X509CertificatePolicyConstraintsExtension Class

Represents the X.509 Certificate Policy Constraints certificate extension. The policy constraints extension can be used in certificates issued to CAs.The policy constraints extension constrains path validation in two ways. It can be used to prohibit policy mapping or require that each certificate in a path contain an acceptable policy identifier.

Definition

Namespace: SysadminsLV.PKI.Cryptography.X509Certificates
Assembly: SysadminsLV.PKI (in SysadminsLV.PKI.dll) Version: 4.0.1
C#
public sealed class X509CertificatePolicyConstraintsExtension : X509Extension
Inheritance
X509Extension    X509CertificatePolicyConstraintsExtension

Constructors

X509CertificatePolicyConstraintsExtension(AsnEncodedData) Initializes a new instance of the X509CertificatePolicyConstraintsExtension class from an AsnEncodedData object.
X509CertificatePolicyConstraintsExtension(NullableInt32, NullableInt32) Initializes a new instance of the X509CertificatePolicyConstraintsExtension class from a minimum and maximum number of certificates with required certificate policy.

Properties

InhibitPolicyMapping Gets the number of additional certificates that may appear in the path before policy mapping is no longer permitted. For example, a value of one indicates that policy mapping may be processed in certificates issued by the subject of this certificate, but not in additional certificates in the path.
RequireExplicitPolicy Gets the number of additional certificates that may appear in the path before an explicit policy is required for the entire path. When an explicit policy is required, it is necessary for all certificates in the path to contain an acceptable policy identifier in the certificate policies extension. An acceptable policy identifier is the identifier of a policy required by the user of the certification path or the identifier of a policy that has been declared equivalent through policy mapping.

Extension Methods

ConvertExtension Converts default instance of X509Extension class to a specific extension implementation object.
(Defined by X509ExtensionExtensions)
Encode Encodes current extension to ASN.1-encoded byte array.
(Defined by X509ExtensionExtensions)

See Also