^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) Certificate ::= SEQUENCE {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) tbsCertificate TBSCertificate ({ x509_note_tbs_certificate }),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) signatureAlgorithm AlgorithmIdentifier,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) signature BIT STRING ({ x509_note_signature })
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) TBSCertificate ::= SEQUENCE {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) version [ 0 ] Version DEFAULT,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) serialNumber CertificateSerialNumber ({ x509_note_serial }),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) signature AlgorithmIdentifier ({ x509_note_pkey_algo }),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) issuer Name ({ x509_note_issuer }),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12) validity Validity,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) subject Name ({ x509_note_subject }),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) subjectPublicKeyInfo SubjectPublicKeyInfo,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) issuerUniqueID [ 1 ] IMPLICIT UniqueIdentifier OPTIONAL,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) subjectUniqueID [ 2 ] IMPLICIT UniqueIdentifier OPTIONAL,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) extensions [ 3 ] Extensions OPTIONAL
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) Version ::= INTEGER
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) CertificateSerialNumber ::= INTEGER
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23) AlgorithmIdentifier ::= SEQUENCE {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) algorithm OBJECT IDENTIFIER ({ x509_note_OID }),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) parameters ANY OPTIONAL ({ x509_note_params })
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28) Name ::= SEQUENCE OF RelativeDistinguishedName
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30) RelativeDistinguishedName ::= SET OF AttributeValueAssertion
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32) AttributeValueAssertion ::= SEQUENCE {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33) attributeType OBJECT IDENTIFIER ({ x509_note_OID }),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34) attributeValue ANY ({ x509_extract_name_segment })
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) Validity ::= SEQUENCE {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38) notBefore Time ({ x509_note_not_before }),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39) notAfter Time ({ x509_note_not_after })
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) Time ::= CHOICE {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43) utcTime UTCTime,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44) generalTime GeneralizedTime
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) SubjectPublicKeyInfo ::= SEQUENCE {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48) algorithm AlgorithmIdentifier,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49) subjectPublicKey BIT STRING ({ x509_extract_key_data })
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52) UniqueIdentifier ::= BIT STRING
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) Extensions ::= SEQUENCE OF Extension
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56) Extension ::= SEQUENCE {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57) extnid OBJECT IDENTIFIER ({ x509_note_OID }),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) critical BOOLEAN DEFAULT,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59) extnValue OCTET STRING ({ x509_process_extension })
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60) }