💾 Archived View for tris.fyi › pydoc › cryptography.x509 captured on 2022-01-08 at 13:54:07. Gemini links have been rewritten to link to archived content
-=-=-=-=-=-=-
This module has no docstring.
access_location = <property object at 0x7f0567532360>
access_method = <property object at 0x7f0567532310>
with_traceback(...)
Exception.with_traceback(tb) --
set self.__traceback__ to tb and return self.
args = <attribute 'args' of 'BaseException' objects>
oid = <ObjectIdentifier(oid=1.3.6.1.5.5.7.1.1, name=authorityInfoAccess)>
CA_ISSUERS = <ObjectIdentifier(oid=1.3.6.1.5.5.7.48.2, name=caIssuers)>
OCSP = <ObjectIdentifier(oid=1.3.6.1.5.5.7.48.1, name=OCSP)>
from_issuer_public_key(public_key: Union[cryptography.hazmat.primitives.asymmetric.dsa.DSAPublicKey, cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey, cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey, cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey, cryptography.hazmat.primitives.asymmetric.ed448.Ed448PublicKey]) -> 'AuthorityKeyIdentifier'
from_issuer_subject_key_identifier(ski: 'SubjectKeyIdentifier') -> 'AuthorityKeyIdentifier'
authority_cert_issuer = <property object at 0x7f0567532040>
authority_cert_serial_number = <property object at 0x7f0567532090>
key_identifier = <property object at 0x7f0567522f90>
oid = <ObjectIdentifier(oid=2.5.29.35, name=authorityKeyIdentifier)>
ca = <property object at 0x7f0567532400>
oid = <ObjectIdentifier(oid=2.5.29.19, name=basicConstraints)>
path_length = <property object at 0x7f0567532450>
oid = <ObjectIdentifier(oid=2.5.29.31, name=cRLDistributionPoints)>
CERTIFICATE_ISSUER = <ObjectIdentifier(oid=2.5.29.29, name=certificateIssuer)>
CRL_REASON = <ObjectIdentifier(oid=2.5.29.21, name=cRLReason)>
INVALIDITY_DATE = <ObjectIdentifier(oid=2.5.29.24, name=invalidityDate)>
crl_number = <property object at 0x7f0567522e50>
oid = <ObjectIdentifier(oid=2.5.29.20, name=cRLNumber)>
oid = <ObjectIdentifier(oid=2.5.29.21, name=cRLReason)>
reason = <property object at 0x7f056797cae0>
fingerprint(self, algorithm: cryptography.hazmat.primitives.hashes.HashAlgorithm) -> bytes
Returns bytes using digest passed.
public_bytes(self, encoding: cryptography.hazmat.primitives._serialization.Encoding) -> bytes
Serializes the certificate to PEM or DER format.
public_key(self) -> Union[cryptography.hazmat.primitives.asymmetric.dsa.DSAPublicKey, cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey, cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey, cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey, cryptography.hazmat.primitives.asymmetric.ed448.Ed448PublicKey]
Returns the public key
extensions = <abc.abstractproperty object at 0x7f056751a4c0>
Returns an Extensions object.
issuer = <abc.abstractproperty object at 0x7f05676564c0>
Returns the issuer name object.
not_valid_after = <abc.abstractproperty object at 0x7f05676561c0>
Not after time (represented as UTC datetime)
not_valid_before = <abc.abstractproperty object at 0x7f05675e9340>
Not before time (represented as UTC datetime)
serial_number = <abc.abstractproperty object at 0x7f05675e9280>
Returns certificate serial number
signature = <abc.abstractproperty object at 0x7f056751a5e0>
Returns the signature bytes.
signature_algorithm_oid = <abc.abstractproperty object at 0x7f056751a460>
Returns the ObjectIdentifier of the signature algorithm.
signature_hash_algorithm = <abc.abstractproperty object at 0x7f05676567c0>
Returns a HashAlgorithm corresponding to the type of the digest signed
in the certificate.
subject = <abc.abstractproperty object at 0x7f0567656520>
Returns the subject name object.
tbs_certificate_bytes = <abc.abstractproperty object at 0x7f056751a880>
Returns the tbsCertificate payload bytes as defined in RFC 5280.
version = <abc.abstractproperty object at 0x7f05675e92e0>
Returns the certificate version
add_extension(self, extval: cryptography.x509.extensions.ExtensionType, critical: bool)
Adds an X.509 extension to the certificate.
issuer_name(self, name: cryptography.x509.name.Name)
Sets the CA's distinguished name.
not_valid_after(self, time: datetime.datetime)
Sets the certificate expiration time.
not_valid_before(self, time: datetime.datetime)
Sets the certificate activation time.
public_key(self, key: Union[cryptography.hazmat.primitives.asymmetric.dsa.DSAPublicKey, cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey, cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey, cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey, cryptography.hazmat.primitives.asymmetric.ed448.Ed448PublicKey])
Sets the requestor's public key (as found in the signing request).
serial_number(self, number: int)
Sets the certificate serial number.
