cryptoservices/certificateandkeymgmt/inc/x509CertExt_v2.h
author Dremov Kirill (Nokia-D-MSW/Tampere) <kirill.dremov@nokia.com>
Tue, 31 Aug 2010 17:00:08 +0300
branchRCL_3
changeset 95 641f389e9157
parent 8 35751d3474b7
permissions -rw-r--r--
Revision: 201035 Kit: 201035

/*
* Copyright (c) 1998-2009 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of the License "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description: 
* X509CERTEXT.H
* X509 extensions v2
* Common specific extensions:
* 1)	basic constraints
* 2)	alt name
* 3)	key usage
* 4)	name constraints
* 5)	policy constraints
* 6)	policies
* 7)	policy mapping
* 8)	authority key ID
* 9)	subject key ID
* 10)	extended key usage
* 11)	authority information access
* critical extension
* 12)   inhibit-any policy 
*
*/


/**
 @file 
 @publishedAll
 @released
*/

#if !defined (__X509CERTEXT_H__)
#define __X509CERTEXT_H__

#include <e32base.h>
#include <e32std.h>
#include <x509gn.h>

#ifndef SYMBIAN_ENABLE_SPLIT_HEADERS
#include <x509bitstring.h>
#endif

class RReadStream;
class RWriteStream;
class CX509BitString;
/** A list of values that defines what an X.509 key can be used for.
* These values can be ANDed together if a key has several usages. 
* 
* @since v7.0 */
enum TX509KeyUsage
	{
	/** A digital signature. */
	EX509DigitalSignature,
	/** Non repudiation. */
	EX509NonRepudiation,
	/** Key encipherment. */
	EX509KeyEncipherment,
	/** Data encipherment. */
	EX509DataEncipherment,
	/** Key agreement. */
	EX509KeyAgreement,
	/** Key certificate sign. */
	EX509KeyCertSign,
	/** CRL sign. */
	EX509CRLSign,
	/** Encipher only. */
	EX509EncipherOnly,
	/** Decipher only. */
	EX509DecipherOnly
	};

/** X509 Extension OIDs
* 
* @since v9.5 */

//OIDS for the extensions we define here...
_LIT(KBasicConstraints,"2.5.29.19");
_LIT(KSubjectAltName,"2.5.29.17");
_LIT(KIssuerAltName,"2.5.29.18");
_LIT(KKeyUsage,"2.5.29.15");
_LIT(KNameConstraints,"2.5.29.30");
_LIT(KPolicyConstraints,"2.5.29.36");
_LIT(KCertPolicies,"2.5.29.32");
_LIT(KPolicyMapping,"2.5.29.33");
_LIT(KAuthorityKeyId,"2.5.29.35");
_LIT(KSubjectKeyId,"2.5.29.14");
_LIT(KExtendedKeyUsage,"2.5.29.37");
_LIT(KAuthorityInfoAccess, "1.3.6.1.5.5.7.1.1");
_LIT(KInhibitAnyPolicy, "2.5.29.54");

// OIDs for access methods
_LIT(KAccessMethodOCSP, "1.3.6.1.5.5.7.48.1");

//deprecated OIDs we might still encounter
_LIT(KOldBasicConstraints,"2.5.29.10");
_LIT(KOldBasicConstraints2,"2.5.29.13");
_LIT(KOldSubjectAltName,"2.5.29.7");
_LIT(KOldIssuerAltName,"2.5.29.8");
_LIT(KOldNameConstraints,"2.5.29.11");
_LIT(KOldPolicyConstraints,"2.5.29.2");
_LIT(KOldPolicyConstraints2,"2.5.29.34");
_LIT(KOldCertPolicies,"2.5.29.3");
_LIT(KOldPolicyMapping,"2.5.29.5");
_LIT(KOldAuthorityKeyId,"2.5.29.1");

// Define OIDs for Symbian certificate constraints.
_LIT(KDeviceIdListConstraint,"1.2.826.0.1.1796587.1.1.1.1");
_LIT(KSidListConstraint,"1.2.826.0.1.1796587.1.1.1.4");
_LIT(KVidListConstraint,"1.2.826.0.1.1796587.1.1.1.5");
_LIT(KCapabilitiesConstraint,"1.2.826.0.1.1796587.1.1.1.6");

//1) basic constraints...

class CX509ExtensionBase : public CBase
/** A certificate extension base class. 
* 
* @since v6.0 */
	{
protected:
	/** Second-phase constructor.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The position from which to start decoding. */
	virtual void ConstructL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Implementation for second-phase construction.
	* 
	* This is called by ConstructL().
	* 
	* @param aBinaryData	The encoded binary representation. This is the same as
	* 						passed to ConstructL().
	* @param aPos			The position from which to start decoding. Note that the value
	* 						passed points, in effect, to the content, by passing the header data. */
	virtual void DoConstructL(const TDesC8& aBinaryData, TInt& aPos) = 0;
	};

class CX509BasicConstraintsExt : public CX509ExtensionBase
/** An X.509 certificate extension that defines basic constraints.
* 
* It indicates whether the certificate belongs to a Certificate Authority or 
* an end Entity. 
* 
* @since v6.0 */
	{
public:
	/** Creates a new CX509BasicConstraintsExt object from the specified 
	* buffer containing the binary coded representation.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509BasicConstraintsExt object. */
	IMPORT_C static CX509BasicConstraintsExt* NewL(const TDesC8& aBinaryData);
	
	/** Creates a new CX509BasicConstraintsExt object from the specified 
	* buffer containing the binary coded representation, and puts a pointer to it 
	* onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509BasicConstraintsExt object. */
	IMPORT_C static CX509BasicConstraintsExt* NewLC(const TDesC8& aBinaryData);
	
