| Certificate ::= SEQUENCE { |
| tbsCertificate TBSCertificate ({ x509_note_tbs_certificate }), |
| signatureAlgorithm AlgorithmIdentifier, |
| signature BIT STRING ({ x509_note_signature }) |
| } |
| |
| TBSCertificate ::= SEQUENCE { |
| version [ 0 ] Version DEFAULT, |
| serialNumber CertificateSerialNumber ({ x509_note_serial }), |
| signature AlgorithmIdentifier ({ x509_note_pkey_algo }), |
| issuer Name ({ x509_note_issuer }), |
| validity Validity, |
| subject Name ({ x509_note_subject }), |
| subjectPublicKeyInfo SubjectPublicKeyInfo, |
| issuerUniqueID [ 1 ] IMPLICIT UniqueIdentifier OPTIONAL, |
| subjectUniqueID [ 2 ] IMPLICIT UniqueIdentifier OPTIONAL, |
| extensions [ 3 ] Extensions OPTIONAL |
| } |
| |
| Version ::= INTEGER |
| CertificateSerialNumber ::= INTEGER |
| |
| AlgorithmIdentifier ::= SEQUENCE { |
| algorithm OBJECT IDENTIFIER ({ x509_note_OID }), |
| parameters ANY OPTIONAL ({ x509_note_params }) |
| } |
| |
| Name ::= SEQUENCE OF RelativeDistinguishedName |
| |
| RelativeDistinguishedName ::= SET OF AttributeValueAssertion |
| |
| AttributeValueAssertion ::= SEQUENCE { |
| attributeType OBJECT IDENTIFIER ({ x509_note_OID }), |
| attributeValue ANY ({ x509_extract_name_segment }) |
| } |
| |
| Validity ::= SEQUENCE { |
| notBefore Time ({ x509_note_not_before }), |
| notAfter Time ({ x509_note_not_after }) |
| } |
| |
| Time ::= CHOICE { |
| utcTime UTCTime, |
| generalTime GeneralizedTime |
| } |
| |
| SubjectPublicKeyInfo ::= SEQUENCE { |
| algorithm AlgorithmIdentifier, |
| subjectPublicKey BIT STRING ({ x509_extract_key_data }) |
| } |
| |
| UniqueIdentifier ::= BIT STRING |
| |
| Extensions ::= SEQUENCE OF Extension |
| |
| Extension ::= SEQUENCE { |
| extnid OBJECT IDENTIFIER ({ x509_note_OID }), |
| critical BOOLEAN DEFAULT, |
| extnValue OCTET STRING ({ x509_process_extension }) |
| } |