Struct x509_parser::x509::TbsCertificate

pub struct TbsCertificate<'a> {
    pub version: u32,
    pub serial: BigUint,
    pub signature: AlgorithmIdentifier<'a>,
    pub issuer: X509Name<'a>,
    pub validity: Validity,
    pub subject: X509Name<'a>,
    pub subject_pki: SubjectPublicKeyInfo<'a>,
    pub issuer_uid: Option<UniqueIdentifier<'a>>,
    pub subject_uid: Option<UniqueIdentifier<'a>>,
    pub extensions: HashMap<Oid<'a>, X509Extension<'a>>,
    // some fields omitted
}

The sequence TBSCertificate contains information associated with the subject of the certificate and the CA that issued it.

RFC5280 definition:

  TBSCertificate  ::=  SEQUENCE  {
       version         [0]  EXPLICIT Version DEFAULT v1,
       serialNumber         CertificateSerialNumber,
       signature            AlgorithmIdentifier,
       issuer               Name,
       validity             Validity,
       subject              Name,
       subjectPublicKeyInfo SubjectPublicKeyInfo,
       issuerUniqueID  [1]  IMPLICIT UniqueIdentifier OPTIONAL,
                            -- If present, version MUST be v2 or v3
       subjectUniqueID [2]  IMPLICIT UniqueIdentifier OPTIONAL,
                            -- If present, version MUST be v2 or v3
       extensions      [3]  EXPLICIT Extensions OPTIONAL
                            -- If present, version MUST be v3
       }

Fields

version: u32

Raw encoding of the version: 0 for v1, 1 for v2, 2 for v3

serial: BigUint

signature: AlgorithmIdentifier<'a>

issuer: X509Name<'a>

validity: Validity

subject: X509Name<'a>

subject_pki: SubjectPublicKeyInfo<'a>

issuer_uid: Option<UniqueIdentifier<'a>>

subject_uid: Option<UniqueIdentifier<'a>>

extensions: HashMap<Oid<'a>, X509Extension<'a>>

Implementations

impl<'a> TbsCertificate<'a>

pub fn extensions(&self) -> &HashMap<Oid<'_>, X509Extension<'_>>

Get a reference to the map of extensions.

pub fn basic_constraints(&self) -> Option<(bool, &BasicConstraints)>

pub fn key_usage(&self) -> Option<(bool, &KeyUsage)>

pub fn extended_key_usage(&self) -> Option<(bool, &ExtendedKeyUsage<'_>)>

pub fn policy_constraints(&self) -> Option<(bool, &PolicyConstraints)>

pub fn inhibit_anypolicy(&self) -> Option<(bool, &InhibitAnyPolicy)>

pub fn policy_mappings(&self) -> Option<(bool, &PolicyMappings<'_>)>

pub fn subject_alternative_name(
    &self
) -> Option<(bool, &SubjectAlternativeName<'_>)>

pub fn name_constraints(&self) -> Option<(bool, &NameConstraints<'_>)>

pub fn is_ca(&self) -> bool

Returns true if certificate has basicConstraints CA:true

pub fn raw_serial(&self) -> &[u8]

Get the raw bytes of the certificate serial number

pub fn raw_serial_as_string(&self) -> String

Get a formatted string of the certificate serial number, separated by ':'

Trait Implementations

impl<'a> AsRef<[u8]> for TbsCertificate<'a>

fn as_ref(&self) -> &[u8]

Performs the conversion.

impl<'a> Debug for TbsCertificate<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> PartialEq<TbsCertificate<'a>> for TbsCertificate<'a>

fn eq(&self, other: &TbsCertificate<'a>) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &TbsCertificate<'a>) -> bool

This method tests for !=.

impl<'a> StructuralPartialEq for TbsCertificate<'a>