验证叶证书是否由子CA证书签名

Question

我有Apple Root CA - G3根证书，我需要验证信任链。我需要验证叶证书是否由子CA证书签名。

我如何用Java做到这一点？

Answer 1

使用此代码段

X509Certificate certificate =...
X509Certificate intermediate = ...
try{
    certificate.verify(intermediate.getPublicKey());
        //Verification ok.    intermediate  is the issuer
    } catch (Exception e){}
}