This specification is subject to these terms of use. Diese Spezifikation unterliegt diesen Nutzungsbedingungen.
Documentation is available for the following files: Org-eticore-et Org-eticore-payment Org-eticore-cvCertificates Org-eticore-tariff Org-eticore-moticsCopyProtection Org-eticore-ste Org-eticore-um Org-eticore-sam Org-eticore-common

Org-eticore-cvCertificates

Schema file name: cv-certificates.asn

Version: 3.0.0-rc.6

Index:

# AlgorithmIds

Identifies a list of cryptographic algorithms in which the key (subject of the certificate) may be used.

Tag: 0xA0

Type: SEQUENCE OF

Multiplicity Tag Element name Type name Documentation
[1, *] 0x06 algorithmId OBJECT IDENTIFIER Identifies a cryptographic algorithm in which the key (subject of the certificate) may be used.

# CertificateAuthorityReference

Subject from the certificate of the key used to sign this certificate.

Tag: 0x62

Type: RESTRICTION

Base type: Subject

# CertificateBody

Body of the certificate.

Tag: 0x7F4E

Type: SEQUENCE

Tag Element name Type name Optional Documentation
0x7F20 subject Subject no Name for an entity (e.g. a component) to which the public key contained in the certificate is assigned.
0x7F4C subjectAuthorisation SubjectAuthorisation no Restricts or designates the allowed usage and permissions of the key in the certificate.
0x5F25 certificateEffectiveTime CertificateEffectiveTime no Contains the time at which the validity of the certificate begins.
0x5F24 certificateExpirationTime CertificateExpirationTime no Contains the time at which the validity of the certificate ends.
0x62 certificateAuthorityReference CertificateAuthorityReference no Subject from the certificate of the key used to sign this certificate.
0x7F49 publicKeyParameters PublicKeyParameters no Contains the algorithm identifier, the public key and optionally the various domain parameters.
0x06 signatureAlgorithmId SignatureAlgorithmId no The object identifier of the signature algorithm.

# CertificateEffectiveTime

Contains the time at which the validity of the certificate begins.

Tag: 0x5F25

Type: RESTRICTION

Base type: UnixTime

# CertificateExpirationTime

Contains the time at which the validity of the certificate ends.

Tag: 0x5F24

Type: RESTRICTION

Base type: UnixTime

# CommandHeaders

Contains a list of headers CLA | INS | P1 | P2 of a command APDU which is allowed to use the key.

Tag: 0xA1

Type: SEQUENCE OF

Multiplicity Tag Element name Type name Documentation
[1, *] 0x04 commandHeader OCTET STRING Contains the Header CLA | INS | P1 | P2 of a command APDU which is allowed to use the key.

# CvCertificate

Card-verifiable certificate.

Tag: 0x7F21

Type: SEQUENCE

Tag Element name Type name Optional Documentation
0x7F4E certificateBody CertificateBody no Body of the certificate.
0x5F37 signature Signature no Signature over the certificate body including tag and length according to the algorithm SignatureAlgorithmID.

# PublicKeyParameters

Contains the algorithm identifier, the public key and, optionally, the various domain parameters.

Tag: 0x7F49

Type: SEQUENCE

Tag Element name Type name Optional Documentation
0x06 algorithmId OBJECT IDENTIFIER no Object identifier referring to the public key format and usage. Public key components are contained in the subsequent context-specific data objects.
... ... yes

# Signature

Signature over the certificate body including tag and length according to the algorithm SignatureAlgorithmID.

Tag: 0x5F37

Type: RESTRICTION

Base type: OCTET STRING

# SubjectAuthorisation

Restricts or designates the allowed usage and permissions of the key in the certificate.

Tag: 0x7F4C

Type: SEQUENCE

Tag Element name Type name Optional Documentation
0x4D ownerId OrganisationId no OrgID assigned to the organisation responsible for the key and the device that is the subject of this certificate.
0xA0 algorithmIds AlgorithmIds yes Identifies a list of cryptographic algorithms in which the key (subject of the certificate) may be used.
0xA1 commandHeaders CommandHeaders yes Contains a list of headers CLA | INS | P1 | P2 of a command APDU which is allowed to use the key.
0x82 hostSecurityLevel OCTET STRING yes Indicates the relative level of security within the application of the host device for the key.
0x83 accessToken OCTET STRING yes Contains a value serving as an access token. To be compared e.g. during an authentication with an expected value for the granting of access or permissions.