Skip to content

/AWS1/CL_ACPEXTENSIONS

Contains X.509 extension information for a certificate.

CONSTRUCTOR

IMPORTING

Optional arguments:

it_certificatepolicies TYPE /AWS1/CL_ACPPOLICYINFORMATION=>TT_CERTIFICATEPOLICYLIST TT_CERTIFICATEPOLICYLIST

Contains a sequence of one or more policy information terms, each of which consists of an object identifier (OID) and optional qualifiers. For more information, see NIST's definition of Object Identifier (OID).

In an end-entity certificate, these terms indicate the policy under which the certificate was issued and the purposes for which it may be used. In a CA certificate, these terms limit the set of policies for certification paths that include this certificate.

it_extendedkeyusage TYPE /AWS1/CL_ACPEXTENDEDKEYUSAGE=>TT_EXTENDEDKEYUSAGELIST TT_EXTENDEDKEYUSAGELIST

Specifies additional purposes for which the certified public key may be used other than basic purposes indicated in the KeyUsage extension.

io_keyusage TYPE REF TO /AWS1/CL_ACPKEYUSAGE /AWS1/CL_ACPKEYUSAGE

Defines one or more purposes for which the key contained in the certificate can be used. Default value for each option is false.

it_subjectalternativenames TYPE /AWS1/CL_ACPGENERALNAME=>TT_GENERALNAMELIST TT_GENERALNAMELIST

The subject alternative name extension allows identities to be bound to the subject of the certificate. These identities may be included in addition to or in place of the identity in the subject field of the certificate.

it_customextensions TYPE /AWS1/CL_ACPCUSTOMEXTENSION=>TT_CUSTOMEXTENSIONLIST TT_CUSTOMEXTENSIONLIST

Contains a sequence of one or more X.509 extensions, each of which consists of an object identifier (OID), a base64-encoded value, and the critical flag. For more information, see the Global OID reference database.


Queryable Attributes

CertificatePolicies

Contains a sequence of one or more policy information terms, each of which consists of an object identifier (OID) and optional qualifiers. For more information, see NIST's definition of Object Identifier (OID).

In an end-entity certificate, these terms indicate the policy under which the certificate was issued and the purposes for which it may be used. In a CA certificate, these terms limit the set of policies for certification paths that include this certificate.

Accessible with the following methods

Method Description
GET_CERTIFICATEPOLICIES() Getter for CERTIFICATEPOLICIES, with configurable default
ASK_CERTIFICATEPOLICIES() Getter for CERTIFICATEPOLICIES w/ exceptions if field has no
HAS_CERTIFICATEPOLICIES() Determine if CERTIFICATEPOLICIES has a value

ExtendedKeyUsage

Specifies additional purposes for which the certified public key may be used other than basic purposes indicated in the KeyUsage extension.

Accessible with the following methods

Method Description
GET_EXTENDEDKEYUSAGE() Getter for EXTENDEDKEYUSAGE, with configurable default
ASK_EXTENDEDKEYUSAGE() Getter for EXTENDEDKEYUSAGE w/ exceptions if field has no va
HAS_EXTENDEDKEYUSAGE() Determine if EXTENDEDKEYUSAGE has a value

KeyUsage

Defines one or more purposes for which the key contained in the certificate can be used. Default value for each option is false.

Accessible with the following methods

Method Description
GET_KEYUSAGE() Getter for KEYUSAGE

SubjectAlternativeNames

The subject alternative name extension allows identities to be bound to the subject of the certificate. These identities may be included in addition to or in place of the identity in the subject field of the certificate.

Accessible with the following methods

Method Description
GET_SUBJECTALTERNATIVENAMES() Getter for SUBJECTALTERNATIVENAMES, with configurable defaul
ASK_SUBJECTALTERNATIVENAMES() Getter for SUBJECTALTERNATIVENAMES w/ exceptions if field ha
HAS_SUBJECTALTERNATIVENAMES() Determine if SUBJECTALTERNATIVENAMES has a value

CustomExtensions

Contains a sequence of one or more X.509 extensions, each of which consists of an object identifier (OID), a base64-encoded value, and the critical flag. For more information, see the Global OID reference database.

Accessible with the following methods

Method Description
GET_CUSTOMEXTENSIONS() Getter for CUSTOMEXTENSIONS, with configurable default
ASK_CUSTOMEXTENSIONS() Getter for CUSTOMEXTENSIONS w/ exceptions if field has no va
HAS_CUSTOMEXTENSIONS() Determine if CUSTOMEXTENSIONS has a value