this allows to grant specific privileges for these applications as one might deem appropriate, by defining them in a security policy.
please see the Java documentation on how to accomplish this.
the certificate used for signing can be downloaded in the download section.
for a quick reference, the main properties of all the involved certificates are listed below (this output was created with the BoarderZone KeyStoreTool):
=========================================================================
Alias: root-ca
Certificate: X.509v3 DSA certificate, serial#: 0x6 => VERIFIED SUCCESSFULLY
Subject DN: EMAILADDRESS=root.ca@boarderzone.net, CN=BoarderZone Root CA,
OU=Administration, OU=IT, O=BoarderZone.net, L=Zuerich, ST=ZH, C=CH
Issuer DN: EMAILADDRESS=root.ca@boarderzone.net, CN=BoarderZone Root CA,
OU=Administration, OU=IT, O=BoarderZone.net, L=Zuerich, ST=ZH, C=CH
Validity: 2007.06.10 - 00:32:28.000 +0200 ... 2027.06.10 - 00:32:28.000 +0200
Key usage: CA:max-path-length=2, Key certificate sign, CRL sign
Fingerprints:
MD5: 9F:8C:33:0B:F8:E6:15:30:A4:DE:9E:2E:09:4A:1F:33
SHA-1: 7C:79:CB:5C:43:14:1B:57:7E:B8:44:00:DB:68:60:B1:DC:22:20:42
=========================================================================
Alias: trust-ca
Certificate: X.509v3 DSA certificate, serial#: 0x7 => VERIFIED SUCCESSFULLY
Subject DN: EMAILADDRESS=trustmaster@boarderzone.net, CN=BoarderZone Trust CA,
OU=Administration, OU=IT, O=BoarderZone.net, L=Zuerich, ST=ZH, C=CH
Issuer DN: EMAILADDRESS=root.ca@boarderzone.net, CN=BoarderZone Root CA,
OU=Administration, OU=IT, O=BoarderZone.net, L=Zuerich, ST=ZH, C=CH
Validity: 2007.06.10 - 00:32:50.000 +0200 ... 2011.06.10 - 00:32:50.000 +0200
Key usage: CA:max-path-length=1, Key certificate sign, CRL sign
Fingerprints:
MD5: 62:72:7D:6A:81:80:C8:14:DB:99:70:70:54:C8:D4:12
SHA-1: 0E:E3:4B:F0:94:9D:E5:08:C9:E9:7D:CA:AC:9A:CA:2F:CD:15:2C:2D
=========================================================================
Alias: qa
Certificate: X.509v3 DSA certificate, serial#: 0x7 => VERIFIED SUCCESSFULLY
Subject DN: EMAILADDRESS=qa@boarderzone.net, CN=Quality Assurance,
OU=Development, OU=IT, O=BoarderZone.net, L=Zuerich, ST=ZH, C=CH
Issuer DN: EMAILADDRESS=trustmaster@boarderzone.net, CN=BoarderZone Trust CA,
OU=Administration, OU=IT, O=BoarderZone.net, L=Zuerich, ST=ZH, C=CH
Validity: 2007.06.10 - 00:33:25.000 +0200 ... 2011.06.10 - 00:33:25.000 +0200
Key usage: no-CA, Digital signature, Non-repudiation, Key encipherment
- Extended: Code signing, Microsoft Individual Code Signing (authenticode),
Microsoft Commercial Code Signing (authenticode)
Fingerprints:
MD5: 21:7C:46:4A:4B:F2:FD:84:54:A0:27:F8:C6:C4:0C:C6
SHA-1: 28:E3:50:B1:AC:B6:AF:36:39:2D:6E:D2:C4:84:98:B1:A1:BA:DB:BB
=========================================================================