Creating a Network of Trust Using X.509 Certifi cates - Implementing SSL/TLS Using Cryptography and PKI - page 265

{
char *idAtCountryName;
char *idAtStateOrProvinceName;
char *idAtLocalityName;
char *idAtOrganizationName;
char *idAtOrganizationalUnitName;
char *idAtCommonName;
}
name;
typedef struct
{
// TODO deal with the “utcTime” or “GeneralizedTime” choice.
time_t notBefore;
time_t notAfter;
}
validity_period;
typedef huge uniqueIdentifier;
typedef struct
{
algorithmIdentifier algorithm;
rsa_key rsa_public_key;
}
public_key_info;
typedef huge objectIdentifier;
typedef struct
{
int version;
huge serialNumber; // This can be much longer than a 4-byte long allows
signatureAlgorithmIdentifier signature;
name issuer;
validity_period validity;
name subject;
public_key_info subjectPublicKeyInfo;
uniqueIdentifier issuerUniqueId;
uniqueIdentifier subjectUniqueId;
int certificate_authority; // 1 if this is a CA, 0 if not
}
x509_certificate;
typedef struct
{
x509_certificate tbsCertificate;
signatureAlgorithmIdentifier algorithm;
huge signature_value;
}
signed_x509_certificate;