X509CertificateExtension
As per RFC5280:
Extension ::= SEQUENCE {
extnID OBJECT IDENTIFIER,
critical BOOLEAN DEFAULT FALSE,
extnValue OCTET STRING
-- contains the DER encoding of an ASN.1 value
-- corresponding to the extension type identified
-- by extnID
}Content copied to clipboard
Properties
Link copied to clipboard
Sensible interpretation of rawCritical:
Link copied to clipboard
Link copied to clipboard
Some production certificates have illegal boolean encoding, as in: correct tag, correct length, containing a single byte that is neither 0x00 nor 0xFF. X509CertificateExtension treats those as follows: