6.3 Certificate Attribute IDs

Table 6-3 Certificate Attribute IDs

Attribute ID

Data Type

Description

LDAPSSL_CERT_ATTR_ISSUER

char *

A pointer to a character array containing the certificate issuer name. The issuer is the distinguished name of the certificate authority that issued the certificate. The length returned is the length of the string not including the NULL termination character.

LDAPSSL_CERT_ATTR_SUBJECT

char *

A pointer to a character array containing the certificate subject name. The subject is the distinguished name of the entity that owns the certificate. The length returned is the length of the string not including the NULL termination character.

LDAPSSL_CERT_ATTR_VALIDITY_PERIOD

LDAPSSL_Cert_Validity_Period *

A pointer to a LDAPSSL_Cert_Validity_Period structure. The validity period structure contains a not valid after and a not valid before timestamp which defines the period during which the certificate should be considered valid. The timestamps can be a universal time string or a generalized time string (see LDAPSSL_Cert_Validity_Period ).

LDAPSSL_CERT_GET_STATUS

int *

The certificate status codes are described in Section 6.12, SSL Certificate Status Codes

The cert status is one of sixteen certificate status codes indicating the status of an untrusted SSL certificate.