	/** Creates a new CX509BasicConstraintsExt object from the specified 
	* buffer containing the binary coded representation, starting at the specified 
	* offset.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509BasicConstraintsExt object. */
	IMPORT_C static CX509BasicConstraintsExt* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Creates a new CX509BasicConstraintsExt object from the specified 
	* buffer containing the binary coded representation, starting at the specified 
	* offset, and puts a pointer to it onto the cleanup stack.
	*
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509BasicConstraintsExt object. */
	IMPORT_C static CX509BasicConstraintsExt* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Destructor.
	* 
	* Frees all resources owned by the object, prior to its destruction. */
	virtual ~CX509BasicConstraintsExt();
	
	/** Tests whether the certificate belongs to a Certificate Authority.
	* 
	* @return	ETrue, if the certificate belongs to a Certificate Authority; 
	* 			EFalse, otherwise. */
	IMPORT_C TBool IsCA() const;
	
	/** Gets the maximum number of certificates that can follow this one in the chain.
	* 
	* @return	The number of certificates. */
	IMPORT_C TInt MaxChainLength() const;//0 if not set
private:
	CX509BasicConstraintsExt();
	void DoConstructL(const TDesC8& aBinaryData, TInt& aPos);
	TBool iIsCA;
	TInt iMaxChainLen;
	};

//2) alt name

class CX509AltNameExt : public CX509ExtensionBase
/** An X.509 certificate extension that defines an alternate name.
* 
* It appears as an Issuer Alt Name extension or a Subject Alt Name extension 
* and is used to contain extra identifying information that will not fit into 
* a Distinguished Name.
* 
* It consists of an array of X.509 General Names.
*
* @since v6.0 */
	{
public:
	/** Creates a new CX509AltNameExt object from the specified 
	* buffer containing the binary coded representation.
	*
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509AltNameExt object. */
	IMPORT_C static CX509AltNameExt* NewL(const TDesC8& aBinaryData);
	
	/** Creates a new CX509AltNameExt object from the specified 
	* buffer containing the binary coded representation, and puts a pointer to it 
	* onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509AltNameExt object. */
	IMPORT_C static CX509AltNameExt* NewLC(const TDesC8& aBinaryData);
	
	/** Creates a new CX509AltNameExt object from the specified 
	* buffer containing the binary coded representation, starting at the specified 
	* offset.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509AltNameExt object. */
	IMPORT_C static CX509AltNameExt* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Creates a new CX509AltNameExt object from the specified 
	* buffer containing the binary coded representation, starting at the specified 
	* offset, and puts a pointer to it onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509AltNameExt object. */
	IMPORT_C static CX509AltNameExt* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Destructor.
	* 
	* Frees all resources owned by the object, prior to its destruction. */
	 virtual ~CX509AltNameExt();
	
	/** Gets a reference to the array of general names that forms the alternate name 
	* extension.
	* 
	* @return	The array of general names. */
	IMPORT_C const CArrayPtrFlat<CX509GeneralName>& AltName() const;
	
	/** Checks whether the corressponding elements of two equally sized arrays of X.509 general names
	* match.
	*
	* @param aExt	An X.509 certificate extension object that defines an alternate name.
	* @return		TRUE if all the elements in the arrays match.
	*/
	IMPORT_C TBool Match(const CX509AltNameExt& aExt) const;
private:
	CX509AltNameExt();
	void DoConstructL(const TDesC8& aBinaryData, TInt& aPos);
	CArrayPtrFlat<CX509GeneralName>* iAuthorityName;
	};

class CX509KeyUsageExt : public CX509ExtensionBase
/** An X.509 certificate extension that defines the uses to which a key may be put.
* 
* @since v6.0 */
	{
public:
	/** Creates a new CX509KeyUsageExt object from the specified buffer 
	* containing the binary coded representation.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509KeyUsageExt object. */
	IMPORT_C static CX509KeyUsageExt* NewL(const TDesC8& aBinaryData);
	
	/** Creates a new CX509KeyUsageExt object from the specified buffer 
	* containing the binary coded representation, and puts a pointer to it onto 
	* the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509KeyUsageExt object. */
	IMPORT_C static CX509KeyUsageExt* NewLC(const TDesC8& aBinaryData);
	
	/** Creates a new CX509KeyUsageExt object from the specified buffer 
	* containing the binary coded representation, starting at the specified offset.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509KeyUsageExt object. */
	IMPORT_C static CX509KeyUsageExt* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Creates a new CX509KeyUsageExt object from the specified buffer 
	* containing the binary coded representation, starting at the specified offset, 
	* and puts a pointer to it onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509KeyUsageExt object. */
	IMPORT_C static CX509KeyUsageExt* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Destructor.
	* 
	* Frees all resources owned by the object, prior to its destruction. */
	virtual ~CX509KeyUsageExt();
	
	/** Tests whether a particular usage is set in the extension.
	* 
	* 
	* @param aUsage	The usage.
	* @return		ETrue, if the specific usage is set in the extension; EFalse, otherwise. */
	IMPORT_C TBool IsSet(TX509KeyUsage aUsage) const;
private:
	CX509KeyUsageExt();
	void DoConstructL(const TDesC8& aBinaryData, TInt& aPos);
	CX509BitString* iData;
	};

//4) name constraints

class CX509GeneralSubtree : public CBase
/** Provides access to the general name and the min/max lengths of the subtree. 
* 
* @since v6.0 */
	{
public:
	/**
	 * @internalComponent
	 *  
	 * Creates a new CX509GeneralSubtree object from the specified buffer containing 
	 * the encoded binary representation.
	 * 
	 * @param aBinaryData	The encoded binary representation. 
	 * @return 		The new CX509GeneralSubtree object. 
	 **/
	static CX509GeneralSubtree* NewL(const TDesC8& aBinaryData);
	
	/** 
	 * @internalComponent
	 * 
	 * Creates a new CX509GeneralSubtree object from the specified buffer containing 
	 * the encoded binary representation, and puts a pointer to it onto the cleanup stack.
	 * 
	 * @param aBinaryData	The encoded binary representation. 
	 * @return 				The new CX509GeneralSubtree object. 
	 **/
	static CX509GeneralSubtree* NewLC(const TDesC8& aBinaryData);
	
