XFA Specification
Chapter 15, Template Specification
Template Reference
465
The certificates element
An element that holds a collection of certificate filters used to identify the signer.
<certificates
Properties:
id="xml-id"
url="cdata"
use="cdata"
usehref="cdata"
>
<issuers>
[0..1]
<oids>
[0..1]
<signing>
[0..1]
</certificates>
The certificates element is used within the following other elements:
filter proto
The
certificates
element identifies certificates used for Public Key Infrastructure (PKI), including
signing certificates, issuer certificates, and object IDs. Issuer certificates and object IDs are used to verify
the signing certificate is valid. PKI information allows the document recipient to determine whether or not
a specific public key really belongs to a specific individual. X.509v3 certificates are described in RFC 3280,
Internet X.509 Public Key Infrastructure, Certificate and Certificate Revocation List (CRL) Profile [RFC3280].
The document "A primer on electronic security"
[ElectronicSecurity]
the roles of certificates in signer identification.
The id property
A unique identifier that may be used to identify this element as a target.
The issuers property
A collection of issuer certificates that are acceptable for data signing an XML digital signature.
For more information see "The
The oids property
A collection of Object Identifiers (OIDs) which apply to signing data with an XML digital signature.
For more information see "The
The signing property
A collection of signing certificates that are acceptable for use in affixing an XML digital signature.
For more information see "The
The url property
This element is reserved for future versions of XFA.