generateDsCertificate

suspend fun generateDsCertificate(iacaKey: AsymmetricKey.X509Certified, dsKey: EcPublicKey, subject: X500Name, serial: ASN1Integer, validFrom: Instant, validUntil: Instant): X509Cert

Generates a Document Signing certificate according to ISO/IEC 18013-5:2021 Annex B.1.4.

Return

a X509Cert with all the required extensions.

Parameters

iacaKey

IACA certificate and private key.

dsKey

the public part of the DS key.

subject

the value to use for subject, e.g. "CN=Test DS,C=ZZ".

serial

the serial number to use for the certificate.

validFrom

the point in time the certificate should be valid from.

validUntil

the point in time the certificate should be valid until.