sign(self, private_key: Union[cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PrivateKey, cryptography.hazmat.primitives.asymmetric.ed448.Ed448PrivateKey, cryptography.hazmat.primitives.asymmetric.rsa.RSAPrivateKey, cryptography.hazmat.primitives.asymmetric.dsa.DSAPrivateKey, cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey], algorithm: cryptography.hazmat.primitives.hashes.HashAlgorithm, backend=None) -> cryptography.x509.base.Certificate
Signs the certificate using the CA's private key.
subject_name(self, name: cryptography.x509.name.Name)
Sets the requestor's distinguished name.
get_values_for_type(self, type)
oid = <ObjectIdentifier(oid=2.5.29.29, name=certificateIssuer)>
oid = <ObjectIdentifier(oid=2.5.29.32, name=certificatePolicies)>
ANY_POLICY = <ObjectIdentifier(oid=2.5.29.32.0, name=Unknown OID)>
CPS_QUALIFIER = <ObjectIdentifier(oid=1.3.6.1.5.5.7.2.1, name=id-qt-cps)>
CPS_USER_NOTICE = <ObjectIdentifier(oid=1.3.6.1.5.5.7.2.2, name=id-qt-unotice)>
fingerprint(self, algorithm: cryptography.hazmat.primitives.hashes.HashAlgorithm) -> bytes
Returns bytes using digest passed.
get_revoked_certificate_by_serial_number(self, serial_number: int) -> Optional[cryptography.x509.base.RevokedCertificate]
Returns an instance of RevokedCertificate or None if the serial_number
is not in the CRL.
is_signature_valid(self, public_key: Union[cryptography.hazmat.primitives.asymmetric.dsa.DSAPublicKey, cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey, cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey, cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey, cryptography.hazmat.primitives.asymmetric.ed448.Ed448PublicKey]) -> bool
Verifies signature of revocation list against given public key.
public_bytes(self, encoding: cryptography.hazmat.primitives._serialization.Encoding) -> bytes
Serializes the CRL to PEM or DER format.
extensions = <abc.abstractproperty object at 0x7f056751abe0>
Returns an Extensions object containing a list of CRL extensions.
issuer = <abc.abstractproperty object at 0x7f056751aac0>
Returns the X509Name with the issuer of this CRL.
last_update = <abc.abstractproperty object at 0x7f056751ab80>
Returns the date of last update for this CRL.
next_update = <abc.abstractproperty object at 0x7f056751ab20>
Returns the date of next update for this CRL.
signature = <abc.abstractproperty object at 0x7f056751ac40>
Returns the signature bytes.
signature_algorithm_oid = <abc.abstractproperty object at 0x7f056751aa60>
Returns the ObjectIdentifier of the signature algorithm.
signature_hash_algorithm = <abc.abstractproperty object at 0x7f056751aa00>
Returns a HashAlgorithm corresponding to the type of the digest signed
in the certificate.
tbs_certlist_bytes = <abc.abstractproperty object at 0x7f056751aca0>
Returns the tbsCertList payload bytes as defined in RFC 5280.
add_extension(self, extval: cryptography.x509.extensions.ExtensionType, critical: bool)
Adds an X.509 extension to the certificate revocation list.
add_revoked_certificate(self, revoked_certificate: cryptography.x509.base.RevokedCertificate)
Adds a revoked certificate to the CRL.
issuer_name(self, issuer_name: cryptography.x509.name.Name)
last_update(self, last_update: datetime.datetime)
next_update(self, next_update: datetime.datetime)
sign(self, private_key: Union[cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PrivateKey, cryptography.hazmat.primitives.asymmetric.ed448.Ed448PrivateKey, cryptography.hazmat.primitives.asymmetric.rsa.RSAPrivateKey, cryptography.hazmat.primitives.asymmetric.dsa.DSAPrivateKey, cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey], algorithm: cryptography.hazmat.primitives.hashes.HashAlgorithm, backend=None) -> cryptography.x509.base.CertificateRevocationList
get_attribute_for_oid(self, oid: cryptography.hazmat._oid.ObjectIdentifier) -> bytes
Get the attribute value for a given OID.
public_bytes(self, encoding: cryptography.hazmat.primitives._serialization.Encoding) -> bytes
Encodes the request to PEM or DER format.
public_key(self) -> Union[cryptography.hazmat.primitives.asymmetric.dsa.DSAPublicKey, cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey, cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey, cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey, cryptography.hazmat.primitives.asymmetric.ed448.Ed448PublicKey]
Returns the public key
extensions = <abc.abstractproperty object at 0x7f056751ae20>
Returns the extensions in the signing request.
is_signature_valid = <abc.abstractproperty object at 0x7f056751af40>
Verifies signature of signing request.
signature = <abc.abstractproperty object at 0x7f056751ae80>
Returns the signature bytes.
signature_algorithm_oid = <abc.abstractproperty object at 0x7f056751adc0>
Returns the ObjectIdentifier of the signature algorithm.
signature_hash_algorithm = <abc.abstractproperty object at 0x7f056751ad60>
Returns a HashAlgorithm corresponding to the type of the digest signed
in the certificate.
subject = <abc.abstractproperty object at 0x7f056751ad00>
Returns the subject name object.
