Class X509Certificate

protected MapExtension>extensions

protected static final OID ID_DSA

protected static final OID ID_DSA_WITH_SHA1

protected static final OID ID_ECDSA_WITH_SHA1

protected static final OID ID_RSA

protected static final OID ID_RSA_WITH_MD2

protected static final OID ID_RSA_WITH_MD5

protected static final OID ID_RSA_WITH_SHA1

protected OID algId

protected byte[] algVal

protected byte[] encoded

protected X500DistinguishedName issuer

protected BitString issuerUniqueId

protected Date notAfter

protected Date notBefore

protected BigInteger serialNo

protected OID sigAlgId

protected byte[] sigAlgVal

protected byte[] signature

protected X500DistinguishedName subject

protected PublicKey subjectKey

protected BitString subjectUniqueId

protected byte[] tbsCertBytes

protected int version

protected X509Certificate()

The basic constructor. Object is special, because it has no superclass, so there is no call to super().

public X509Certificate(InputStream encoded)
            throws CertificateException,
                   IOException

Create a new X.509 certificate from the encoded data. The input data are expected to be the ASN.1 DER encoding of the certificate.

Parameters:

encoded - The encoded certificate data.

Throws:

IOException - If the certificate cannot be read, possibly from a formatting error.

CertificateException - If the data read is not an X.509 certificate.

public void checkValidity()
            throws CertificateExpiredException,
                   CertificateNotYetValidException

Overrides:

checkValidity in interface X509Certificate

public void checkValidity(Date date)
            throws CertificateExpiredException,
                   CertificateNotYetValidException

Overrides:

checkValidity in interface X509Certificate

public boolean equals(Object other)

Determine whether this Object is semantically equal to another Object.

There are some fairly strict requirements on this method which subclasses must follow:

• It must be transitive. If a.equals(b) and b.equals(c), then a.equals(c) must be true as well.
• It must be symmetric. a.equals(b) and b.equals(a) must have the same value.
• It must be reflexive. a.equals(a) must always be true.
• It must be consistent. Whichever value a.equals(b) returns on the first invocation must be the value returned on all later invocations.
• a.equals(null) must be false.
• It must be consistent with hashCode(). That is, a.equals(b) must imply a.hashCode() == b.hashCode(). The reverse is not true; two objects that are not equal may have the same hashcode, but that has the potential to harm hashing performance.

This is typically overridden to throw a ClassCastException if the argument is not comparable to the class performing the comparison, but that is not a requirement. It is legal for a.equals(b) to be true even though a.getClass() != b.getClass(). Also, it is typical to never cause a NullPointerException.

In general, the Collections API (java.util) use the equals method rather than the == operator to compare objects. However, IdentityHashMap is an exception to this rule, for its own good reasons.

The default implementation returns this == o.

Overrides:

equals in interface Certificate

Parameters:

Returns:

whether this Object is semantically equal to another

See Also:

Object.hashCode()

public int getBasicConstraints()

Overrides:

getBasicConstraints in interface X509Certificate

public Set getCriticalExtensionOIDs()

Specified by:

getCriticalExtensionOIDs in interface X509Extension

public byte[] getEncoded()
            throws CertificateEncodingException

Overrides:

getEncoded in interface Certificate

public List getExtendedKeyUsage()
            throws CertificateParsingException

Overrides:

getExtendedKeyUsage in interface X509Certificate

public Extension getExtension(OID oid)

Returns the extension object for the given object identifier.

Specified by:

getExtension in interface GnuPKIExtension

Parameters:

oid - The OID of the extension to get.

Returns:

The extension, or null if there is no such extension.

public byte[] getExtensionValue(String oid)

Specified by:

getExtensionValue in interface X509Extension

public Collection<E> getExtensions()

Specified by:

getExtensions in interface GnuPKIExtension

public Collection> getIssuerAlternativeNames()
            throws CertificateParsingException

Overrides:

getIssuerAlternativeNames in interface X509Certificate

public Principal getIssuerDN()

Overrides:

getIssuerDN in interface X509Certificate

public boolean[] getIssuerUniqueID()

Overrides:

getIssuerUniqueID in interface X509Certificate

public X500Principal getIssuerX500Principal()

Overrides:

getIssuerX500Principal in interface X509Certificate

public boolean[] getKeyUsage()

Overrides:

getKeyUsage in interface X509Certificate

public Set getNonCriticalExtensionOIDs()

Specified by:

getNonCriticalExtensionOIDs in interface X509Extension

public Date getNotAfter()

Overrides:

getNotAfter in interface X509Certificate

public Date getNotBefore()

Overrides:

getNotBefore in interface X509Certificate

public PublicKey getPublicKey()

Overrides:

getPublicKey in interface Certificate

public BigInteger getSerialNumber()

Overrides:

getSerialNumber in interface X509Certificate

public String getSigAlgName()

Overrides:

getSigAlgName in interface X509Certificate

public String getSigAlgOID()

Overrides:

getSigAlgOID in interface X509Certificate

public byte[] getSigAlgParams()

Overrides:

getSigAlgParams in interface X509Certificate

public byte[] getSignature()

Overrides:

getSignature in interface X509Certificate

public Collection> getSubjectAlternativeNames()
            throws CertificateParsingException

Overrides:

getSubjectAlternativeNames in interface X509Certificate

public Principal getSubjectDN()

Overrides:

getSubjectDN in interface X509Certificate

public boolean[] getSubjectUniqueID()

Overrides:

getSubjectUniqueID in interface X509Certificate

public X500Principal getSubjectX500Principal()

Overrides:

getSubjectX500Principal in interface X509Certificate

public byte[] getTBSCertificate()
            throws CertificateEncodingException

Overrides:

getTBSCertificate in interface X509Certificate

public int getVersion()

Overrides:

getVersion in interface X509Certificate

public boolean hasUnsupportedCriticalExtension()

Specified by:

hasUnsupportedCriticalExtension in interface X509Extension

public String toString()

Convert this Object to a human-readable String. There are no limits placed on how long this String should be or what it should contain. We suggest you make it as intuitive as possible to be able to place it into System.out.println() and such.

It is typical, but not required, to ensure that this method never completes abruptly with a RuntimeException.

This method will be called when performing string concatenation with this object. If the result is null, string concatenation will instead use "null".

The default implementation returns getClass().getName() + "@" + Integer.toHexString(hashCode()).

Overrides:

toString in interface Certificate

Returns:

the String representing this Object, which may be null

See Also:

getClass(), Object.hashCode(), Class.getName(), Integer.toHexString(int)

public void verify(PublicKey key)
            throws CertificateException,
                   NoSuchAlgorithmException,
                   InvalidKeyException,
                   NoSuchProviderException,
                   SignatureException

Overrides:

verify in interface Certificate

public void verify(PublicKey key,
                   String provider)
            throws CertificateException,
                   NoSuchAlgorithmException,
                   InvalidKeyException,
                   NoSuchProviderException,
                   SignatureException

Overrides:

verify in interface Certificate