The authority key identifier extension provides a means of identifying the particular public key used to sign a certificate. This extension would be used where an issuer has multiple signing keys (either due to multiple concurrent key pairs or due to changeover).
The ASN.1 syntax for this is:
AuthorityKeyIdentifier ::= SEQUENCE {
keyIdentifier [0] KeyIdentifier OPTIONAL,
authorityCertIssuer [1] GeneralNames OPTIONAL,
authorityCertSerialNumber [2] CertificateSerialNumber OPTIONAL
}
KeyIdentifier ::= OCTET STRING
Extension
| Modifier and Type | Field and Description |
|---|---|
| private KeyIdentifier | |
| public static final String | |
| private GeneralNames | |
| private SerialNumber | |
| private static final byte | |
| private static final byte | |
| private static final byte |
| Access | Constructor and Description |
|---|---|
| public | AuthorityKeyIdentifierExtension(KeyIdentifier
the KeyIdentifier associated with this extension. kid, GeneralNames the GeneralNames associated with this extension names, SerialNumber the CertificateSerialNumber associated with
this extension. sn)The default constructor for this extension. |
| public | AuthorityKeyIdentifierExtension(Boolean
true if the extension is to be treated as critical. critical, Object an array of DER encoded bytes of the actual value. value)Create the extension from the passed DER encoded value of the same. |
| Modifier and Type | Method and Description |
|---|---|
| public void | encode(DerOutputStream
the DerOutputStream to write the extension to. out)Overrides sun. Implements sun. Write the extension to the OutputStream. |
| private void | |
| public GeneralNames | |
| public byte[] | |
| public KeyIdentifier | |
| public String | |
| public SerialNumber | |
| public String |
| id | back to summary |
|---|---|
| private KeyIdentifier id | |
| NAME | back to summary |
|---|---|
| public static final String NAME | |
| names | back to summary |
|---|---|
| private GeneralNames names | |
| serialNum | back to summary |
|---|---|
| private SerialNumber serialNum | |
| TAG_ID | back to summary |
|---|---|
| private static final byte TAG_ID | |
| TAG_NAMES | back to summary |
|---|---|
| private static final byte TAG_NAMES | |
| TAG_SERIAL_NUM | back to summary |
|---|---|
| private static final byte TAG_SERIAL_NUM | |
| AuthorityKeyIdentifierExtension | back to summary |
|---|---|
| public AuthorityKeyIdentifierExtension(KeyIdentifier kid, GeneralNames names, SerialNumber sn) The default constructor for this extension. At least one parameter must be non null. Null parameters make the element optional (not present).
| |
| AuthorityKeyIdentifierExtension | back to summary |
|---|---|
| public AuthorityKeyIdentifierExtension(Boolean critical, Object value) throws IOException Create the extension from the passed DER encoded value of the same.
| |
| encode | back to summary |
|---|---|
| public void encode(DerOutputStream out) Overrides sun. Implements sun. Write the extension to the OutputStream.
| |
| encodeThis | back to summary |
|---|---|
| private void encodeThis() | |
| getAuthName | back to summary |
|---|---|
| public GeneralNames getAuthName() | |
| getEncodedKeyIdentifier | back to summary |
|---|---|
| public byte[] getEncodedKeyIdentifier() throws IOException Return the encoded key identifier, or null if not specified. | |
| getKeyIdentifier | back to summary |
|---|---|
| public KeyIdentifier getKeyIdentifier() | |
| getName | back to summary |
|---|---|
| public String getName() Overrides sun. Return the name of this extension.
| |
| getSerialNumber | back to summary |
|---|---|
| public SerialNumber getSerialNumber() | |
| toString | back to summary |
|---|---|
| public String toString() Overrides sun. Return the object as a string. | |