tbs_certrequest_bytes = <abc.abstractproperty object at 0x7f056751aee0>
Returns the PKCS#10 CertificationRequestInfo bytes as defined in RFC
2986.
add_attribute(self, oid: cryptography.hazmat._oid.ObjectIdentifier, value: bytes)
Adds an X.509 attribute with an OID and associated value.
add_extension(self, extval: cryptography.x509.extensions.ExtensionType, critical: bool)
Adds an X.509 extension to the certificate request.
sign(self, private_key: Union[cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PrivateKey, cryptography.hazmat.primitives.asymmetric.ed448.Ed448PrivateKey, cryptography.hazmat.primitives.asymmetric.rsa.RSAPrivateKey, cryptography.hazmat.primitives.asymmetric.dsa.DSAPrivateKey, cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey], algorithm: cryptography.hazmat.primitives.hashes.HashAlgorithm, backend=None) -> cryptography.x509.base.CertificateSigningRequest
Signs the request using the requestor's private key.
subject_name(self, name: cryptography.x509.name.Name)
Sets the certificate requestor's distinguished name.
value = <property object at 0x7f0567522860>
crl_number = <property object at 0x7f05675ebd60>
oid = <ObjectIdentifier(oid=2.5.29.27, name=deltaCRLIndicator)>
value = <property object at 0x7f05675229a0>
crl_issuer = <property object at 0x7f05675328b0>
full_name = <property object at 0x7f05675327c0>
reasons = <property object at 0x7f0567532860>
relative_name = <property object at 0x7f0567532810>
with_traceback(...)
Exception.with_traceback(tb) --
set self.__traceback__ to tb and return self.
args = <attribute 'args' of 'BaseException' objects>
oid = <ObjectIdentifier(oid=2.5.29.37, name=extendedKeyUsage)>
ANY_EXTENDED_KEY_USAGE = <ObjectIdentifier(oid=2.5.29.37.0, name=Unknown OID)>
CLIENT_AUTH = <ObjectIdentifier(oid=1.3.6.1.5.5.7.3.2, name=clientAuth)>
CODE_SIGNING = <ObjectIdentifier(oid=1.3.6.1.5.5.7.3.3, name=codeSigning)>
EMAIL_PROTECTION = <ObjectIdentifier(oid=1.3.6.1.5.5.7.3.4, name=emailProtection)>
OCSP_SIGNING = <ObjectIdentifier(oid=1.3.6.1.5.5.7.3.9, name=OCSPSigning)>
SERVER_AUTH = <ObjectIdentifier(oid=1.3.6.1.5.5.7.3.1, name=serverAuth)>
TIME_STAMPING = <ObjectIdentifier(oid=1.3.6.1.5.5.7.3.8, name=timeStamping)>
critical = <property object at 0x7f056797c860>
oid = <property object at 0x7f056797c810>
value = <property object at 0x7f056797c8b0>
with_traceback(...)
Exception.with_traceback(tb) --
set self.__traceback__ to tb and return self.
args = <attribute 'args' of 'BaseException' objects>
AUTHORITY_INFORMATION_ACCESS = <ObjectIdentifier(oid=1.3.6.1.5.5.7.1.1, name=authorityInfoAccess)>
AUTHORITY_KEY_IDENTIFIER = <ObjectIdentifier(oid=2.5.29.35, name=authorityKeyIdentifier)>
BASIC_CONSTRAINTS = <ObjectIdentifier(oid=2.5.29.19, name=basicConstraints)>
CERTIFICATE_POLICIES = <ObjectIdentifier(oid=2.5.29.32, name=certificatePolicies)>
CRL_DISTRIBUTION_POINTS = <ObjectIdentifier(oid=2.5.29.31, name=cRLDistributionPoints)>
CRL_NUMBER = <ObjectIdentifier(oid=2.5.29.20, name=cRLNumber)>
DELTA_CRL_INDICATOR = <ObjectIdentifier(oid=2.5.29.27, name=deltaCRLIndicator)>
EXTENDED_KEY_USAGE = <ObjectIdentifier(oid=2.5.29.37, name=extendedKeyUsage)>
FRESHEST_CRL = <ObjectIdentifier(oid=2.5.29.46, name=freshestCRL)>
INHIBIT_ANY_POLICY = <ObjectIdentifier(oid=2.5.29.54, name=inhibitAnyPolicy)>
ISSUER_ALTERNATIVE_NAME = <ObjectIdentifier(oid=2.5.29.18, name=issuerAltName)>
ISSUING_DISTRIBUTION_POINT = <ObjectIdentifier(oid=2.5.29.28, name=issuingDistributionPoint)>
KEY_USAGE = <ObjectIdentifier(oid=2.5.29.15, name=keyUsage)>
NAME_CONSTRAINTS = <ObjectIdentifier(oid=2.5.29.30, name=nameConstraints)>
OCSP_NO_CHECK = <ObjectIdentifier(oid=1.3.6.1.5.5.7.48.1.5, name=OCSPNoCheck)>
POLICY_CONSTRAINTS = <ObjectIdentifier(oid=2.5.29.36, name=policyConstraints)>
POLICY_MAPPINGS = <ObjectIdentifier(oid=2.5.29.33, name=policyMappings)>
PRECERT_POISON = <ObjectIdentifier(oid=1.3.6.1.4.1.11129.2.4.3, name=ctPoison)>
PRECERT_SIGNED_CERTIFICATE_TIMESTAMPS = <ObjectIdentifier(oid=1.3.6.1.4.1.11129.2.4.2, name=signedCertificateTimestampList)>
SIGNED_CERTIFICATE_TIMESTAMPS = <ObjectIdentifier(oid=1.3.6.1.4.1.11129.2.4.5, name=signedCertificateTimestampList)>
SUBJECT_ALTERNATIVE_NAME = <ObjectIdentifier(oid=2.5.29.17, name=subjectAltName)>
SUBJECT_DIRECTORY_ATTRIBUTES = <ObjectIdentifier(oid=2.5.29.9, name=subjectDirectoryAttributes)>
SUBJECT_INFORMATION_ACCESS = <ObjectIdentifier(oid=1.3.6.1.5.5.7.1.11, name=subjectInfoAccess)>
SUBJECT_KEY_IDENTIFIER = <ObjectIdentifier(oid=2.5.29.14, name=subjectKeyIdentifier)>
TLS_FEATURE = <ObjectIdentifier(oid=1.3.6.1.5.5.7.1.24, name=TLSFeature)>
oid = <abc.abstractproperty object at 0x7f056760cd00>
Returns the oid associated with the given extension type.
