Package de.mtg.jzlint.lints.rfc

Class ExtSubjectKeyIdentifierMissingSubCert

java.lang.Object
de.mtg.jzlint.lints.rfc.ExtSubjectKeyIdentifierMissingSubCert
All Implemented Interfaces:
JavaLint
public class ExtSubjectKeyIdentifierMissingSubCert extends Object implements JavaLint
To facilitate certification path construction, this extension MUST appear in all conforming CA certificates, that is, all certificates including the basic constraints extension (Section 4.2.1.9) where the value of cA is TRUE. In conforming CA certificates, the value of the subject key identifier MUST be the value placed in the key identifier field of the authority key identifier extension (Section 4.2.1.1) of certificates issued by the subject of this certificate. Applications are not required to verify that key identifiers match when performing certification path validation. ... For end entity certificates, the subject key identifier extension provides a means for identifying certificates containing the particular public key used in an application. Where an end entity has obtained multiple certificates, especially from multiple CAs, the subject key identifier provides a means to quickly identify the set of certificates containing a particular public key. To assist applications in identifying the appropriate end entity certificate, this extension SHOULD be included in all end entity certificates.