The CRL certificate issuer extension identifies the certificate issuer associated with an entry in an indirect CRL, i.e. a CRL that has the indirectCRL indicator set in its issuing distribution point extension. If this extension is not present on the first entry in an indirect CRL, the certificate issuer defaults to the CRL issuer. On subsequent entries in an indirect CRL, if this extension is not present, the certificate issuer for the entry is the same as that for the preceding entry.
If used by conforming CRL issuers, this extension is always critical. If an implementation ignored this extension it could not correctly attribute CRL entries to certificates. PKIX (RFC 5280) RECOMMENDS that implementations recognize this extension.
The ASN.1 definition for this is:
id-ce-certificateIssuer OBJECT IDENTIFIER ::= { id-ce 29 }
certificateIssuer ::= GeneralNames
Extension
| Modifier and Type | Field and Description |
|---|---|
| public static final String | |
| private GeneralNames |
| Access | Constructor and Description |
|---|---|
| public | CertificateIssuerExtension(GeneralNames
the certificate issuer, cannot be null or empty. issuer)Create a CertificateIssuerExtension containing the specified issuer name. |
| public | CertificateIssuerExtension(Boolean
true if the extension is to be treated as critical. critical, Object an array of DER encoded bytes of the actual value value)Create a CertificateIssuerExtension from the specified DER encoded value of the same. |
| Modifier and Type | Method and Description |
|---|---|
| public void | encode(DerOutputStream
the DerOutputStream to write the extension to out)Overrides sun. Implements sun. Write the extension to the OutputStream. |
| private void | |
| public String | |
| public GeneralNames | |
| public String | toString()
Overrides sun. Returns a printable representation of the certificate issuer. |
| NAME | back to summary |
|---|---|
| public static final String NAME | |
| names | back to summary |
|---|---|
| private GeneralNames names | |
| CertificateIssuerExtension | back to summary |
|---|---|
| public CertificateIssuerExtension(GeneralNames issuer) Create a CertificateIssuerExtension containing the specified issuer name. Criticality is automatically set to true.
| |
| CertificateIssuerExtension | back to summary |
|---|---|
| public CertificateIssuerExtension(Boolean critical, Object value) throws IOException Create a CertificateIssuerExtension from the specified DER encoded value of the same.
| |
| encode | back to summary |
|---|---|
| public void encode(DerOutputStream out) Overrides sun. Implements sun. Write the extension to the OutputStream.
| |
| encodeThis | back to summary |
|---|---|
| private void encodeThis() Encode this extension | |
| getName | back to summary |
|---|---|
| public String getName() Overrides sun. Return the name of this extension.
| |
| getNames | back to summary |
|---|---|
| public GeneralNames getNames() | |
| toString | back to summary |
|---|---|
| public String toString() Overrides sun. Returns a printable representation of the certificate issuer. | |