get_extension_for_class(self, extclass) -> 'Extension'
get_extension_for_oid(self, oid: cryptography.hazmat._oid.ObjectIdentifier) -> 'Extension'
oid = <ObjectIdentifier(oid=2.5.29.46, name=freshestCRL)>
value = <abc.abstractproperty object at 0x7f056750eac0>
Return the value of the object
get_values_for_type(self, type: Type[cryptography.x509.general_name.GeneralName])
value = <property object at 0x7f0567522bd0>
oid = <ObjectIdentifier(oid=2.5.29.54, name=inhibitAnyPolicy)>
skip_certs = <property object at 0x7f056797c310>
with_traceback(...)
Exception.with_traceback(tb) --
set self.__traceback__ to tb and return self.
args = <attribute 'args' of 'BaseException' objects>
invalidity_date = <property object at 0x7f056797cb80>
oid = <ObjectIdentifier(oid=2.5.29.24, name=invalidityDate)>
get_values_for_type(self, type)
oid = <ObjectIdentifier(oid=2.5.29.18, name=issuerAltName)>
full_name = <property object at 0x7f056797cdb0>
indirect_crl = <property object at 0x7f056797cf40>
oid = <ObjectIdentifier(oid=2.5.29.28, name=issuingDistributionPoint)>
only_contains_attribute_certs = <property object at 0x7f056797cf90>
only_contains_ca_certs = <property object at 0x7f056797cea0>
only_contains_user_certs = <property object at 0x7f056797ce50>
only_some_reasons = <property object at 0x7f056797cef0>
relative_name = <property object at 0x7f056797ce00>
content_commitment = <property object at 0x7f056797c450>
crl_sign = <property object at 0x7f056797c5e0>
data_encipherment = <property object at 0x7f056797c4f0>
decipher_only = <property object at 0x7f056797c680>
digital_signature = <property object at 0x7f056797c400>
encipher_only = <property object at 0x7f056797c630>
key_agreement = <property object at 0x7f056797c540>
key_cert_sign = <property object at 0x7f056797c590>
key_encipherment = <property object at 0x7f056797c4a0>
oid = <ObjectIdentifier(oid=2.5.29.15, name=keyUsage)>
get_attributes_for_oid(self, oid) -> List[cryptography.x509.name.NameAttribute]
public_bytes(self, backend=None) -> bytes
rfc4514_string(self) -> str
Format as RFC4514 Distinguished Name string.
For example 'CN=foobar.com,O=Foo Corp,C=US'
An X.509 name is a two-level structure: a list of sets of attributes.
Each list element is separated by ',' and within each list element, set
elements are separated by '+'. The latter is almost never used in
real world certificates. According to RFC4514 section 2.1 the
RDNSequence must be reversed when converting to string representation.
rdns = <property object at 0x7f0567522770>
rfc4514_string(self) -> str
Format as RFC4514 Distinguished Name string.
