PdfCertificateCheck class
Namespace: PdfNetStack.Signing
Assembly: PdfNetStack.dll
Package: PdfNetStack
The checks made on one certificate of a chain.
public sealed class PdfCertificateCheckInheritance
Properties
Section titled “Properties”Certificate
Section titled “ Certificate”The certificate.
public X509Certificate2 Certificate { get; }Property Value
Section titled “Property Value”IsTrustAnchor
Section titled “ IsTrustAnchor”True for the trust anchor that ends the chain. Its validity, usage and revocation are taken as given.
public bool IsTrustAnchor { get; }Property Value
Section titled “Property Value”KeyUsage
Section titled “ KeyUsage”The certificate may be used for its role: key usage (digital signature or non-repudiation for a signer, certificate signing and the CA flag with its path length for a CA), the critical time stamping usage for a time stamp authority, and no critical extension the library does not understand.
public PdfCheckStatus KeyUsage { get; }Property Value
Section titled “Property Value”NameConstraints
Section titled “ NameConstraints”The certificate’s names (subject, alternative names, and email addresses in the subject when it has no alternative names) fall within the name constraints of the certificates above it, the trust anchor’s included. Passed when no constraint applies. A self-issued CA certificate inside the chain is not checked, as RFC 5280 says. Failed when a name cannot be read or judged against a constraint, and when a certificate above has constraints that cannot be read.
public PdfCheckStatus NameConstraints { get; }Property Value
Section titled “Property Value”Policies
Section titled “ Policies”The certificate policies the certificate asserts, as object identifiers; empty when it asserts none.
public IReadOnlyList<string> Policies { get; }Property Value
Section titled “Property Value”Problem
Section titled “ Problem”What did not pass, or null.
public string? Problem { get; }Property Value
Section titled “Property Value”QcStatements
Section titled “ QcStatements”The certificate’s qualified certificate statements, or null when it has none.
public PdfQcStatements? QcStatements { get; }Property Value
Section titled “Property Value”Revocation
Section titled “ Revocation”Revocation, from a verified OCSP response or CRL that is current at the validation time.
public PdfCheckStatus Revocation { get; }Property Value
Section titled “Property Value”RevocationSource
Section titled “ RevocationSource”Where the revocation answer came from, such as “OCSP (document security store)”.
public string? RevocationSource { get; }Property Value
Section titled “Property Value”RevocationTime
Section titled “ RevocationTime”When the certificate was revoked, when revocation data says it was.
public DateTimeOffset? RevocationTime { get; }Property Value
Section titled “Property Value”Validity
Section titled “ Validity”The validation time lies within the certificate’s validity period.
public PdfCheckStatus Validity { get; }