DSSASN1Utils { public static byte[] getAuthorityKeyIdentifier(CertificateToken certificateToken) { byte[] extensionValue = certificateToken.getCertificate().getExtensionValue(Extension.authorityKeyIdentifier.getId()); if (Utils.isArrayNotEmpty(extensionValue)) { try { ASN1Primitive extension = JcaX509ExtensionUtils.parseExtensionValue(extensionValue); AuthorityKeyIdentifier aki = AuthorityKeyIdentifier.getInstance(extension); return aki.getKeyIdentifier(); } catch (IOException e) { throw new DSSException("Unable to parse the authorityKeyIdentifier extension", e); } } return null; } private  DSSASN1Utils(); @SuppressWarnings("unchecked") static T toASN1Primitive(final byte[] bytes); static byte[] getDEREncoded(ASN1Encodable asn1Encodable); static byte[] getBEREncoded(ASN1Encodable asn1Encodable); static byte[] getEncoded(BasicOCSPResp basicOCSPResp); static Date toDate(final ASN1GeneralizedTime asn1Date); static String toString(final ASN1OctetString value); static byte[] getEncoded(final TimeStampToken timeStampToken); static byte[] getEncoded(final CMSSignedData cmsSignedData); static byte[] getDEREncoded(final TimeStampToken timeStampToken); static byte[] getDEREncoded(final CMSSignedData data); static byte[] getDEREncoded(final TimestampBinary timestampBinary); static byte[] getDEREncoded(final byte[] bytes); static ASN1Sequence getAsn1SequenceFromDerOctetString(byte[] bytes); static byte[] getAsn1SignaturePolicyDigest(DigestAlgorithm digestAlgorithm, byte[] policyBytes); static AlgorithmIdentifier getAlgorithmIdentifier(final ASN1Sequence atsHashIndexValue); static AlgorithmIdentifier getAlgorithmIdentifier(DigestAlgorithm digestAlgorithm); static ASN1Sequence getCertificatesHashIndex(final ASN1Sequence atsHashIndexValue); static ASN1Sequence getCRLHashIndex(final ASN1Sequence atsHashIndexValue); static ASN1Sequence getUnsignedAttributesHashIndex(final ASN1Sequence atsHashIndexValue); @SuppressWarnings("unchecked") static List<DEROctetString> getDEROctetStrings(final ASN1Sequence asn1Sequence); static boolean hasIdPkixOcspNoCheckExtension(CertificateToken token); static List<CertificatePolicy> getCertificatePolicies(final CertificateToken certToken); static List<String> getQCStatementsIdList(final CertificateToken certToken); static List<String> getQCTypesIdList(final CertificateToken certToken); static List<String> getQCLegislations(CertificateToken certToken); static byte[] getSki(final CertificateToken certificateToken); static byte[] getSki(final CertificateToken certificateToken, boolean computeIfMissing); static byte[] getAuthorityKeyIdentifier(CertificateToken certificateToken); static byte[] computeSkiFromCert(final CertificateToken certificateToken); static byte[] computeSkiFromCertPublicKey(final PublicKey publicKey); static boolean isSkiEqual(final byte[] ski, final CertificateToken certificateToken); static List<String> getCAAccessLocations(final CertificateToken certificate); static List<String> getOCSPAccessLocations(final CertificateToken certificate); static List<String> getCrlUrls(final CertificateToken certificateToken); static boolean isOCSPSigning(CertificateToken certToken); static boolean isExtendedKeyUsagePresent(CertificateToken certToken, ASN1ObjectIdentifier oid); static X509CertificateHolder getX509CertificateHolder(CertificateToken certToken); static CertificateToken getCertificate(final X509CertificateHolder x509CertificateHolder); static CertificateIdentifier toIssuerSerialInfo(SignerId signerId); static X500Principal toX500Principal(X500Name x500Name); static CertificateIdentifier toCertificateIdentifier(final X500Principal issuerX500Principal, final BigInteger serialNumber, final byte[] ski); static IssuerSerial getIssuerSerial(final CertificateToken certToken); static boolean x500PrincipalAreEquals(final X500Principal firstX500Principal, final X500Principal secondX500Principal); static Map<String, String> get(final X500Principal x500Principal); static X500Principal getNormalizedX500Principal(final X500Principal x500Principal); static String getUtf8String(final X500Principal x500Principal); static String getString(ASN1Encodable attributeValue); static String extractAttributeFromX500Principal(ASN1ObjectIdentifier identifier, X500PrincipalHelper principal); static String getSubjectCommonName(CertificateToken cert); static String getHumanReadableName(CertificateToken cert); static SignerInformation getFirstSignerInformation(final CMSSignedData cms); static boolean isASN1SequenceTag(byte tagByte); static Date getDate(ASN1Encodable encodable); static boolean isEmpty(AttributeTable attributeTable); static AttributeTable emptyIfNull(AttributeTable original); static List<String> getExtendedKeyUsage(CertificateToken certToken); static IssuerSerial getIssuerSerial(byte[] binaries); static CertificateIdentifier toCertificateIdentifier(IssuerSerial issuerAndSerial); static ASN1Sequence getAtsHashIndex(AttributeTable timestampUnsignedAttributes); static ASN1Sequence getAtsHashIndexByVersion(AttributeTable timestampUnsignedAttributes, 
			ASN1ObjectIdentifier atsHashIndexVersionIdentifier); static ASN1ObjectIdentifier getAtsHashIndexVersionIdentifier(AttributeTable timestampUnsignedAttributes); static List<byte[]> getOctetStringForAtsHashIndex(Attribute attribute, ASN1ObjectIdentifier atsHashIndexVersionIdentifier); static ASN1Encodable getAsn1Encodable(AttributeTable unsignedAttributes, ASN1ObjectIdentifier oid); static ASN1Set getAsn1AttributeSet(AttributeTable unsignedAttributes, ASN1ObjectIdentifier oid); static Attribute[] getAsn1Attributes(AttributeTable unsignedAttributes, ASN1ObjectIdentifier oid); static List<TimeStampToken> findArchiveTimeStampTokens(AttributeTable unsignedAttributes); static boolean isArchiveTimeStampToken(Attribute attribute); static boolean isAttributeOfType(Attribute attribute, ASN1ObjectIdentifier asn1ObjectIdentifier); static TimeStampToken getTimeStampToken(Attribute attribute); static CMSSignedData getCMSSignedData(Attribute attribute); static ASN1Encodable getAsn1Encodable(Attribute attribute); static Date getTimeStampTokenGenerationTime(TimeStampToken timeStampToken); static RevocationValues getRevocationValues(ASN1Encodable encodable); static CertificateRef getCertificateRef(OtherCertID otherCertId); static PSD2QcType getPSD2QcStatement(CertificateToken certToken); static List<String> getSubjectAlternativeNames(CertificateToken certToken); static SemanticsIdentifier getSemanticsIdentifier(CertificateToken certToken);  }
@Test public void getAuthorityKeyIdentifier() { CertificateToken cert = DSSUtils.loadCertificateFromBase64EncodedString( "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"); assertNull(DSSASN1Utils.getAuthorityKeyIdentifier(cert)); assertTrue(cert.isSelfSigned()); byte[] aKI = DSSASN1Utils.getAuthorityKeyIdentifier(certificateWithAIA); assertNotNull(aKI); byte[] aKI2 = DSSASN1Utils.getAuthorityKeyIdentifier(certificateOCSP); assertNotNull(aKI2); }