SysadminsLV.PKI.Cryptography.X509Certificates Namespace

Contains classes and enumerations to work with X.509 certificate requests.

Classes

KeyProviderInfo Represents private key provider and container information.
OidMapping Represents an object identifier (OID) mapping. OID mapping is used to map external OID from foreign domain to its equivalent in the subject domain.

OID mapping is usually used in Certificate and Application Policies Mappings certificate extensions.

OidMappingCollection Represents a collection of OidMapping objects.
SafeCRLHandleContext

SafeCRLHandleContext provides a SafeHandle class for an X509CRL2 certificate revocation list context as stored in its handle. This can be used instead of the raw IntPtr to avoid races with the garbage collector, ensuring that the X509Certificate object is not cleaned up from underneath you while you are still using the handle pointer.

This safe handle type represents a native CRL_CONTEXT.

A SafeCRLHandleContext for an X509CRL2 can be obtained by calling the GetSafeContext(X509CRL2) extension method.

SafeCTLHandleContext

SafeCTLHandleContext provides a SafeHandle class for an X509CertificateTrustList context. This can be used instead of the raw IntPtr to avoid races with the garbage collector, ensuring that the X509Certificate object is not cleaned up from underneath you while you are still using the handle pointer.

This safe handle type represents a native CTL_CONTEXT.

A SafeCTLHandleContext for an X509CTL can be obtained by calling the GetSafeContext(X509CertificateTrustList) extension method.

X500DistinguishedNameExtensions Contains extension methods for X500DistinguishedName class.
X500RdnAttribute Represents X.500 Distinguished Name relative attribute.
X500RdnAttributeCollection Represents a collection of X500RdnAttribute objects. For display purposes RDN attributes are stored in this collection in reverse order than they stored in binary form.
X509AlternativeName Represents a single alternative name used in X509SubjectAlternativeNamesExtension and X509IssuerAlternativeNamesExtension classes. This class supports all alternative name types defined in RFC 5280 and supports two Microsoft proprietary alternative names: Guid and User Principal Name (UPN).
X509AlternativeNameCollection Represents a collection of X509AlternativeName objects.
X509ApplicationPoliciesExtension Represents a Microsoft's proprietary Application Policies extension which is another implementation of Enhanced Key Usage extension.
X509ApplicationPolicyConstraintsExtension Represents the X.509 Application Policy Constraints certificate extension. The policy constraints extension can be used in certificates issued to CAs.The policy constraints extension constrains path validation in two ways. It can be used to prohibit policy mapping or require that each certificate in a path contain an acceptable policy identifier.
X509ApplicationPolicyMappingsExtension Represents application policy mappings certificate extension.
X509ArchiveCutoffExtension Represents X.509 Archive Cutoff extension which is first defined in RFC2560.
X509AuthorityInformationAccessExtension Defines Authority Information Access extension (AIA). This extension is used by certificate chaining engine to build certificate chain (retrieve issuer certificate) and/or to check current certificate revocation status by using Online Certificate Status Protocol (OCSP).
X509AuthorityKeyIdentifierExtension Represents Authority Key Identifier extension. The authority key identifier extension provides a means of identifying the public key corresponding to the private key used to sign a certificate.
X509CAVersionExtension Represents CA Version extension that describes the CA certificate and CA private key index used in CA certificate and when signing CRLs.
X509CEPEnrollmentPropertyInfo Represents CEP enrollment property information when the certificate was requested by using Certificate Enrollment Web Services ([MS-XCEP] and [MS-WSTEP]).
X509Certificate2CollectionExtensions Contains extension methods for X509Certificate2Collection class.
X509Certificate2Extensions Contains extension methods for X509Certificate2 class.
X509CertificateBuilder Represents a version 3 X.509 certificate generator class. This class is intended to generate in-memory certificates without having to install them in certificate store.
X509CertificateContextProperty Represents certificate context property object in the certificate store.
X509CertificateContextPropertyCollection Represents a collection of X509CertificateContextProperty objects.
X509CertificatePoliciesExtensionX509CertificatePoliciesExtension represents a X.509 Certificate Policies extension. The certificate policies extension contains a sequence of one or more policy information terms, each of which consists of an object identifier (OID) and optional qualifiers.
X509CertificatePolicy Represents a single certificate policy which consists of an object identifier (OID) and optional qualifiers.
X509CertificatePolicyCollection Represents a collection of X509CertificatePolicy objects.
X509CertificatePolicyConstraintsExtension Represents the X.509 Certificate Policy Constraints certificate extension. The policy constraints extension can be used in certificates issued to CAs.The policy constraints extension constrains path validation in two ways. It can be used to prohibit policy mapping or require that each certificate in a path contain an acceptable policy identifier.
X509CertificatePolicyMappingsExtension Represents certificate policy mappings certificate extension.
X509CertificateRequest This class represents single PKCS#10 certificate request.
X509CertificateRequestCmc The X509CertificateRequestCmc class represents a CMC (Certificate Management Message over CMS) certificate request. A CMC request is always wrapped by a PKCS #7 certificate message syntax (CMS) object.
X509CertificateRequestPkcs10 Represents a managed PKCS #10 request.
X509CertificateTemplateExtension Defines Microsoft proprietary X.509 extension that represents certificate template extension used by Enterprise CA to store certificate template information. This extension is used by CAs and certificate autoenrollment to perform certificate-based renewals.
X509CertificateTrustList Represents a Microsoft Certificate Trust List (CTL) object.
X509CertificateTrustListBuilder Contains properties and methods used to create and sign X.509 certificate trust list.
X509CertificateTrustListEntry Represents a X.509 certificate trust list (CTL) entry element. Generally, this elements describes the certificate in the trust list.
X509CertificateTrustListEntryCollection Represents a collection of X509CertificateTrustListEntry objects.
X509CertificateTrustListExtensions Contains extension methods for X509CertificateTrustList
X509CRL2 Provides methods that help you use X.509 certificate revocation lists (CRL).
X509CRL2Collection Represents a collection of X509CRL2 objects.
X509CRL2Extensions 
X509CrlBuilder Represents X.509 certificate revocation list (CRL) generator class.
X509CRLDistributionPointsExtension Defines CRL Distribution Points (CDP) extension. This extension is used by a certificate chaining engine to validate the certificate revocation status. Normally, this extension contains URLs to a issuer CRL locations.
X509CRLEntry Represents a CRL entry of certificate revocation list that contains information about revoked certificate.
X509CRLEntryCollection Represents a collection of X509CRLEntry objects.
X509CRLNumberExtension Represents a CRL Number certificate revocation list extension.
X509CRLReferenceExtension Defines the id-pkix-ocsp-crl extension (defined in RFC2560). This class cannot be inherited.
X509CrossCertificateDistributionPointsExtension Represents Cross-Certificate Distribution Points certificate extension. The cross certificate distribution point (Cross-CDP) extension identifies where cross certificates related to a particular certificate can be obtained and how often that location is updated. Windows XP and later operating systems use this extension for the discovery of cross-certificates that might be used during the path discovery and chain building process.
X509CTPreCertificatePoisonExtension Represents an X.509 Certificate Transparency Pre-certificate poison extension.
X509DistributionPoint Represents a single DistributionPoint element of CRL Distribution Points certificate extension.
X509EnrollmentPropertyInfo Represents certificate enrollment information when the certificate is pending for CA manager approval. This information is used for enrollment API to determine request status and install issued certificate when request is approved.
X509ExtensionCollectionExtensions Contains extension methods for X509ExtensionCollection class.
X509ExtensionExtensions Contains extension methods for X509Extension class.
X509ExtensionOid Contains OIDs for most commonly used X.509 certificate and certificate revocation list extensions.
X509FreshestCRLExtension Defines Freshest or Delta CRL (certificate revocation list) extension. This extension is used by a certificate chaining engine to locate Delta CRL locations.
X509IssuerAlternativeNamesExtensionX509IssuerAlternativeNamesExtension represents a X.509 issuer alternative names extension. The issuer alternative name extension allows identities to be bound to the issuer of the certificate. Issuer alternative names are not processed as part of the certification path validation algorithm. That is, issuer alternative names are not used in name chaining and name constraints are not enforced.
X509IssuingDistributionPointsExtension Represents an X.509 Issuing Distribution Points (IDP) CRL extension.
X509NameConstraintsExtension The name constraints extension, which MUST be used only in a CA certificate, indicates a name space within which all subject names in subsequent certificates in a certification path MUST be located. Restrictions apply to the subject distinguished name and apply to subject alternative names. Restrictions apply only when the specified name form is present. If no name of the type is in the certificate, the certificate is acceptable. More details about Name constraints extension processing: RFC 5280.
X509NextCRLPublishExtension Defines the date and time at which the certification authority schedules new CRL publication.

