Struct Subordinate 

pub struct Subordinate {
    pub issuer: Name,
    pub subject: Name,
    pub path_len_constraint: Option<u8>,
    pub emits_ocsp_response: bool,
    pub client_auth: bool,
}

TLS Subordinate CA Certificate Profile

BR 7.1.2.6 TLS Subordinate CA Certificate Profile

Fields

issuer: Name

issuer Name, represents the name signing the certificate

subject: Name

subject Name, represents the name of the newly issued certificated

path_len_constraint: Option<u8>

pathLenConstraint INTEGER (0..MAX) OPTIONAL BasicConstraints as defined in [RFC 5280 Section 4.2.1.9].

emits_ocsp_response: bool

emits_ocsp_response will append the KeyUsages::DigitalSignature. This is meant for CAs that will reply to OCSP requests.

client_auth: bool

Allows this subordinate CA to issue certificates capable of doing client authentication

Trait Implementations

impl BuilderProfile for Subordinate

fn get_issuer(&self, _subject: &Name) -> Name

Issuer to be used for issued certificates

fn get_subject(&self) -> Name

Subject for the certificate to be used.

fn build_extensions( &self, spk: SubjectPublicKeyInfo<AnyRef<'_>, BitStringRef<'_>>, issuer_spk: SubjectPublicKeyInfo<AnyRef<'_>, BitStringRef<'_>>, tbs: &TbsCertificateInner, ) -> Result<Vec<Extension>, Error>

X509v3 extensions to be added in the certificates.