Victorian Electronic Records Strategy


VERS STORY	STANDARD	ASSESSMENT	PROJECTS	DIGITAL ARCHIVE	TRAINING	TOOLKIT	PUBLICATIONS

Introduction

Standard
(Version 1)
  Specification 1
  Specification 2
  Specification 3

Standard
(Version 2)
  Specification 1
  Specification 2
  Specification 3
  Specification 4
  Specification 5
  Advice 9
  Advice 10
  Advice 11
  Advice 12
  Advice 13
  Advice 14

Home > Standard > Standard (Version 2) >Specification 3 > Representation of certificates

5.6 Representation of certificates

All certificates must be X.509 certificates [X509] (an alternative and more accessible description of the information in X.509 can be found in RFC 2459 [RFC2459]).

Certificates are represented in their Distinguished Encoding Rules (DER) encoded form specified in the ASN.1 Basic Encoding Rules [X690]. An introduction to this form can be found in RFC 2459. Note that the certificates must NOT be represented in an encrypted form such as those defined in PKCS #7 (also known as a '.p78' form), or PKCS #12 (also known as a '.pfx' or '.p12' form). The private key of the signer must never be contained in the VEO.

The DER encoding is a binary form, so each certificate must be encoded into Base64 [Base64]

printer friendly