multipaz/org.multipaz.crypto/X509Cert

X509Cert

class X509Cert(val encodedCertificate: ByteArray)

A data type for a X509 certificate.

Parameters

encodedCertificate

the bytes of the X.509 certificate.

Constructors

X509Cert

constructor(encodedCertificate: ByteArray)

Types

Builder

class Builder(publicKey: EcPublicKey, signingKey: EcPrivateKey, signatureAlgorithm: Algorithm, serialNumber: ASN1Integer, subject: X500Name, issuer: X500Name, validFrom: Instant, validUntil: Instant)

Builder for X.509 certificate.

Companion

object Companion

Properties

authorityKeyIdentifier

val authorityKeyIdentifier: ByteArray?

The authority key identifier (OID 2.5.29.35), or null if not present in the certificate.

criticalExtensionOIDs

val criticalExtensionOIDs: Set<String>

The OIDs for X.509 extensions which are marked as critical.

ecPublicKey

val ecPublicKey: EcPublicKey

The public key in the certificate, as an Elliptic Curve key.

encodedCertificate

val encodedCertificate: ByteArray

extensions

val extensions: List<X509Extension>

The list of decoded extensions information.

issuer

val issuer: X500Name

The issuer of the certificate.

javaX509Certificate

val X509Cert.javaX509Certificate: <Error class: unknown class>

The Java X509 certificate from the encoded certificate data.

keyUsage

val keyUsage: Set<X509KeyUsage>

The key usage (OID 2.5.29.15) or the empty set if not present.

nonCriticalExtensionOIDs

val nonCriticalExtensionOIDs: Set<String>

The OIDs for X.509 extensions which are not marked as critical.

serialNumber

val serialNumber: ASN1Integer

The certificate serial number.

signature

val signature: ByteArray

The certificate signature.

signatureAlgorithm

val signatureAlgorithm: Algorithm

The signature algorithm for the certificate.

signatureAlgorithmOid

val signatureAlgorithmOid: String

The signature algorithm for the certificate as OID string.

subject

val subject: X500Name

The subject of the certificate.

subjectKeyIdentifier

val subjectKeyIdentifier: ByteArray?

The subject key identifier (OID 2.5.29.14), or null if not present in the certificate.

tbsCertificate

val tbsCertificate: ByteArray

The bytes of TBSCertificate.

validityNotAfter

val validityNotAfter: Instant

The point in time where the certificate is valid until.

validityNotBefore

val validityNotBefore: Instant

The point in time where the certificate is valid from.

version

val version: Int

The certificate version.

Functions

equals

open operator override fun equals(other: Any?): Boolean

getExtensionValue

fun getExtensionValue(oid: String): ByteArray?

Gets the bytes of a X.509 extension.

hashCode

open override fun hashCode(): Int

toDataItem

fun toDataItem(): DataItem

Gets an DataItem with the encoded X.509 certificate.

toPem

fun toPem(): String

Encode this certificate in PEM format

verify

fun verify(publicKey: EcPublicKey)

Checks if the certificate was signed with a given key.