Use short attribute name if available, otherwise fall back to OID
dotted string.
oid = <property object at 0x7f056751d220>
value = <property object at 0x7f056751d270>
excluded_subtrees = <property object at 0x7f056797c770>
oid = <ObjectIdentifier(oid=2.5.29.30, name=nameConstraints)>
permitted_subtrees = <property object at 0x7f056797c720>
BUSINESS_CATEGORY = <ObjectIdentifier(oid=2.5.4.15, name=businessCategory)>
COMMON_NAME = <ObjectIdentifier(oid=2.5.4.3, name=commonName)>
COUNTRY_NAME = <ObjectIdentifier(oid=2.5.4.6, name=countryName)>
DN_QUALIFIER = <ObjectIdentifier(oid=2.5.4.46, name=dnQualifier)>
DOMAIN_COMPONENT = <ObjectIdentifier(oid=0.9.2342.19200300.100.1.25, name=domainComponent)>
EMAIL_ADDRESS = <ObjectIdentifier(oid=1.2.840.113549.1.9.1, name=emailAddress)>
GENERATION_QUALIFIER = <ObjectIdentifier(oid=2.5.4.44, name=generationQualifier)>
GIVEN_NAME = <ObjectIdentifier(oid=2.5.4.42, name=givenName)>
INN = <ObjectIdentifier(oid=1.2.643.3.131.1.1, name=INN)>
JURISDICTION_COUNTRY_NAME = <ObjectIdentifier(oid=1.3.6.1.4.1.311.60.2.1.3, name=jurisdictionCountryName)>
JURISDICTION_LOCALITY_NAME = <ObjectIdentifier(oid=1.3.6.1.4.1.311.60.2.1.1, name=jurisdictionLocalityName)>
JURISDICTION_STATE_OR_PROVINCE_NAME = <ObjectIdentifier(oid=1.3.6.1.4.1.311.60.2.1.2, name=jurisdictionStateOrProvinceName)>
LOCALITY_NAME = <ObjectIdentifier(oid=2.5.4.7, name=localityName)>
OGRN = <ObjectIdentifier(oid=1.2.643.100.1, name=OGRN)>
ORGANIZATIONAL_UNIT_NAME = <ObjectIdentifier(oid=2.5.4.11, name=organizationalUnitName)>
ORGANIZATION_NAME = <ObjectIdentifier(oid=2.5.4.10, name=organizationName)>
POSTAL_ADDRESS = <ObjectIdentifier(oid=2.5.4.16, name=postalAddress)>
POSTAL_CODE = <ObjectIdentifier(oid=2.5.4.17, name=postalCode)>
PSEUDONYM = <ObjectIdentifier(oid=2.5.4.65, name=pseudonym)>
SERIAL_NUMBER = <ObjectIdentifier(oid=2.5.4.5, name=serialNumber)>
SNILS = <ObjectIdentifier(oid=1.2.643.100.3, name=SNILS)>
STATE_OR_PROVINCE_NAME = <ObjectIdentifier(oid=2.5.4.8, name=stateOrProvinceName)>
STREET_ADDRESS = <ObjectIdentifier(oid=2.5.4.9, name=streetAddress)>
SURNAME = <ObjectIdentifier(oid=2.5.4.4, name=surname)>
TITLE = <ObjectIdentifier(oid=2.5.4.12, name=title)>
UNSTRUCTURED_NAME = <ObjectIdentifier(oid=1.2.840.113549.1.9.2, name=unstructuredName)>
USER_ID = <ObjectIdentifier(oid=0.9.2342.19200300.100.1.1, name=userID)>
X500_UNIQUE_IDENTIFIER = <ObjectIdentifier(oid=2.5.4.45, name=x500UniqueIdentifier)>
notice_numbers = <property object at 0x7f056797c040>
organization = <property object at 0x7f0567532f90>
oid = <ObjectIdentifier(oid=1.3.6.1.5.5.7.48.1.5, name=OCSPNoCheck)>
nonce = <property object at 0x7f056797cd10>
oid = <ObjectIdentifier(oid=1.3.6.1.5.5.7.48.1.2, name=OCSPNonce)>
dotted_string = <property object at 0x7f056766aae0>
type_id = <property object at 0x7f0567522c70>
value = <property object at 0x7f0567522cc0>
inhibit_policy_mapping = <property object at 0x7f05675329a0>
oid = <ObjectIdentifier(oid=2.5.29.36, name=policyConstraints)>
require_explicit_policy = <property object at 0x7f0567532950>
policy_identifier = <property object at 0x7f0567532cc0>
policy_qualifiers = <property object at 0x7f0567532d10>
oid = <ObjectIdentifier(oid=1.3.6.1.4.1.11129.2.4.3, name=ctPoison)>
oid = <ObjectIdentifier(oid=1.3.6.1.4.1.11129.2.4.2, name=signedCertificateTimestampList)>
value = <property object at 0x7f05675a04a0>
An enumeration.
aa_compromise = <ReasonFlags.aa_compromise: 'aACompromise'>
affiliation_changed = <ReasonFlags.affiliation_changed: 'affiliationChanged'>
ca_compromise = <ReasonFlags.ca_compromise: 'cACompromise'>
certificate_hold = <ReasonFlags.certificate_hold: 'certificateHold'>
cessation_of_operation = <ReasonFlags.cessation_of_operation: 'cessationOfOperation'>
key_compromise = <ReasonFlags.key_compromise: 'keyCompromise'>
name = <types.DynamicClassAttribute object at 0x7f0567f3eb80> The name of the Enum member.
privilege_withdrawn = <ReasonFlags.privilege_withdrawn: 'privilegeWithdrawn'>
remove_from_crl = <ReasonFlags.remove_from_crl: 'removeFromCRL'>
superseded = <ReasonFlags.superseded: 'superseded'>
unspecified = <ReasonFlags.unspecified: 'unspecified'>
value = <types.DynamicClassAttribute object at 0x7f0567f3ebb0> The value of the Enum member.
value = <property object at 0x7f0567522a40>
get_attributes_for_oid(self, oid) -> List[cryptography.x509.name.NameAttribute]
rfc4514_string(self) -> str
Format as RFC4514 Distinguished Name string.
