn1BitStringSerializer::class)

val subjectUniqueID: Asn1BitString? = null

validFrom

val validFrom: Asn1Time

validUntil

val validUntil: Asn1Time

version

val version: Int? = 2