org.bouncycastle.asn1.cms
Class RequesterCertificate

java.lang.Object
  org.bouncycastle.asn1.ASN1Object
      org.bouncycastle.asn1.cms.RequesterCertificate

All Implemented Interfaces:

org.bouncycastle.asn1.ASN1Encodable, org.bouncycastle.util.Encodable

public class RequesterCertificate

extends org.bouncycastle.asn1.ASN1Object

RFC 9763 sec. 4 CSR attribute value carrying the request. RequesterCertificate ::= SEQUENCE { certID IssuerAndSerialNumber, requestTime BinaryTime, locationInfo UniformResourceIdentifiers, signature BIT STRING } UniformResourceIdentifiers ::= SEQUENCE SIZE (1..MAX) OF URI URI ::= IA5String The field carries a digital signature, computed with the private key associated with the certificate identified by , over the concatenation of the DER-encoded and the DER-encoded (RFC 9763 sec. 4.1, " concatenation of DER-encoded IssuerAndSerialNumber and BinaryTime" — NOT a SEQUENCE wrapper). The locations in are HTTP(S) URIs or URIs (RFC 2397) from which the CA can retrieve the related certificate.

No AlgorithmIdentifier field accompanies the signature; the verifier must derive the signature algorithm from the related certificate itself (its SubjectPublicKeyInfo plus any policy the CA applies).

Identified by PKCSObjectIdentifiers.id_aa_relatedCertRequest (OID 1.2.840.113549.1.9.16.2.60); it is the value of that PKCS#9 attribute in a .

Constructor Summary

RequesterCertificate(IssuerAndSerialNumber certID, BinaryTime requestTime, java.lang.String[] locationInfo, byte[] signature)

Method Summary

IssuerAndSerialNumber	getCertID()
static RequesterCertificate	getInstance(java.lang.Object obj)
java.lang.String[]	getLocationInfo()
BinaryTime	getRequestTime()
org.bouncycastle.asn1.ASN1BitString	getSignature()
org.bouncycastle.asn1.ASN1Primitive	toASN1Primitive()

Methods inherited from class org.bouncycastle.asn1.ASN1Object

encodeTo, encodeTo, equals, getEncoded, getEncoded, hasEncodedTagValue, hashCode

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RequesterCertificate

public RequesterCertificate(IssuerAndSerialNumber certID,
                            BinaryTime requestTime,
                            java.lang.String[] locationInfo,
                            byte[] signature)

Method Detail

getInstance

public static RequesterCertificate getInstance(java.lang.Object obj)

getCertID

public IssuerAndSerialNumber getCertID()

getRequestTime

public BinaryTime getRequestTime()

getLocationInfo

public java.lang.String[] getLocationInfo()

Returns:

the URIs from which the related certificate can be retrieved, in the encoded order. Per RFC 9763 sec. 4 these are typically HTTP/HTTPS URLs or URIs (RFC 2397).

getSignature

public org.bouncycastle.asn1.ASN1BitString getSignature()

toASN1Primitive

public org.bouncycastle.asn1.ASN1Primitive toASN1Primitive()