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509GeneralSubtree object from the specified buffer containing 
	 * the encoded binary representation.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @param aPos			The position from which to start decoding. 
	 * @return 				The new CX509GeneralSubtree object. 
	 **/
	static CX509GeneralSubtree* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509GeneralSubtree object from the specified buffer containing 
	 * the encoded binary representation, and puts a pointer to it onto the cleanup stack.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @param aPos			The position from which to start decoding.
	 * @return 				The new CX509GeneralSubtree object. 
	 **/
	static CX509GeneralSubtree* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Destructor.
	* 
	* Frees all resources owned by the object. */
	virtual ~CX509GeneralSubtree();
	
	/** Gets the general name.
	* 
	* @return	The general name. */
	IMPORT_C const CX509GeneralName& Name() const;
	
	/** Gets the minimum distance of the CX509GeneralSubtree object.
	* 
	* @return	The minimum distance of the CX509GeneralSubtree object. */
	IMPORT_C TInt MinDistance() const;
	
	/** Gets the maximum distance of the CX509GeneralSubtree object.
	* 
	* @return	The maximum distance of the CX509GeneralSubtree object. */
	IMPORT_C TInt MaxDistance() const;
private:
	CX509GeneralSubtree();
	void ConstructL(const TDesC8& aBinaryData, TInt& aPos);
	CX509GeneralName* iName;
	TInt iMaxDist;
	TInt iMinDist;
	};

class CX509NameConstraintsExt : public CX509ExtensionBase
/** An X.509 certificate extension that defines constraints on an entity's name.
* 
* This extension allows Certification Authorities to restrict or prevent the issuing 
* of certificates to entities whose names lie within a defined name space. 
*
*/
	{
public:
	/** Creates a new CX509NameConstraintsExt object from the specified 
	* buffer containing the binary coded representation.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509NameConstraintsExt object. */
	IMPORT_C static CX509NameConstraintsExt* NewL(const TDesC8& aBinaryData);
	
	/** Creates a new CX509NameConstraintsExt object from the specified 
	* buffer containing the binary coded representation, and puts a pointer to it 
	* onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509NameConstraintsExt object. */
	IMPORT_C static CX509NameConstraintsExt* NewLC(const TDesC8& aBinaryData);
	
	/** Creates a new CX509NameConstraintsExt object from the specified 
	* buffer containing the binary coded representation, starting at the specified offset.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509NameConstraintsExt object. */
	IMPORT_C static CX509NameConstraintsExt* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Creates a new CX509NameConstraintsExt object from the specified 
	* buffer containing the binary coded representation, starting at the specified 
	* offset, and puts a pointer to it onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509NameConstraintsExt object. */
	IMPORT_C static CX509NameConstraintsExt* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Destructor.
	* 
	* Frees all resources owned by the object, prior to its destruction. */
	IMPORT_C ~CX509NameConstraintsExt();
	
	/** Gets a reference to the array of exclusion subtree names.
	* 
	* No certificates after this one may contain names within the subtrees specified.
	* 
	* @return	The excluded subtrees. */
	IMPORT_C const CArrayPtrFlat<CX509GeneralSubtree>& ExcludedSubtrees() const;
	
	/** Gets a reference to the array of permitted subtree names.
	* 
	* All certificates after this one must contain names within the subtrees specified.
	* 
	* @return	The permitted subtrees. */
	IMPORT_C const CArrayPtrFlat<CX509GeneralSubtree>& PermittedSubtrees() const;
private:
	CX509NameConstraintsExt();
	void DoConstructL(const TDesC8& aBinaryData, TInt& aPos);
	void AddSubtreesL(CArrayPtrFlat<CX509GeneralSubtree>& aSubtrees, const TDesC8& aBinaryData);
	CArrayPtrFlat<CX509GeneralSubtree>* iExcludedSubtrees;
	CArrayPtrFlat<CX509GeneralSubtree>* iPermittedSubtrees;
	};

//5) policy constraints

class TX509PolicyConstraint
/** Defines whether a policy constraint applies.
* 
* Objects of this type are used by the X.509 certificate extension that constrains 
* the use of policies.
* 
* An object of this type encapsulates two pieces of information:
* @li	whether a specific policy applies to subsequent certificates
* @li	if a specific policy applies, the number of certificates that can follow the 
* 		current one before the policy constraint applies.
* 
* Enables a CA to constrain the use of policies in two ways: they can enforce 
* the appearance of explicit certificate policies in subsequent certificates, 
* and prevent policy mapping from being performed. 
*
*/
	{
public:
	/** 
	 * @internalComponent
	 *
	 * Constructs a TX509PolicyConstraint definition object with the specified requirement 
 	 * and countdown values.
	 * 
	 * @param aRequired	The policy requirement. Set to ETrue, if the policy constraint 
	 * 					applies; set to EFalse, otherwise.
	 * @param aCountdown	The countdown value. This is the number of certificates that 
	 * 					can follow the current one before the constraint applies. 
	 *					This only has meaning if the policy constraint applies. 
	 **/
	TX509PolicyConstraint(TBool aRequired, TInt aCountdown);
	
	/** 
	 * @internalComponent
	 *
	 * Default constructor.
	 * 
	 * Sets policy requirement to EFalse and iRequired to EFalse and the iCountdown 
	 * to zero. 
	 **/
	TX509PolicyConstraint();
	
	/** The policy requirement.
	* 
	* This has the value ETrue, if the policy constraint applies; EFalse otherwise. */
	TBool iRequired;
	
