Certificate properties

binary

privateKeyValidityStart

ubRights

issuerDN

SHA1Hash

usage

keyUsage

serialNumber

validityEnd

MD5Hash

subjectCN

validityStart

privateKeyValidityEnd

subjectDN

 

binary

5.0

 

 

 

The raw bytes of the certificate, as a hex encoded string.

Type

String

Access

R

issuerDN

5.0

 

 

 

The distinguished name of the issuer of the certificate, returned as an RDN object.

Type

RDN object

Access

R

keyUsage

6.0

 

 

 

An array of strings indicating the value of the certificate key usage extension. Possible values are

   kDigitalSignature    kDataEncipherment    kCRLSign

   kNonRepudiation      kKeyAgreement        kEncipherOnly

   kKeyEncipherment     kKeyCertSign         kDecipherOnly

Type

Array of Strings

Access

R

MD5Hash

5.0

 

 

 

The MD5 digest of the certificate, represented as a hex-encoded string. This provides a unique fingerprint for this certificate.

Type

String

Access

R

privateKeyValidityEnd

8.0

 

 

 

The date before which it’s legal to use the private key associated with this certificate. If the PKUP extension is not present or this property isn’t present in the extension, this represents the validity end date of the certificate itself. Before a digital ID can be used for signing, Acrobat ensures that the signing time is prior to the privateKeyValidityEnd date.

Type

Date object

Access

R

privateKeyValidityStart

8.0

 

 

 

The date after which it’s legal to use the private key associated with this certificate. If the Private Key Usage Period (PKUP) certificate extension is not present, this represents the validity start date of the certificate itself. Before a digital ID can be used for signing, Acrobat ensures that the signing time is more recent than the privateKeyValidityStart date.

Type

Date object

Access

R

SHA1Hash

5.0

 

 

 

The SHA1 digest of the certificate, represented as a hex-encoded string. This provides a unique fingerprint for this certificate.

Type

String

Access

R

serialNumber

5.0

 

 

 

A unique identifier for this certificate, used in conjunction with issuerDN.

Type

String

Access

R

subjectCN

5.0

 

 

 

The common name of the signer.

Type

String

Access

R

subjectDN

5.0

 

 

 

The distinguished name of the signer, returned as an RDN object.

Type

RDN object

Access

R

ubRights

7.0

 

 

 

The application rights that can be enabled by this certificate, returned as a generic Rights object.

Type

Rights object

Access

R

Rights Object

A Rights object has the following properties.

 

Property

Type

Access

Description

mode 

String

R

Possible values are:

Evaluation — Rights enabled by this certificate for this document are valid as long as this certificate is valid.

Production — Rights enabled by this certificate for this document are valid for eternity.

Currently, this value is not used by Adobe’s PDF viewer.

rights 

Array of Strings

R

Array of strings indicating the application rights that can be enabled by this certificate. Possible values are:

FormFillInAndSave — The right to fill in forms, excluding signature fields, and to save the modified file.

FormImportExport — The right to import and export form data.

FormAddDelete — The right to add or delete a form field.

SubmitStandalone — The right to submit a document outside a browser.

SpawnTemplate — The right to spawn page templates.

Signing — The right to sign existing form fields in a document.

AnnotModify — The right to create, delete, and modify comments.

AnnotImportExport — The right to import and export annotations.

BarcodePlaintext — The right to encode the appearance of a form field as a plain text barcode.

AnnotOnline — Allow online commenting. Enables uploading of any annotations in the document to a server and downloading of annotations from a server. Does not enable the addition of these annotations into the document.

FormOnline — Enable forms-specific online mechanisms such as SOAP or Active Data Object.

EFModify — The right to create, delete, modify, and import named embedded files. Does not apply to file attachment annotations.

d

usage

6.0

 

 

 

The purposes for which this certificate may be used within the Acrobat environment returned as a Usage object.

Type

Usage object

Access

R

Usage Object

This generic JavaScript object represents a certificate usage value in the certificate.usage property. It has the following properties.

Property

Type

Access

Description

endUserSigning 

Boolean

R

true if the certificate is usable for end-user signing.

endUserEncryption 

Boolean

R

true if the certificate is usable for end-user encryption.

Example

Encrypt the currently open document for everyone in the address book. Address book entries that contain sign-only certificates, CA certificates, no certificates, or are otherwise unsuitable for encryption, are not included in the final recipient list.

   var eng = security.getHandler( "Adobe.AAB" );

   var dc = eng.directories[0].connect();

   var recipients = dc.search();

   

   var filteredRecipients = new Array();

   for( i = 0; i < recipients.length; ++i ) {

      if( recipients[i].defaultEncryptCert &&

         recipients[i].defaultEncryptCert.usage.endUserEncryption ) {

         filteredRecipients[filteredRecipients.length] = recipients[i];

         continue;

      }

      if(recipients[i].certificates) {

         for( j = 0; j < recipients[i].certificates.length; ++j )

            if( recipients[i].certificates[j].usage.endUserEncryption ) {

               filteredRecipients[filteredRecipients.length]
                  = recipients[i];

               continue;

            }

      }

   }

   this.encryptForRecipients({

      oGroups:[{userEntities: filteredRecipients}]

   });

validityEnd

7.0.5

 

 

 

The validity end date of the certificate. Before a digital ID can be used for signing, Acrobat ensures that the signing time is prior to the validityEnd date.

Type

Date object

Access

R

validityStart

7.0.5

 

 

 

The validity start date of the certificate. Before a digital ID can be used for signing Acrobat, ensures that the signing time is more recent than the validityStart date.

Type

Date object

Access

R