Unlike Next Update field in the X.509 certificate revocation list (CRL) that specifies the ultimate validity of the CRL, this extension provides information when CA schedules CRL update which may occur prior to CRL expiration. This allows to fetch new CRL timely.

X509NonceExtension Defines the id-pkix-ocsp-nonce extension (defined in RFC2560). This class cannot be inherited.
X509NtdsSecurityExtension Represents a Microsoft proprietary Security Identifier (SID) extension. KB5014754 for more information.
X509PolicyQualifier Represents a certificate policy qualifier as specified in the RFC 5280.

Certificate policy qualifier may be either an URL to a online policy repository or textual policy information.

X509PolicyQualifierCollection Represents a collection of X509PolicyQualifier objects.
X509PublishedCrlLocationsExtension Defines Published CRL Locations extension. This extension is included in CRLs and is used by a certification authority to provide information about CRL publication location in Active Directory.
X509ServiceLocatorExtension Defines the id-pkix-ocsp-service-locator extension (defined in RFC2560). This class cannot be inherited.
X509SubjectAlternativeNamesExtensionX509SubjectAlternativeNamesExtension represents a X.509 alternative names extension. The subject alternative name extension allows identities to be bound to the subject of the certificate. These identities may be included in addition to or in place of the identity in the subject field of the certificate.

Enumerations

AuthorityKeyIdentifierType Contains enumeration of components included in the Authority Key Identifier (AKI) certificate extension.

This enumeration has a FlagsAttribute attribute that allows a bitwise combination of its member values.

CertificateStoreObjectAccessStateEnum Identifies the access state to a certificate store object.
IssuingDistributionPointScope Represents an X.509 Issuing Distribution Point scope. Only one of choice values can be enabled in IDP extension.
X509AlternativeNamesEnum Contains alternative name enumeration used by Subject Alternative Names extension.
X509CertificatePropertyType Defines the list of possible certificate context properties when the certificate is placed in the Certificate Store.
X509CertificateRequestType Defines certificate request formats. Currently only PKCS10 and CMC formats are defined.
X509CrlType Represents certificate revocation list types.
X509KeySpecFlags An X509KeySpecFlags enumeration value that specifies the supported key operations.

This enumeration has a FlagsAttribute attribute that allows a bitwise combination of its member values.

X509PolicyQualifierType The X509PolicyQualifierType enumeration type specifies the type of qualifier applied to a certificate policy
X509RevocationReasonFlag Represents certificate revocation flags. This enumeration is used by X509DistributionPoint and X509IssuingDistributionPointsExtension types.

This enumeration has a FlagsAttribute attribute that allows a bitwise combination of its member values.

X509RevocationReasons Represents certificate revocation reasons.