	/** The count down value.
	* 
	* Defines the number of certificates that can follow the current one before 
	* the policy constraint applies. This has no meaning if the policy constraint 
	* does not apply. */
	TInt iCountdown;
	};

class CX509PolicyConstraintsExt : public CX509ExtensionBase
/** Enables a Certification Authority to constrain the use of policies in two ways:
* @li to enforce the appearance of explicit certificate policies in subsequent certificates
* @li to prevent policy mapping from being performed.
* 
* @since v6.0 */
	{
public:
	/** Creates a new CX509PolicyConstraintsExt object from the specified buffer 
	* containing the encoded binary representation.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509PolicyConstraintsExt object. */
	IMPORT_C static CX509PolicyConstraintsExt* NewL(const TDesC8& aBinaryData);
	
	/** Creates a new Policy constraints extension object from the specified buffer 
	* containing the encoded binary representation, and puts a pointer to it onto 
	* the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509PolicyConstraintsExt object. */
	IMPORT_C static CX509PolicyConstraintsExt* NewLC(const TDesC8& aBinaryData);
	
	/** Creates a new CX509PolicyConstraintsExt object from the specified buffer 
	* containing the encoded binary representation, starting at the specified offset.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509PolicyConstraintsExt object. */
	IMPORT_C static CX509PolicyConstraintsExt* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Creates a new CX509PolicyConstraintsExt object from the specified buffer 
	* containing the encoded binary representation, and puts a pointer to it onto 
	* the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509PolicyConstraintsExt object. */
	IMPORT_C static CX509PolicyConstraintsExt* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Destructor.
	* 
	* Frees all resources owned by the object, prior to its destruction. */
	IMPORT_C ~CX509PolicyConstraintsExt();
	
	/** Gets the explicit policy constraint.
	* 
	* @return	The explicit policy constraint. */
	IMPORT_C TX509PolicyConstraint ExplicitPolicyRequired() const;
	
	/** Gets the inhibiting policy mapping.
	* 
	* @return	The inhibiting policy mapping. */
	IMPORT_C TX509PolicyConstraint InhibitPolicyMapping() const;
private:
	CX509PolicyConstraintsExt();
	void DoConstructL(const TDesC8& aBinaryData, TInt& aPos);
	TX509PolicyConstraint iRequirePolicy;
	TX509PolicyConstraint iInhibitPolicyMapping;
	};

//6) policies

class CX509PolicyQualifierInfo : public CBase
/** Gets X.509 policy qualifier information. 
* 
* @since v6.0 */
	{
public:
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509PolicyQualifierInfo object from the specified 
	 * buffer containing the encoded binary representation.
	 * 
	 * @param aBinaryData	The encoded binary representation. 
	 * @return				The new CX509PolicyQualifierInfo object. 
	 **/
	static CX509PolicyQualifierInfo* NewL(const TDesC8& aBinaryData);
	
	/**
	 * @internalComponent
	 *
	 * Creates a new CX509PolicyQualifierInfo object from the specified 
	 * buffer containing the encoded binary representation, and puts a pointer to 
	 * it onto the cleanup stack.
	 * 
	 * @param aBinaryData	The encoded binary representation. 
	 * @return				The new CX509PolicyQualifierInfo object. 
	 **/
	static CX509PolicyQualifierInfo* NewLC(const TDesC8& aBinaryData);
	
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509PolicyQualifierInfo object from the specified 
	 * buffer containing the encoded binary representation.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @param aPos			The position from which to start decoding. 
	 * @return				The new CX509PolicyQualifierInfo object. 
	 **/
	static CX509PolicyQualifierInfo* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509PolicyQualifierInfo object from the specified 
	 * buffer containing the encoded binary representation, and puts a pointer to 
	 * it onto the cleanup stack.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @param aPos			The position from which to start decoding. 
	 * @return				The new CX509PolicyQualifierInfo object. 
	 **/
	static CX509PolicyQualifierInfo* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509PolicyQualifierInfo object from an existing X.509 
	 * Policy Qualifier Information object.
	 * 
	 * @param aQualifierInfo	The CX509PolicyQualifierInfo object to be copied. 
	 * @return				The new CX509PolicyQualifierInfo object. 
	 **/
	static CX509PolicyQualifierInfo* NewL(const CX509PolicyQualifierInfo& aQualifierInfo);
	
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509PolicyQualifierInfo object from an existing X.509 
	 * Policy Qualifier Information object, and puts a pointer to it onto the cleanup stack.
	 * 
	 * @param aQualifierInfo	The CX509PolicyQualifierInfo object to be copied. 
	 * @return				The new CX509PolicyQualifierInfo object. 
	 **/
	static CX509PolicyQualifierInfo* NewLC(const CX509PolicyQualifierInfo& aQualifierInfo);
	
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509PolicyQualifierInfo object from a stream.
	 * 
	 * @return	The new CX509PolicyQualifierInfo object. 
	 **/
	static CX509PolicyQualifierInfo* NewL(RReadStream& aStream);
	
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509PolicyQualifierInfo object from a stream, and puts a pointer to it onto 
	 * the cleanup stack.
	 * 
	 * @return	The new CX509PolicyQualifierInfo object. 
	 **/
	static CX509PolicyQualifierInfo* NewLC(RReadStream& aStream);
	
	/** The destructor.
	* 
	* Frees all resources owned by the object. */
	virtual ~CX509PolicyQualifierInfo();
	
	/** Gets the policy qualifier Id.
	* 
	* @return	A non-modifiable pointer descriptor representing the policy qualifier Id. */
	IMPORT_C TPtrC Id() const;
	
	/** Gets the policy qualifier data.
	* 
	* @return	A non-modifiable pointer descriptor representing the policy qualifier data. */
	IMPORT_C TPtrC8 Data() const;

	// Internalization/Externalization
  // Externalize. Writes the data out to a stream
	/** 
	 * @internalComponent
	 * 
	 * Externalises an object of this class to a write stream.
	 *  
	 * The presence of this function means that the standard templated operator<<() 
	 * can be used to externalise objects of this class.
	 * 
	 * @param aStream	Stream to which the object should be externalised. 
	 **/
	void ExternalizeL(RWriteStream& aStream) const;

