ExtendedKeyUsageExtension

Class Overview

This class defines the Extended Key Usage Extension, which indicates one or more purposes for which the certified public key may be used, in addition to or in place of the basic purposes indicated in the key usage extension field. This field is defined as follows:

id-ce-extKeyUsage OBJECT IDENTIFIER ::= {id-ce 37}

ExtKeyUsageSyntax ::= SEQUENCE SIZE (1..MAX) OF KeyPurposeId

KeyPurposeId ::= OBJECT IDENTIFIER

Key purposes may be defined by any organization with a need. Object identifiers used to identify key purposes shall be assigned in accordance with IANA or ITU-T Rec. X.660 | ISO/IEC/ITU 9834-1.

This extension may, at the option of the certificate issuer, be either critical or non-critical.

If the extension is flagged critical, then the certificate MUST be used only for one of the purposes indicated.

If the extension is flagged non-critical, then it indicates the intended purpose or purposes of the key, and may be used in finding the correct key/certificate of an entity that has multiple keys/certificates. It is an advisory field and does not imply that usage of the key is restricted by the certification authority to the purpose indicated. Certificate using applications may nevertheless require that a particular purpose be indicated in order for the certificate to be acceptable to that application.

If a certificate contains both a critical key usage field and a critical extended key usage field, then both fields MUST be processed independently and the certificate MUST only be used for a purpose consistent with both fields. If there is no purpose consistent with both fields, then the certificate MUST NOT be used for any purpose.

Summary

[Expand] Inherited Fields
From class sun.security.x509.Extension protected boolean critical protected ObjectIdentifier extensionId protected byte[] extensionValue

[Expand] Inherited Methods
From class sun.security.x509.Extension void encode(DerOutputStream out) Write the extension to the DerOutputStream. boolean equals(Object other) Compares this Extension for equality with the specified object. ObjectIdentifier getExtensionId() Returns the ObjectIdentifier of the extension. byte[] getExtensionValue() Returns the extension value as an byte array for further processing. int hashCode() Returns a hashcode value for this Extension. boolean isCritical() Returns true if extension is critical. String toString() Returns the Extension in user readable form.
From class java.lang.Object Object clone() Creates and returns a copy of this object. boolean equals(Object obj) Indicates whether some other object is "equal to" this one. void finalize() Called by the garbage collector on an object when garbage collection determines that there are no more references to the object. final Class<?> getClass() Returns the runtime class of this Object. int hashCode() Returns a hash code value for the object. final void notify() Wakes up a single thread that is waiting on this object's monitor. final void notifyAll() Wakes up all threads that are waiting on this object's monitor. String toString() Returns a string representation of the object. final void wait() Causes the current thread to wait until another thread invokes the notify() method or the notifyAll() method for this object. final void wait(long timeout, int nanos) Causes the current thread to wait until another thread invokes the notify() method or the notifyAll() method for this object, or some other thread interrupts the current thread, or a certain amount of real time has elapsed. final void wait(long timeout) Causes the current thread to wait until either another thread invokes the notify() method or the notifyAll() method for this object, or a specified amount of time has elapsed.
From interface sun.security.x509.CertAttrSet abstract void delete(String name) Deletes an attribute value from this CertAttrSet. abstract void encode(OutputStream out) Encodes the attribute to the output stream in a format that can be parsed by the decode method. abstract Object get(String name) Gets an attribute value for this CertAttrSet. abstract Enumeration<T> getElements() Returns an enumeration of the names of the attributes existing within this attribute. abstract String getName() Returns the name (identifier) of this CertAttrSet. abstract void set(String name, Object obj) Sets an attribute value within this CertAttrSet. abstract String toString() Returns a short string describing this certificate attribute.