The authority key identifier extension provides a means of identifying the particular public key used to sign a certificate. This extension would be used where an issuer has multiple signing keys (either due to multiple concurrent key pairs or due to changeover).
The ASN.1 syntax for this is:
AuthorityKeyIdentifier ::= SEQUENCE { keyIdentifier [0] KeyIdentifier OPTIONAL, authorityCertIssuer [1] GeneralNames OPTIONAL, authorityCertSerialNumber [2] CertificateSerialNumber OPTIONAL } KeyIdentifier ::= OCTET STRING@author Amit Kapoor @author Hemma Prafullchandra @see Extension @see CertAttrSet
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|