	// Internalize. Reads the data from a stream 
	/** 
	 * @internalComponent
	 *
	 * Internalises an object of this class from a read stream.
	 * 
	 * The presence of this function means that the standard templated operator>>() 
	 * can be used to internalise objects of this class.
	 * 
	 * Note that this function has assignment semantics: it replaces the old value 
	 * of the object with a new value read from the read stream.	
	 * 
	 * @param aStream	Stream from which the object should be internalised. 
	 **/
	void InternalizeL(RReadStream& aStream);
	
private:
	CX509PolicyQualifierInfo();
	void ConstructL(const TDesC8& aBinaryData, TInt& aPos);
	void ConstructL(const CX509PolicyQualifierInfo& aQualifier);
	void ConstructL(RReadStream& aStream);
	HBufC* iPolicyQualifierId;
	HBufC8* iData; //opaque (this is another any-defined-by, so could be anything)
	};

class CX509CertPolicyInfo : public CBase
/** Defines a specific policy followed by a Certification Authority.
* 
* The policy under which a certificate has been issued may contain a number 
* of these specific policies.
* 
* @see CX509CertPoliciesExt 
* @since v6.0 */
	{
public:
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509CertPolicyInfo object from the specified buffer containing the 
	 * binary coded representation.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @return				The new CX509CertPolicyInfo object. 
	 **/
	static CX509CertPolicyInfo* NewL(const TDesC8& aBinaryData);
	
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509CertPolicyInfo object from the specified buffer containing the 
	 * binary coded representation, and puts a pointer to it onto the cleanup stack.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @return				The new CX509CertPolicyInfo object. 
	 **/
	static CX509CertPolicyInfo* NewLC(const TDesC8& aBinaryData);
	
	/** 
	 * @internalComponent
	 * Creates a new CX509CertPolicyInfo object from the specified buffer containing the 
	 * binary coded representation, starting at the specified offset.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @param aPos			The offset position from which to start decoding.
	 * @return				The new CX509CertPolicyInfo object. 
	 **/
	static CX509CertPolicyInfo* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** 
	 * @internalComponent
	 * 
	 * Creates a new CX509CertPolicyInfo object from the specified buffer containing the 
	 * binary coded representation, starting at the specified offset, and puts a 
	 * pointer to it onto the cleanup stack.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @param aPos			The offset position from which to start decoding.
	 * @return				The new CX509CertPolicyInfo object. 
	 **/
	static CX509CertPolicyInfo* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Creates a new CX509CertPolicyInfo object from an existing object.
	* 
	* This is equivalent to a copy constructor.	
	* 
	* @param aPolicy		The CX509CertPolicyInfo object to be copied.
	* @return				The new CX509CertPolicyInfo object. */
	IMPORT_C static CX509CertPolicyInfo* NewL(const CX509CertPolicyInfo& aPolicy);
	
	/** Creates a new CX509CertPolicyInfo object from an existing object, and puts a pointer 
	* to it onto the cleanup stack.	
	* 
	* This is equivalent to a copy constructor.
	* 
	* @param aPolicy	The CX509CertPolicyInfo object to be copied.
	* @return			The new CX509CertPolicyInfo object. */
	IMPORT_C static CX509CertPolicyInfo* NewLC(const CX509CertPolicyInfo& aPolicy);
	
	/** Creates a new CX509CertPolicyInfo object from a stream. 
	* 
	* @return	The new CX509CertPolicyInfo object. */
	IMPORT_C static CX509CertPolicyInfo* NewL(RReadStream& aStream);
	
	/** Creates a new CX509CertPolicyInfo object from a stream, and puts a pointer to it onto 
	* the cleanup stack.
	* 
	* @return	The new CX509CertPolicyInfo object. */
	IMPORT_C static CX509CertPolicyInfo* NewLC(RReadStream& aStream);
	
	/** Destructor.
	* 
	* Frees all resources owned by the object, prior to its destruction. */
	virtual ~CX509CertPolicyInfo();
	
	/** Gets a reference to the array of policy qualifers.
	* 
	* @return	The array of policy qualifiers. */
	IMPORT_C const CArrayPtrFlat<CX509PolicyQualifierInfo>& Qualifiers() const;
	
	/** Gets the specific policy's Object Identifier (OID).
	* 
	* @return	A pointer descriptor representing the specific policy's OID. */
	IMPORT_C TPtrC Id() const;


	// Internalization/Externalization
	// Externalize. Writes the data out to a stream
	/** Externalises an object of this class to a write stream.
	* 
	* The presence of this function means that the standard templated operator<<() 
	* can be used to externalise objects of this class.
	* 
	* @param aStream	Stream to which the object should be externalised. */
	IMPORT_C void ExternalizeL(RWriteStream& aStream) const;

	// Internalize. Reads the data from a stream 
	/** Internalises an object of this class from a read stream.
	* 
	* The presence of this function means that the standard templated operator>>() 
	* can be used to internalise objects of this class.
	* 
	* Note that this function has assignment semantics: it replaces the old value 
	* of the object with a new value read from the read stream.	
	* 
	* @param aStream	Stream from which the object should be internalised. */
	IMPORT_C void InternalizeL(RReadStream& aStream);
	

private:
	CX509CertPolicyInfo();
	void ConstructL(const TDesC8& aBinaryData, TInt& aPos);
	void ConstructL(const CX509CertPolicyInfo& aInfo);
	void ConstructL(RReadStream& aStream);
	HBufC* iCertPolicyId;//OID for this policy
	CArrayPtrFlat<CX509PolicyQualifierInfo>* iQualifiers;
	};

class CX509CertPoliciesExt : public CX509ExtensionBase
/**  The policy under which this certificate has been issued.
*
* Contains further information on a client's signature.
*
* @since v6.0 */
	{
public:
	/** Creates a new CX509CertPoliciesExt object from the specified buffer 
	* containing the encoded binary representation.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The CX509CertPoliciesExt object. */
	IMPORT_C static CX509CertPoliciesExt* NewL(const TDesC8& aBinaryData);
	
