ParsedIssuingDistributionPoint

Decoded Issuing Distribution Point CRL extension (RFC 5280 §5.2.5). Constrains which certificates a CRL covers (scope, reasons, indirection).

interface ParsedIssuingDistributionPoint {
	readonly distributionPoint?: ParsedDistributionPointName;
	readonly onlyContainsUserCerts?: boolean;
	readonly onlyContainsCACerts?: boolean;
	readonly onlySomeReasons?: ParsedBitFlags<DistributionPointReason>;
	readonly indirectCrl?: boolean;
	readonly onlyContainsAttributeCerts?: boolean;
}

Properties

• readonly distributionPoint?: ParsedDistributionPointName — Where to fetch this CRL, if specified.
• readonly onlyContainsUserCerts?: boolean — When true, this CRL only covers end-entity certificates. Default false.
• readonly onlyContainsCACerts?: boolean — When true, this CRL only covers CA certificates. Default false.
• readonly onlySomeReasons?: ParsedBitFlags<DistributionPointReason> — Limits the CRL to these revocation reasons. Absent means all reasons.
• readonly indirectCrl?: boolean — When true, this CRL may contain entries from CAs other than the issuer. Default false.
• readonly onlyContainsAttributeCerts?: boolean — When true, this CRL only covers attribute certificates. Default false.