Class SignedCertificateTimestampList

java.lang.Object
org.bouncycastle.cert.ct.SignedCertificateTimestampList
public class SignedCertificateTimestampList extends Object
RFC 6962 (CT v1) SignedCertificateTimestampList: the TLS-encoded structure carried inside the embedded-SCT certificate extension and the OCSP SCT-list extension. 
    opaque SerializedSCT<1..2^16-1>;

    struct {
        SerializedSCT sct_list<1..2^16-1>;
    } SignedCertificateTimestampList;
The list bytes — i.e. what this class consumes — are the unwrapped contents of the extension's OCTET STRING value (the bytes returned by Extension.getExtnValue().getOctets()), not the OCTET STRING header itself.

For RFC 9162 (CT v2), the analogous list type is TransItemList; the two formats are not interchangeable.

See Also:
  • X509ObjectIdentifiers.id_ce_ct_embeddedSCTList
  • X509ObjectIdentifiers.id_ocsp_ct_sctList

  • Constructor Details

  • Method Details

    • getInstance

      public static SignedCertificateTimestampList getInstance(byte[] encoded)
      Decode a list from its TLS wire form (the bytes of the extension value's OCTET STRING contents).

    • fromExtensions

      public static SignedCertificateTimestampList fromExtensions(org.bouncycastle.asn1.x509.Extensions extensions)
      Recover the v1 SCT list from the X509ObjectIdentifiers.id_ce_ct_embeddedSCTList certificate extension, if present. Returns null when the extension is absent.

    • getSCTs

      public List getSCTs()
      The decoded SCTs, in wire order.

    • size

      public int size()

    • getEncoded

      public byte[] getEncoded()
      Serialize the list to its TLS wire form (the bytes that would be carried as the OCTET STRING contents of the embedded-SCT or OCSP-SCT extension's extnValue).