	/** Creates a new CX509CertPoliciesExt object from the specified buffer 
	* containing the encoded binary representation, and puts a pointer to it onto 
	* the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The CX509CertPoliciesExt object. */
	IMPORT_C static CX509CertPoliciesExt* NewLC(const TDesC8& aBinaryData);
	
	/** Creates a new CX509CertPoliciesExt object from the specified buffer 
	* containing the encoded binary representation, starting at the specified offset.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The CX509CertPoliciesExt object. */
	IMPORT_C static CX509CertPoliciesExt* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Creates a new CX509CertPoliciesExt object from the specified buffer 
	* containing the encoded binary representation, and puts a pointer to it onto 
	* the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The CX509CertPoliciesExt object. */
	IMPORT_C static CX509CertPoliciesExt* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Destructor.
	* 
	* Frees all resources owned by the object. */
	virtual ~CX509CertPoliciesExt();
	
	/** Gets the certificate policy extension information.
	* 
	* @return	The certificate policy extension information. */
	IMPORT_C const CArrayPtrFlat<CX509CertPolicyInfo>& Policies() const;
private:
	CX509CertPoliciesExt();
	void DoConstructL(const TDesC8& aBinaryData, TInt& aPos);
	CArrayPtrFlat<CX509CertPolicyInfo>* iPolicies;
	};

//7) policy mapping

class CX509PolicyMapping : public CBase
/** A set of policy mappings. 
* 
* @since v6.0 */
	{
public:
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509PolicyMapping object from the specified buffer containing 
	 * the encoded binary representation, and puts a pointer to it onto the cleanup stack.
	 * 
	 * @param aBinaryData	The encoded binary representation. 
	 **/
	static CX509PolicyMapping* NewL(const TDesC8& aBinaryData);
	
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509PolicyMapping object from the specified buffer containing 
	 * the encoded binary representation, and puts a pointer to it onto the cleanup stack.
	 * 
	 * @param aBinaryData	The encoded binary representation. 
	 **/
	static CX509PolicyMapping* NewLC(const TDesC8& aBinaryData);
	
	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509PolicyMapping object from the specified buffer containing 
	 * the encoded binary representation, starting at the specified offset, and puts 
	 * a pointer to it onto the cleanup stack.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @param aPos			The position from which to start decoding. 
	 **/
	static CX509PolicyMapping* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** 
	 * @internalComponent
	 * 
	 * Creates a new CX509PolicyMapping object from the specified buffer containing 
	 * the encoded binary representation, starting at the specified offset, and puts 
	 * a pointer to it onto the cleanup stack.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @param aPos			The position from which to start decoding. 
	 **/
	static CX509PolicyMapping* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Creates a new CX509PolicyMapping object copied from an existing one.
	* 
	* @param aMapping	The CX509PolicyMapping object to be copied. */
	IMPORT_C static CX509PolicyMapping* NewL(const CX509PolicyMapping& aMapping);
	
	/** Creates a new CX509PolicyMapping object copied from an existing one, and 
	* puts a pointer to the object onto the cleanup stack.
	* 
	* @param aMapping	The CX509PolicyMapping object to be copied. */
	IMPORT_C static CX509PolicyMapping* NewLC(const CX509PolicyMapping& aMapping);
	
	/** The destructor.
	* 
	* Frees all resources owned by the object. */
	virtual ~CX509PolicyMapping();
	
	/** Gets the issuer policy.
	* 
	* @return	The issuer policy. */
	IMPORT_C TPtrC IssuerPolicy() const;
	
	/** Gets the subject policy.
	* 
	* @return	The subject policy. */
	IMPORT_C TPtrC SubjectPolicy() const;
private:
	CX509PolicyMapping();
	void ConstructL(const TDesC8& aBinaryData, TInt& aPos);
	void ConstructL(const CX509PolicyMapping& aMapping);
	HBufC* iIssuerPolicy;
	HBufC* iSubjectPolicy;
	};

class CX509PolicyMappingExt : public CX509ExtensionBase
/** An X.509 certificate extension that contains a set of policy mappings.
*
* A policy mapping allows a Certification Authority to declare that two certificate 
* policies are equivalent.
*
* @since v6.0 */
	{
public:
	/** Creates a new CX509PolicyMappingExt object from the specified buffer containing 
	* the binary coded representation.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509PolicyMappingExt object. */
	IMPORT_C static CX509PolicyMappingExt* NewL(const TDesC8& aBinaryData);
	
	/** Creates a new CX509PolicyMappingExt object from the specified buffer containing 
	* the binary coded representation, and puts a pointer to it onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509PolicyMappingExt object. */
	IMPORT_C static CX509PolicyMappingExt* NewLC(const TDesC8& aBinaryData);
	
	/** Creates a new CX509PolicyMappingExt object from the specified buffer containing 
	* the binary coded representation, starting at the specified offset.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509PolicyMappingExt object. */
	IMPORT_C static CX509PolicyMappingExt* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Creates a new CX509PolicyMappingExt object from the specified buffer containing 
	* the binary coded representation, starting at the specified offset, and puts 
	* a pointer to it onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509PolicyMappingExt object. */
	IMPORT_C static CX509PolicyMappingExt* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Destructor.
	* 
	* Frees all resources owned by the object, prior to its destruction. */
	virtual ~CX509PolicyMappingExt();
	
	/** Gets a reference to the array of policy mappings.
	* 
	* @return	The array of policy mappings. */
	IMPORT_C const CArrayPtrFlat<CX509PolicyMapping>& Mappings() const;
private:
	CX509PolicyMappingExt();
	void DoConstructL(const TDesC8& aBinaryData, TInt& aPos);
	CArrayPtrFlat<CX509PolicyMapping>* iPolicies;
	};

