Trusted Certificate Store

Last Updated : Apr 28, 2022 |
Prolog information
Feature
Support
Notes
Import: RSA 1024-4096 key size
Yes
RSA 1024, 2048 and 4096 bit public keys must be supported. Any other sizes are optional.
Import of RSA public key less than 1024 or greater than 4096 bits to be rejected with an informative error.
Import: Optional private key
Yes
No private key will actually be imported.
Informative message (neither warning or error) that private key has not been imported
Import: Certificate checks
Yes
Minimum checks for:
  • Version (v3)
  • Start + end (present)
  • Subject Name (present)
  • Issuer Name (present)
  • Data integrity (e.g. hash)
Reject + descriptive error if a check fails
Import: Certificate up to 4KB
Yes
Certificates can be varying sizes
Import: Formats
Yes
  • DER format. ‘.cer’ ‘.der’ and ‘.crt’ file extension.
  • PEM format. ‘.cer’ ‘.pem’ and ‘.crt’ file extension.
  • PKCS#12 format. ‘.p12’ and ‘.pfx’ file extension. With or without password.
  • Pasted from clipboard in PEM format (optional)
Import: Up to 19 other certificates in same file
Yes
All included certificates, up to 20 total. More than 20 in one file can be optionally supported.
View: TCS Certificate
Yes
Minimum viewable attributes (From CEC016: 147434–030–P1):
  • Serial Number
  • Subject Name
  • Issuer Name
  • Validity Period (that includes notBefore and notAfter dates)
  • Thumbprint (Hash of the certificate)
  • Subject Alternative Names
  • Key Usage Extensions
  • Extended Key Usage
Warnings/errors as per 147434–080–P1:
  • Error displayed that a certificate has expired
  • Warning displayed that a certificate is nearing expiry (within 60 days).
Export: Formats
Yes
Export formats:
  • DER format. ‘.cer’ ‘.der’ and ‘.crt’ file extension.
  • PEM format. ‘.cer’ ‘.pem’ and ‘.crt’ file extension.
  • PKCS#12 (optional)