Class MTCCertificationAuthority

java.lang.Object
org.bouncycastle.asn1.ASN1Object
org.bouncycastle.asn1.x509.MTCCertificationAuthority
All Implemented Interfaces:
ASN1Encodable, Encodable

public class MTCCertificationAuthority extends ASN1Object
ASN.1 structure for the id-pe-mtcCertificationAuthority extension defined in Section 5.5 of draft-ietf-plants-merkle-tree-certs:
MTCCertificationAuthority ::= SEQUENCE {
    logHash   AlgorithmIdentifier{DIGEST-ALGORITHM, {...}},
    sigAlg    AlgorithmIdentifier{SIGNATURE-ALGORITHM, {...}},
    minSerial INTEGER (0..mtcMaxSerial),
    maxSerial INTEGER (0..mtcMaxSerial)
}

logHash is the hash algorithm used by all issuance logs operated by this CA. sigAlg is the CA cosigner's signature algorithm. minSerial and maxSerial are the inclusive bounds of the cert serial range this CA is authorized for; per Section 6.1 of the draft a serial encodes the log number in its upper 16 bits and the entry index in the lower 48 bits (a 64-bit value), so the range can constrain either.