//8) authority key ID

class CX509AuthorityKeyIdExt : public CX509ExtensionBase
/** An X.509 certificate extension that provides a way to find the public key corresponding 
* to the private key used to sign the certificate.
* 
* This is referred to as the authority key ID extension.
* 
* The key may be identified by the issuer's name and the issuing certificate's 
* serial number, or by a key identifier value either derived from the public 
* key or by some method of generating unique IDs. 
* 
* @since v6.0 */
	{
public:
	/** Creates a new CX509AuthorityKeyIdExt object from the specified buffer containing 
	* the binary coded representation.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509AuthorityKeyIdExt object. */
	IMPORT_C static CX509AuthorityKeyIdExt* NewL(const TDesC8& aBinaryData);
	
	/** Creates a new CX509AuthorityKeyIdExt object from the specified buffer containing 
	* the binary coded representation, and puts a pointer to it onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509AuthorityKeyIdExt object. */
	IMPORT_C static CX509AuthorityKeyIdExt* NewLC(const TDesC8& aBinaryData);
	
	/** Creates a new CX509AuthorityKeyIdExt object from the specified buffer containing 
	* the binary coded representation, starting at the specified offset.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509AuthorityKeyIdExt object. */
	IMPORT_C static CX509AuthorityKeyIdExt* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Creates a new CX509AuthorityKeyIdExt object from the specified buffer containing 
	* the binary coded representation, starting at the specified offset, and puts 
	* a pointer to it onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509AuthorityKeyIdExt object. */
	IMPORT_C static CX509AuthorityKeyIdExt* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Destructor.
	* 
	* Frees all resources owned by the object, prior to its destruction. */
	virtual ~CX509AuthorityKeyIdExt();
	
	/** Gets the authority name.
	* 
	* @return	The authority name. */
	IMPORT_C const CArrayPtrFlat<CX509GeneralName>& AuthorityName() const;
	
	/** Gets the authority certificate serial number.
	* 
	* @return	A pointer descriptor representing the authority certificate serial number. */
	IMPORT_C TPtrC8 AuthorityCertSerialNumber() const;
	
	/** Gets the key identifier value.
	* 
	* @return	A pointer descriptor representing the key identifier value. */
	IMPORT_C TPtrC8 KeyId() const;
private:
	CX509AuthorityKeyIdExt();
	void DoConstructL(const TDesC8& aBinaryData, TInt& aPos);
	void DecodeNameL(const TDesC8& aBinaryData);
	void DecodeSerialNoL(const TDesC8& aBinaryData);
	void DecodeKeyIdL(const TDesC8& aBinaryData);
	CArrayPtrFlat<CX509GeneralName>* iAuthorityName;
	HBufC8* iAuthorityCertSerialNumber;
	HBufC8* iKeyIdentifier;
	};

//9) subject key ID

class CX509SubjectKeyIdExt : public CX509ExtensionBase
/** An X.509 certificate extension that provides a way of identifying certificates
* that contain a specific public key.
* 
* This is referred to as the subject key ID extension.
* 
* It consists of a key identifier value either derived from the public key or
* by some method of generating unique IDs.
* 
* @since v6.0 */
	{
public:
	/** Creates a new CX509SubjectKeyIdExt object from the specified buffer containing 
	* the binary coded representation.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509SubjectKeyIdExt object. */
	IMPORT_C static CX509SubjectKeyIdExt* NewL(const TDesC8& aBinaryData);
	
	/** Creates a new CX509SubjectKeyIdExt object from the specified buffer containing 
	* the binary coded representation, and puts a pointer to it onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509SubjectKeyIdExt object. */
	IMPORT_C static CX509SubjectKeyIdExt* NewLC(const TDesC8& aBinaryData);
	
	/** Creates a new CX509SubjectKeyIdExt object from the specified buffer containing 
	* the binary coded representation, starting at the specified offset.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509SubjectKeyIdExt object. */
	IMPORT_C static CX509SubjectKeyIdExt* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Creates a new CX509SubjectKeyIdExt object from the specified buffer containing 
	* the binary coded representation, starting at the specified offset, and puts 
	* a pointer to it onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509SubjectKeyIdExt object. */
	IMPORT_C static CX509SubjectKeyIdExt* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Destructor.
	* 
	* Frees all resources owned by the object, prior to its destruction. */
	IMPORT_C ~CX509SubjectKeyIdExt();
	
	/** Gets the key ID.
	* 
	* @return	A pointer descriptor representing the key ID. */
	IMPORT_C TPtrC8 KeyId() const;
private:
	CX509SubjectKeyIdExt();
	void DoConstructL(const TDesC8& aBinaryData, TInt& aPos);
	HBufC8* iKeyIdentifier;
	};

//10) extended key usage

class CX509ExtendedKeyUsageExt : public CX509ExtensionBase
/** An X.509 certificate extension that defines the extra uses to which a key may be put.
* 
* This is referred to as the extended key usage extension. 
* 
* @since v6.0 */
	{
public:
	/** Creates a new CX509ExtendedKeyUsageExt object from the specified buffer 
	* containing the binary coded representation.
	* 
	* @param aBinaryData	The encoded binary data.
	* @return				The new CX509ExtendedKeyUsageExt object. */
	IMPORT_C static CX509ExtendedKeyUsageExt* NewL(const TDesC8& aBinaryData);
	
	/** Creates a new CX509ExtendedKeyUsageExt object from the specified buffer 
	* containing the binary coded representation, and puts a pointer to it onto 
	* the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509ExtendedKeyUsageExt object. */
	IMPORT_C static CX509ExtendedKeyUsageExt* NewLC(const TDesC8& aBinaryData);
	
