Package org.bouncycastle.cert

package org.bouncycastle.cert

Basic support package for handling and creating X.509 certificates, CRLs, and attribute certificates.

Related Packages

Package	Description
org.bouncycastle.cert.bc	Lightweight (org.bouncycastle.crypto) operator implementations supporting the cert-side builders and holders in org.bouncycastle.cert.
org.bouncycastle.cert.cmp	Basic support package for handling and creating CMP (RFC 4210) certificate management messages.
org.bouncycastle.cert.crmf	Basic support package for handling and creating CRMF (RFC 4211) certificate request messages.
org.bouncycastle.cert.ct	Decoders for the embedded Signed Certificate Timestamp extensions defined by RFC 6962 (Certificate Transparency v1) and RFC 9162 (CT v2).
org.bouncycastle.cert.dane	DANE (DNS-based Authentication of Named Entities, RFC 6698) certificate fetching and SMIMEA-record helpers built on top of X509CertificateHolder.
org.bouncycastle.cert.jcajce	JCA extensions to the certificate building and processing package.
org.bouncycastle.cert.ocsp	Basic support package for handling and creating OCSP (RFC 2560) online certificate status requests.
org.bouncycastle.cert.path	Lightweight certificate-path-validation API for X509CertificateHolder chains, analogous to java.security.cert.CertPathValidator but without the JCA dependency.
org.bouncycastle.cert.plants	Merkle Tree Certificate types per draft-ietf-plants-merkle-tree-certs.
org.bouncycastle.cert.selector	Specialised Selector classes for certificates, CRLs, and attribute certificates.

Class	Description
AttributeCertificateHolder	The Holder object.
AttributeCertificateIssuer	Carrying class for an attribute certificate issuer.
CertException	General checked Exception thrown in the cert package and its sub-packages.
CertIOException	General IOException thrown in the cert package and its sub-packages.
CertRuntimeException
DeltaCertificateTool	General tool for handling the extension described in: https://datatracker.ietf.org/doc/draft-bonnell-lamps-chameleon-certs/
RelatedCertificateDescriptorBuilder	Fluent builder for the RelatedCertificateDescriptor structure defined by draft-ietf-lamps-certdiscovery, plus the wrapping required to place it in a SubjectInfoAccess extension.
RelatedCertificateTool	Operator-style helpers for building and verifying the two wire-format pieces defined by RFC 9763 ("Related Certificates for Use in Multiple Authentications within a Protocol"): the RelatedCertificate certificate extension carried on an end-entity certificate (OID X509ObjectIdentifiers.id_pe_relatedCert / Extension.relatedCertificate), and the RequesterCertificate CSR attribute value the requester includes in the CSR to prove they hold the private key of the related certificate (attribute OID PKCSObjectIdentifiers.id_aa_relatedCertRequest).
X509AttributeCertificateHolder	Holding class for an X.509 AttributeCertificate structure.
X509CertificateHolder	Holding class for an X.509 Certificate structure.
X509CertificateReviewer	Collects the problems found while decoding an X.509 certificate, instead of throwing on the first one, for diagnostic and reporting use (github #1508).
X509CertificateReviewer.Finding	A single problem found during review.
X509CertificateReviewer.Review	The outcome of a review: the list of findings, plus the recovered certificate when the structure decoded cleanly.
X509CertificateReviewer.Severity	The severity of a X509CertificateReviewer.Finding.
X509ContentVerifierProviderBuilder
X509CRLEntryHolder	Holding class for an X.509 CRL Entry structure.
X509CRLHolder	Holding class for an X.509 CRL structure.
X509ExtensionUtils	General utility class for creating calculated extensions using the standard methods.
X509v1CertificateBuilder	class to produce an X.509 Version 1 certificate.
X509v2AttributeCertificateBuilder	class to produce an X.509 Version 2 AttributeCertificate.
X509v2CRLBuilder	class to produce an X.509 Version 2 CRL.
X509v3CertificateBuilder	class to produce an X.509 Version 3 certificate.