AlternativeNames

RFC 5280 {Subject||Issuer}AlternativeNames (SANs, IANs) container class constructed from a certificate's extensions (i.e. TbsCertificate.extensions filtered by OID). Hence, this class is not intended to be used for constructing SANs or IANs, but used to extract them from a certificate.

As this class performs some structural validations upon initialisation, it may throw various kinds of Throwables. These are not limited to Asn1Exceptions, which is why constructor invocation should be wrapped inside a runRethrowing block, as done in findSubjectAltNames and findIssuerAltNames.

See RFC 5280, Section 4.2.1.6 for details on the properties of this container class, as they are named accordingly.