验证叶子证书是通过低CA证书签署的

Question

我有Apple root Ca -G3根证书，我需要验证信任链。我需要验证叶子证书是通过低CA证书签署的。

我该如何使用java？

Answer 1

使用此片段

X509Certificate certificate =...
X509Certificate intermediate = ...
try{
    certificate.verify(intermediate.getPublicKey());
        //Verification ok.    intermediate  is the issuer
    } catch (Exception e){}
}