0N/A<
TITLE>Certificate Attributes</
TITLE>
0N/A<
h2><
center>Certificate Attributes</
center></
h2>
0N/A<
font size=3><
center>July 1998</
font></
center>
0N/AIn JDK1.2 we provide an implementation of X.509 (version 3).
0N/AThe X509CertImpl class supports the following methods to
0N/Amanipulate the various attributes of a certificate:
0N/A Object get(String name)
0N/A void set(String name, Object value), and
0N/A void delete(String name)
0N/AA list of all the X.509 v3 Certificate attributes that can be manipulated
0N/Ais provided in the following table.
0N/AFor example, if you want to get the signature component of
0N/A // get the certificate object
0N/A // using the fully-qualified identifier
0N/A // using defined constants
0N/A<
td><
strong>Attribute</
strong></
td>
0N/A<
td><
strong>Fully-qualified identifier</
strong></
td>
0N/A<
td><
strong>Defined constants</
strong></
td>
0N/A<
td><
strong>Type of Object returned</
strong><
br>
0N/A<
td>signatureAlgorithm</
td>
0N/A<
td>tbsCertificate</
td>
0N/A<
td>X509CertInfo</
td>
0N/A<
td>CertificateVersion<
br>
0N/A<
td>serialNumber</
td>
0N/A<
td>CertificateSerialNumber<
br>
0N/A<
td>CertificateAlgorithmId<
br>
0N/A<
td>CertificateIssuerName<
br>
0N/A<
td>CertificateValidity<
br>
0N/A<
td>CertificateSubjectName<
br>
0N/A<
td>subjectPublicKeyInfo</
td>
0N/A<
td>CertificateX509Key<
br>
0N/A<
td>issuerUniqueID</
td>
0N/A<
td>CertificateIssuerUniqueIdentity<
br>
0N/A<
td>subjectUniqueID</
td>
0N/A<
td>CertificateSubjectUniqueIdentity<
br>
0N/A<
td>CertificateExtensions</
td>
0N/A<
caption>X.509 V3 certificate extensions</
caption>
0N/A<
td><
strong>Extension</
strong></
td>
0N/A<
td><
strong>Extension attribute identifier</
strong></
td>
0N/A<
td><
strong>Short form</
strong></
td>
0N/A<
td><
strong>Type of Object returned</
strong></
td>
0N/A<
td>Authority Key Identifier</
td>
0N/A<
td>AuthorityKeyIdentifierExtension</
td>
0N/A<
td>Subject Key Identifier</
td>
0N/A<
td>SubjectKeyIdentifierExtension</
td>
0N/A<
td>KeyUsageExtension</
td>
0N/A<
td>Private Key Usage Period</
td>
0N/A<
td>PrivateKeyUsageExtension</
td>
0N/A<
td>Policy Mappings</
td>
0N/A<
td>PolicyMappingsExtension</
td>
0N/A<
td>Subject Alternative Name</
td>
0N/A<
td>SubjectAlternativeNameExtension</
td>
0N/A<
td>Issuer Alternative Name</
td>
0N/A<
td>IssuerAlternativeNameExtension</
td>
0N/A<
td>Basic Constraints</
td>
0N/A<
td>BasicConstraintsExtension</
td>
0N/A<
td>Name Constraints</
td>
0N/A<
td>NameConstraintsExtension</
td>
0N/A<
td>Policy Constraints</
td>
0N/A<
td>PolicyConstraintsExtension</
td>
0N/A<
td>Netscape Certificate Type</
td>
0N/A<
td>NetscapeCertTypeExtension</
td>
0N/AExtensions can be added by implementing the
0N/ARegister the new extension using the OIDMap class.
0N/AThe following extensions are not currently supported from the
0N/A<
td>ObjectIdentifier</
td>
0N/A<
td>CertificatePolicies</
td>