T/TAF 084.2-2021 Android application certification and signature technology specification Part 2: Digital certificate format specification
T/TAF 084.2-2021 Android application certification and signature technology specification Part 2: Digital certificate format specification
Basic Information
Scope
Scope: This document defines the types of digital certificates used in the electronic certification service system of Android applications, the format of digital certificates and certificate revocation lists, and establishes template formats for digital certificates and certificate revocation lists. It is used to guide electronic certification service institutions in issuing digital certificates and certificate revocation lists in a unified format, so as to ensure the mutual trust and recognition of digital certificates among circulation nodes of Android applications. This document is applicable to electronic certification service institutions issuing certificates for Android mobile application developers, testers, and distributors. Main technical content: With the rapid development of mobile Internet, a large number of Android applications have emerged. Embedding malicious code in the development process of Android applications, or modifying normal applications to embed malicious code, is currently the main method of creating Android malicious programs. Using code signing certificates issued by CA institutions to digitally sign Android applications can ensure the authenticity and credibility of developers' identities. Digital signing technology can effectively prevent Android mobile applications from being illegally modified and provide effective traceability for Android mobile application developers. This document, as the second part of the technical specifications for Android application certification and signing, aims to guide existing CA institutions in China to issue digital certificates for Android application signers in a unified format, so as to facilitate the rapid identification of the roles and identity information corresponding to digital certificates by Android application digital signing and verification systems.