	/** Creates a new CX509ExtendedKeyUsageExt object from the specified buffer 
	* containing the binary coded representation, starting at the specified offset.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509ExtendedKeyUsageExt object. */
	IMPORT_C static CX509ExtendedKeyUsageExt* NewL(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Creates a new CX509ExtendedKeyUsageExt object from the specified buffer 
	* containing the binary coded representation, starting at the specified offset, 
	* and puts a pointer to it onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509ExtendedKeyUsageExt object. */
	IMPORT_C static CX509ExtendedKeyUsageExt* NewLC(const TDesC8& aBinaryData, TInt& aPos);
	
	/** Destructor.
	* 
	* Frees all resources owned by the object, prior to its destruction. */
	IMPORT_C ~CX509ExtendedKeyUsageExt();
	
	/** Gets the sequence of Object Ids (OID) that identify the key usages.
	* 
	* The sequence is held in a set of heap descriptors.
	* 
	* @return	A reference to the array of pointers to the heap descriptors that 
	* 	contain the OIDs. */
	IMPORT_C const CArrayPtrFlat<HBufC>& KeyUsages() const;
private:
	CX509ExtendedKeyUsageExt();
	void DoConstructL(const TDesC8& aBinaryData, TInt& aPos);
	CArrayPtrFlat<HBufC>* iKeyUsages;
	};

//11) authority information access

class CX509AccessDescription : public CBase
/** This class provides the access method OID and access location as used by X.509 private internet extensions
 * (authority information access).
 *
 */
	{
public:

	/** 
	 * @internalComponent
	 * 
	 * Creates a new CX509AccessDescription object from the specified buffer 
	 * containing the binary coded representation.
	 * 
	 * @param aBinaryData	The encoded binary data.
	 * @return				The new CX509AccessDescription object. 
	 **/
	static CX509AccessDescription* NewL(const TDesC8& aBinaryData);

	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509AccessDescription object from the specified buffer 
	 * containing the binary coded representation, and puts a pointer to it onto 
	 * the cleanup stack.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @return				The new CX509AccessDescription object. 
	 **/
	static CX509AccessDescription* NewLC(const TDesC8& aBinaryData);

	/** 
	 * @internalComponent
	 *
	 * Creates a new CX509AuthInfoAccessExt object from the specified buffer 
	 * containing the binary coded representation, starting at the specified offset.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @param aPos			The offset position from which to start decoding.
	 * @return				The new CX509AuthInfoAccessExt object. 
	 **/
	static CX509AccessDescription* NewL(const TDesC8& aBinaryData, TInt& aPos);

	/**
	 * @internalComponent
	 *
	 *  Creates a new CX509AccessDescription object from the specified buffer 
	 * containing the binary coded representation, starting at the specified offset, 
	 * and puts a pointer to it onto the cleanup stack.
	 * 
	 * @param aBinaryData	The encoded binary representation.
	 * @param aPos			The offset position from which to start decoding.
	 * @return				The new CX509AccessDescription object. 
	 **/
	static CX509AccessDescription* NewLC(const TDesC8& aBinaryData, TInt& aPos);

	/** Destructor. Frees all resources owned by the object, prior to its destruction. 
	*/
	virtual ~CX509AccessDescription();

	/** Gets the Access Method OID.
	*
	* @return	A non modifiable pointer descriptor to point to the access method OID.
	*/
	IMPORT_C TPtrC Method() const; 

	/** Gets the Access Location field which specifies the location where the additional 
	* information of the CA can be obtained.
	*
	* @return	A reference to access location .
	*/
	IMPORT_C const CX509GeneralName& Location() const;
private:
	CX509AccessDescription();
	void ConstructL(const TDesC8& aBinaryData, TInt& aPos);
	HBufC* iMethodId;
	CX509GeneralName* iLocation;
	};

class CX509AuthInfoAccessExt : public CX509ExtensionBase
/** An X.509 certificate extension that defines the authority information access.
 * 
 * 
 */

	{
public:

	/** Creates a new CX509AuthInfoAccessExt object from the specified buffer 
	* containing the binary coded representation.
	* 
	* @param aBinaryData	The encoded binary data.
	* @return				The new CX509AuthInfoAccessExt object. 
	*/
	IMPORT_C static CX509AuthInfoAccessExt* NewL(const TDesC8& aBinaryData);

	/** Creates a new CX509AuthInfoAccessExt object from the specified buffer 
	* containing the binary coded representation, and puts a pointer to it onto 
	* the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @return				The new CX509AuthInfoAccessExt object. 
	*/
	IMPORT_C static CX509AuthInfoAccessExt* NewLC(const TDesC8& aBinaryData);

	/** Creates a new CX509AuthInfoAccessExt object from the specified buffer 
	* containing the binary coded representation, starting at the specified offset.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509AuthInfoAccessExt object. 
	*/
	IMPORT_C static CX509AuthInfoAccessExt* NewL(const TDesC8& aBinaryData, TInt& aPos);

	/** Creates a new CX509AuthInfoAccessExt object from the specified buffer 
	* containing the binary coded representation, starting at the specified offset, 
	* and puts a pointer to it onto the cleanup stack.
	* 
	* @param aBinaryData	The encoded binary representation.
	* @param aPos			The offset position from which to start decoding.
	* @return				The new CX509AuthInfoAccessExt object. 
	*/
	IMPORT_C static CX509AuthInfoAccessExt* NewLC(const TDesC8& aBinaryData, TInt& aPos);

	/** Destructor. Frees all resources owned by the object, prior to its destruction. 
	*/
	IMPORT_C ~CX509AuthInfoAccessExt();

	/** Gets the authority access description containing the method and location of additional information of CA ,
	* who issued the certificate in which this extension appears.
	*
	* @return	A reference to the array of pointers to the authority access descriptions.
	*/
	IMPORT_C const CArrayPtrFlat<CX509AccessDescription>& AccessDescriptions() const;
private:
	CX509AuthInfoAccessExt();
	void DoConstructL(const TDesC8& aBinaryData, TInt& aPos);
	CArrayPtrFlat<CX509AccessDescription>* iAccessDescs;
	};

#endif