multipaz/org.multipaz.crypto/X509Cert

X509Cert

data class X509Cert(val encoded: ByteString) : X509Signed

A data type for a X.509 certificate.

Parameters

encoded

the bytes of the X.509 certificate in DER encoding.

Constructors

X509Cert

constructor(encoded: ByteString)

Types

Builder

class Builder(publicKey: EcPublicKey, signingKey: AsymmetricKey, serialNumber: ASN1Integer, subject: X500Name, issuer: X500Name, validFrom: Instant, validUntil: Instant) : X509SignedBuilder<X509Cert.Builder>

Builder for X.509 certificate.

Companion

object Companion

Properties

authorityKeyIdentifier

val authorityKeyIdentifier: ByteArray?

The authority key identifier (OID 2.5.29.35), or null if not present in the certificate.

criticalExtensionOIDs

val criticalExtensionOIDs: Set<String>

The OIDs for X.509 extensions which are marked as critical.

ecPublicKey

val ecPublicKey: EcPublicKey

The public key in the certificate, as an Elliptic Curve key.

encoded

open override val encoded: ByteString

extensions

val extensions: List<X509Extension>

The list of decoded extensions information.

issuer

val issuer: X500Name

The issuer of the certificate.

javaX509Certificate

val X509Cert.javaX509Certificate: <Error class: unknown class>

The Java X509 certificate from the encoded certificate data.

keyUsage

val keyUsage: Set<X509KeyUsage>

The key usage (OID 2.5.29.15) or the empty set if not present.

nonCriticalExtensionOIDs

val nonCriticalExtensionOIDs: Set<String>

The OIDs for X.509 extensions which are not marked as critical.

serialNumber

val serialNumber: ASN1Integer

The certificate serial number.

signature

val signature: ByteArray

The certificate or CRL signature.

signatureAlgorithm

val signatureAlgorithm: Algorithm

The signature algorithm for the certificate or CRL as Algorithm.

signatureAlgorithmOid

val signatureAlgorithmOid: String

The signature algorithm for the CRL as OID string.

subject

val subject: X500Name

The subject of the certificate.

subjectKeyIdentifier

val subjectKeyIdentifier: ByteArray?

The subject key identifier (OID 2.5.29.14), or null if not present in the certificate.

tbsCertificate

val tbsCertificate: ByteArray

The bytes of TBS sequence.

validityNotAfter

val validityNotAfter: Instant

The point in time where the certificate is valid until.

validityNotBefore

val validityNotBefore: Instant

The point in time where the certificate is valid from.

version

val version: Int

The certificate version.

Functions

getExtensionsSeq

fun getExtensionsSeq(): ASN1Sequence?

getExtensionValue

fun getExtensionValue(oid: String): ByteArray?

Gets the bytes of a X.509 extension.

toDataItem

fun toDataItem(): DataItem

toPem

fun toPem(): String

Encode this certificate or CRL in PEM format

verify

fun verify(publicKey: EcPublicKey)

Checks if the certificate or CRL was signed with a given key.