MultipazProject

multipaz/org.multipaz.crypto/X509Signed

X509Signed

sealed class X509Signed

Base class for signed X.509 sequences: certificates and CRLs.

Signed sequence is an ASN1Sequence that contains three elements: TBS sequence, signature algorithm, and signature, where the signature cryptographically signs the bytes of TBS sequence. TBS sequence syntax is determined by the format (certificate and CRL), but in both cases can contain specially-tagged extension object.

This class encapsulates the common functionality:

dealing with the top-level sequence
signature
extensions

Inheritors

Types

object Companion

Properties

criticalExtensionOIDs

val criticalExtensionOIDs: Set<String>

The OIDs for X.509 extensions which are marked as critical.

abstract val encoded: ByteString

val extensions: List<X509Extension>

The list of decoded extensions information.

nonCriticalExtensionOIDs

val nonCriticalExtensionOIDs: Set<String>

The OIDs for X.509 extensions which are not marked as critical.

val signature: ByteArray

The certificate or CRL signature.

signatureAlgorithm

val signatureAlgorithm: Algorithm

The signature algorithm for the certificate or CRL as Algorithm.

signatureAlgorithmOid

val signatureAlgorithmOid: String

The signature algorithm for the CRL as OID string.

val tbsCertificate: ByteArray

The bytes of TBS sequence.

Functions

getExtensionsSeq

fun getExtensionsSeq(): ASN1Sequence?

getExtensionValue

fun getExtensionValue(oid: String): ByteArray?

Gets the bytes of a X.509 extension.

fun toDataItem(): DataItem

fun toPem(): String

Encode this certificate or CRL in PEM format

fun verify(publicKey: EcPublicKey)

Checks if the certificate or CRL was signed with a given key.