Skip to main content
Version: 4.4.0

CertificateValidationOptions Enum

Namespace: iCore.Public.Crypto.X509Certificates
Assembly: iCore.Public.Crypto.dll

Defines values that can be combined to indicate how the certificate validation process should occur.

public enum CertificateValidationOptions : int

Inheritance object 🡒 ValueType 🡒 Enum 🡒 CertificateValidationOptions

Fields​

NameValueDescription
CheckCRL1Specifies that CRL check must be performed.
CheckOCSP4Specifies that OCSP check must be performed.
CheckValidityPeriodForTrusted16Specifies that validity period check should be performed for certificates, which are treated as trusted.
Default20591Specifies the default options.
ForceCompleteChainValidationForTrusted32Specifies that the certificate chain down to CA certificate should be validated for trusted certificates
ForceRevocationCheckForRoot64Specifies that root certificate revocation check should be performed.
IgnoreBadOCSPChains128Specifies that validator must ignore bad OCSP chains during validation.
IgnoreCABasicConstraints131072To be documented.
IgnoreCAKeyUsage256Specifies that the key usage extension of the issuer (CA) certificates (when available) should be ignored and not checked for whether it allows use of such certificates for signing other certificates
IgnoreCANameConstraints262144To be documented.
IgnoreRevocationKeyUsage512Specifies that the key usage extension of the issuer (CA) certificates (when available) should be ignored and not checked for whether it allows use of such certificates for signing revocation information.
IgnoreSSLKeyUsage1024Specifies that the key usage extension of the issuer (CA) certificates (when available) should be ignored and not checked for whether it allows use of such certificates in SSL protocol communications.
IgnoreSystemTrust2048Specifies whether trusted Windows Certificate Stores should be treated as known certificates rather than trusted.
ImplicitlyTrustSelfSignedCertificates65536To be documented.
LookupCRLByNameIfDPNotPresent32768To be documented.
MandatoryCRLCheck2Specifies that CRL check is mandatory.
MandatoryOCSPCheck8Specifies that OCSP check is mandatory.
MandatoryRevocationCheck4096Specifies that a mandatory revocation check has to be performed.
None0None of the options are specified.
OfflineMode8192Specifies that off-line mode is to be used.
UseSystemStores16384Specifies that the Windows System Certificate Stores must be used.