Within each RDN, attributes are joined by '+', although that is rarely
used in certificates.
extensions = <abc.abstractproperty object at 0x7f056751a9a0>
Returns an Extensions object containing a list of Revoked extensions.
revocation_date = <abc.abstractproperty object at 0x7f056751a940>
Returns the date of when this certificate was revoked.
serial_number = <abc.abstractproperty object at 0x7f056751a8e0>
Returns the serial number of the revoked certificate.
add_extension(self, extval: cryptography.x509.extensions.ExtensionType, critical: bool)
build(self, backend=None) -> cryptography.x509.base.RevokedCertificate
revocation_date(self, time: datetime.datetime)
serial_number(self, number: int)
DSA_WITH_SHA1 = <ObjectIdentifier(oid=1.2.840.10040.4.3, name=dsa-with-sha1)>
DSA_WITH_SHA224 = <ObjectIdentifier(oid=2.16.840.1.101.3.4.3.1, name=dsa-with-sha224)>
DSA_WITH_SHA256 = <ObjectIdentifier(oid=2.16.840.1.101.3.4.3.2, name=dsa-with-sha256)>
ECDSA_WITH_SHA1 = <ObjectIdentifier(oid=1.2.840.10045.4.1, name=ecdsa-with-SHA1)>
ECDSA_WITH_SHA224 = <ObjectIdentifier(oid=1.2.840.10045.4.3.1, name=ecdsa-with-SHA224)>
ECDSA_WITH_SHA256 = <ObjectIdentifier(oid=1.2.840.10045.4.3.2, name=ecdsa-with-SHA256)>
ECDSA_WITH_SHA384 = <ObjectIdentifier(oid=1.2.840.10045.4.3.3, name=ecdsa-with-SHA384)>
ECDSA_WITH_SHA512 = <ObjectIdentifier(oid=1.2.840.10045.4.3.4, name=ecdsa-with-SHA512)>
ED25519 = <ObjectIdentifier(oid=1.3.101.112, name=ed25519)>
ED448 = <ObjectIdentifier(oid=1.3.101.113, name=ed448)>
GOSTR3410_2012_WITH_3411_2012_256 = <ObjectIdentifier(oid=1.2.643.7.1.1.3.2, name=GOST R 34.10-2012 with GOST R 34.11-2012 (256 bit))>
GOSTR3410_2012_WITH_3411_2012_512 = <ObjectIdentifier(oid=1.2.643.7.1.1.3.3, name=GOST R 34.10-2012 with GOST R 34.11-2012 (512 bit))>
GOSTR3411_94_WITH_3410_2001 = <ObjectIdentifier(oid=1.2.643.2.2.3, name=GOST R 34.11-94 with GOST R 34.10-2001)>
RSASSA_PSS = <ObjectIdentifier(oid=1.2.840.113549.1.1.10, name=RSASSA-PSS)>
RSA_WITH_MD5 = <ObjectIdentifier(oid=1.2.840.113549.1.1.4, name=md5WithRSAEncryption)>
RSA_WITH_SHA1 = <ObjectIdentifier(oid=1.2.840.113549.1.1.5, name=sha1WithRSAEncryption)>
RSA_WITH_SHA224 = <ObjectIdentifier(oid=1.2.840.113549.1.1.14, name=sha224WithRSAEncryption)>
RSA_WITH_SHA256 = <ObjectIdentifier(oid=1.2.840.113549.1.1.11, name=sha256WithRSAEncryption)>
RSA_WITH_SHA384 = <ObjectIdentifier(oid=1.2.840.113549.1.1.12, name=sha384WithRSAEncryption)>
RSA_WITH_SHA512 = <ObjectIdentifier(oid=1.2.840.113549.1.1.13, name=sha512WithRSAEncryption)>
oid = <ObjectIdentifier(oid=1.3.6.1.4.1.11129.2.4.5, name=signedCertificateTimestampList)>
get_values_for_type(self, type)
oid = <ObjectIdentifier(oid=2.5.29.17, name=subjectAltName)>
oid = <ObjectIdentifier(oid=1.3.6.1.5.5.7.1.11, name=subjectInfoAccess)>
from_public_key(public_key: Union[cryptography.hazmat.primitives.asymmetric.dsa.DSAPublicKey, cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey, cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey, cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey, cryptography.hazmat.primitives.asymmetric.ed448.Ed448PublicKey]) -> 'SubjectKeyIdentifier'
digest = <property object at 0x7f0567532130>
oid = <ObjectIdentifier(oid=2.5.29.14, name=subjectKeyIdentifier)>
oid = <ObjectIdentifier(oid=1.3.6.1.5.5.7.1.24, name=TLSFeature)>
An enumeration.
name = <types.DynamicClassAttribute object at 0x7f0567f3eb80> The name of the Enum member.
status_request = <TLSFeatureType.status_request: 5>
status_request_v2 = <TLSFeatureType.status_request_v2: 17>
value = <types.DynamicClassAttribute object at 0x7f0567f3ebb0> The value of the Enum member.
value = <property object at 0x7f0567522900>
oid = <property object at 0x7f056798b090>
value = <property object at 0x7f056798b0e0>
with_traceback(...)
