Mandatory if To what use can the public key in BIT {digitalSignature trustAnchorCellKeyUsage is this Cell be put STRING (0) , SEQUENCE present keyAgreement (4) , keyCertSign (5)} , DEFAULT Should be absent unless: INTEGER trustAnchorCellUsage management the is or deviceType eSME and gSME; the operating the supplier Device has chosen to use a separate key agreement Key Pair in relation to prepayment top ups to the Device and this is a replacement of the corresponding certificate The list of certificates At least one Provide the certificates needed to SEQUENCE certificationPathCertificates needed for Certification Certificate must undertake Certification Path OF Path Validation be present since Validation of the new root will never end entity certificate against the directly sign any root public key held on the Device. end entity The number of these may be less certificate than the number of replacement certificates (e.g. a supplier may replace all of its certificates but may only need to supply one Certification Authority Certificate to link them all back to root The date-time at which OPTIONAL This field may only be present if executionDateTime the are replacements
trustAnchorCellKeyUsage BIT STRING {digitalSignature (0) , keyAgreement (4) , keyCertSign (5)} , Mandatory if SEQUENCE is present To what use can the public key in this Cell be put trustAnchorCellUsage INTEGER DEFAULT management Should be absent unless: the deviceType is eSME or gSME; and the supplier operating the Device has chosen to use a separate key agreement Key Pair in relation to prepayment top ups to the Device and this is a replacement of the corresponding certificate certificationPathCertificates SEQUENCE OF The list of certificates needed for Certification Path Validation At least one Certificate must be present since root will never directly sign any end entity certificate Provide the certificates needed to undertake Certification Path Validation of the new end entity certificate against the root public key held on the Device. The number of these may be less than the number of replacement certificates (e.g. a supplier may replace all of its certificates but may only need to supply one Certification Authority Certificate to link them all back to root executionDateTime The date-time at which the replacements are OPTIONAL This field may only be present if
GBCS_v0.8.1.docx