Exception.with_traceback(tb) --
set self.__traceback__ to tb and return self.
args = <attribute 'args' of 'BaseException' objects>
explicit_text = <property object at 0x7f0567532ea0>
notice_reference = <property object at 0x7f0567532e50>
An enumeration.
name = <types.DynamicClassAttribute object at 0x7f0567f3eb80> The name of the Enum member.
v1 = <Version.v1: 0>
v3 = <Version.v3: 2>
value = <types.DynamicClassAttribute object at 0x7f0567f3ebb0> The value of the Enum member.
load_der_x509_certificate(data: bytes, backend=None) -> cryptography.x509.base.Certificate
load_der_x509_crl(data: bytes, backend=None) -> cryptography.x509.base.CertificateRevocationList
load_der_x509_csr(data: bytes, backend=None) -> cryptography.x509.base.CertificateSigningRequest
load_pem_x509_certificate(data: bytes, backend=None) -> cryptography.x509.base.Certificate
load_pem_x509_crl(data: bytes, backend=None) -> cryptography.x509.base.CertificateRevocationList
load_pem_x509_csr(data: bytes, backend=None) -> cryptography.x509.base.CertificateSigningRequest
random_serial_number() -> int
OID_ANY_POLICY = <ObjectIdentifier(oid=2.5.29.32.0, name=Unknown OID)>
OID_AUTHORITY_INFORMATION_ACCESS = <ObjectIdentifier(oid=1.3.6.1.5.5.7.1.1, name=authorityInfoAccess)>
OID_AUTHORITY_KEY_IDENTIFIER = <ObjectIdentifier(oid=2.5.29.35, name=authorityKeyIdentifier)>
OID_BASIC_CONSTRAINTS = <ObjectIdentifier(oid=2.5.29.19, name=basicConstraints)>
OID_CA_ISSUERS = <ObjectIdentifier(oid=1.3.6.1.5.5.7.48.2, name=caIssuers)>
OID_CERTIFICATE_ISSUER = <ObjectIdentifier(oid=2.5.29.29, name=certificateIssuer)>
OID_CERTIFICATE_POLICIES = <ObjectIdentifier(oid=2.5.29.32, name=certificatePolicies)>
OID_CLIENT_AUTH = <ObjectIdentifier(oid=1.3.6.1.5.5.7.3.2, name=clientAuth)>
OID_CODE_SIGNING = <ObjectIdentifier(oid=1.3.6.1.5.5.7.3.3, name=codeSigning)>
OID_COMMON_NAME = <ObjectIdentifier(oid=2.5.4.3, name=commonName)>
OID_COUNTRY_NAME = <ObjectIdentifier(oid=2.5.4.6, name=countryName)>
OID_CPS_QUALIFIER = <ObjectIdentifier(oid=1.3.6.1.5.5.7.2.1, name=id-qt-cps)>
OID_CPS_USER_NOTICE = <ObjectIdentifier(oid=1.3.6.1.5.5.7.2.2, name=id-qt-unotice)>
OID_CRL_DISTRIBUTION_POINTS = <ObjectIdentifier(oid=2.5.29.31, name=cRLDistributionPoints)>
OID_CRL_REASON = <ObjectIdentifier(oid=2.5.29.21, name=cRLReason)>
OID_DN_QUALIFIER = <ObjectIdentifier(oid=2.5.4.46, name=dnQualifier)>
OID_DOMAIN_COMPONENT = <ObjectIdentifier(oid=0.9.2342.19200300.100.1.25, name=domainComponent)>
OID_DSA_WITH_SHA1 = <ObjectIdentifier(oid=1.2.840.10040.4.3, name=dsa-with-sha1)>
OID_DSA_WITH_SHA224 = <ObjectIdentifier(oid=2.16.840.1.101.3.4.3.1, name=dsa-with-sha224)>
OID_DSA_WITH_SHA256 = <ObjectIdentifier(oid=2.16.840.1.101.3.4.3.2, name=dsa-with-sha256)>
OID_ECDSA_WITH_SHA1 = <ObjectIdentifier(oid=1.2.840.10045.4.1, name=ecdsa-with-SHA1)>
OID_ECDSA_WITH_SHA224 = <ObjectIdentifier(oid=1.2.840.10045.4.3.1, name=ecdsa-with-SHA224)>
OID_ECDSA_WITH_SHA256 = <ObjectIdentifier(oid=1.2.840.10045.4.3.2, name=ecdsa-with-SHA256)>
OID_ECDSA_WITH_SHA384 = <ObjectIdentifier(oid=1.2.840.10045.4.3.3, name=ecdsa-with-SHA384)>
OID_ECDSA_WITH_SHA512 = <ObjectIdentifier(oid=1.2.840.10045.4.3.4, name=ecdsa-with-SHA512)>
OID_EMAIL_ADDRESS = <ObjectIdentifier(oid=1.2.840.113549.1.9.1, name=emailAddress)>
OID_EMAIL_PROTECTION = <ObjectIdentifier(oid=1.3.6.1.5.5.7.3.4, name=emailProtection)>
OID_EXTENDED_KEY_USAGE = <ObjectIdentifier(oid=2.5.29.37, name=extendedKeyUsage)>
OID_FRESHEST_CRL = <ObjectIdentifier(oid=2.5.29.46, name=freshestCRL)>
OID_GENERATION_QUALIFIER = <ObjectIdentifier(oid=2.5.4.44, name=generationQualifier)>
OID_GIVEN_NAME = <ObjectIdentifier(oid=2.5.4.42, name=givenName)>
OID_INHIBIT_ANY_POLICY = <ObjectIdentifier(oid=2.5.29.54, name=inhibitAnyPolicy)>
OID_INVALIDITY_DATE = <ObjectIdentifier(oid=2.5.29.24, name=invalidityDate)>
OID_ISSUER_ALTERNATIVE_NAME = <ObjectIdentifier(oid=2.5.29.18, name=issuerAltName)>
OID_KEY_USAGE = <ObjectIdentifier(oid=2.5.29.15, name=keyUsage)>
OID_LOCALITY_NAME = <ObjectIdentifier(oid=2.5.4.7, name=localityName)>
OID_NAME_CONSTRAINTS = <ObjectIdentifier(oid=2.5.29.30, name=nameConstraints)>
OID_OCSP = <ObjectIdentifier(oid=1.3.6.1.5.5.7.48.1, name=OCSP)>
OID_OCSP_NO_CHECK = <ObjectIdentifier(oid=1.3.6.1.5.5.7.48.1.5, name=OCSPNoCheck)>
OID_OCSP_SIGNING = <ObjectIdentifier(oid=1.3.6.1.5.5.7.3.9, name=OCSPSigning)>
OID_ORGANIZATIONAL_UNIT_NAME = <ObjectIdentifier(oid=2.5.4.11, name=organizationalUnitName)>
OID_ORGANIZATION_NAME = <ObjectIdentifier(oid=2.5.4.10, name=organizationName)>
OID_POLICY_CONSTRAINTS = <ObjectIdentifier(oid=2.5.29.36, name=policyConstraints)>
OID_POLICY_MAPPINGS = <ObjectIdentifier(oid=2.5.29.33, name=policyMappings)>
OID_PSEUDONYM = <ObjectIdentifier(oid=2.5.4.65, name=pseudonym)>
OID_RSASSA_PSS = <ObjectIdentifier(oid=1.2.840.113549.1.1.10, name=RSASSA-PSS)>
OID_RSA_WITH_MD5 = <ObjectIdentifier(oid=1.2.840.113549.1.1.4, name=md5WithRSAEncryption)>
OID_RSA_WITH_SHA1 = <ObjectIdentifier(oid=1.2.840.113549.1.1.5, name=sha1WithRSAEncryption)>
OID_RSA_WITH_SHA224 = <ObjectIdentifier(oid=1.2.840.113549.1.1.14, name=sha224WithRSAEncryption)>
OID_RSA_WITH_SHA256 = <ObjectIdentifier(oid=1.2.840.113549.1.1.11, name=sha256WithRSAEncryption)>
OID_RSA_WITH_SHA384 = <ObjectIdentifier(oid=1.2.840.113549.1.1.12, name=sha384WithRSAEncryption)>
OID_RSA_WITH_SHA512 = <ObjectIdentifier(oid=1.2.840.113549.1.1.13, name=sha512WithRSAEncryption)>
OID_SERIAL_NUMBER = <ObjectIdentifier(oid=2.5.4.5, name=serialNumber)>
OID_SERVER_AUTH = <ObjectIdentifier(oid=1.3.6.1.5.5.7.3.1, name=serverAuth)>
OID_STATE_OR_PROVINCE_NAME = <ObjectIdentifier(oid=2.5.4.8, name=stateOrProvinceName)>
OID_SUBJECT_ALTERNATIVE_NAME = <ObjectIdentifier(oid=2.5.29.17, name=subjectAltName)>
OID_SUBJECT_DIRECTORY_ATTRIBUTES = <ObjectIdentifier(oid=2.5.29.9, name=subjectDirectoryAttributes)>
OID_SUBJECT_INFORMATION_ACCESS = <ObjectIdentifier(oid=1.3.6.1.5.5.7.1.11, name=subjectInfoAccess)>
OID_SUBJECT_KEY_IDENTIFIER = <ObjectIdentifier(oid=2.5.29.14, name=subjectKeyIdentifier)>
OID_SURNAME = <ObjectIdentifier(oid=2.5.4.4, name=surname)>
OID_TIME_STAMPING = <ObjectIdentifier(oid=1.3.6.1.5.5.7.3.8, name=timeStamping)>
OID_TITLE = <ObjectIdentifier(oid=2.5.4.12, name=title)>