706 int Curl_parseX509(struct Curl_X509certificate *cert,  in Curl_parseX509()  argument
714   cert->certificate.header = NULL;  in Curl_parseX509()
715   cert->certificate.beg = beg;  in Curl_parseX509()
716   cert->certificate.end = end;  in Curl_parseX509()
729   beg = getASN1Element(&cert->signatureAlgorithm, beg, end);  in Curl_parseX509()
733   if(!getASN1Element(&cert->signature, beg, end))  in Curl_parseX509()
740   cert->version.header = NULL;  in Curl_parseX509()
741   cert->version.beg = &defaultVersion;  in Curl_parseX509()
742   cert->version.end = &defaultVersion + sizeof(defaultVersion);  in Curl_parseX509()
747     if(!getASN1Element(&cert->version, elem.beg, elem.end))  in Curl_parseX509()
753   cert->serialNumber = elem;  in Curl_parseX509()
755   beg = getASN1Element(&cert->signatureAlgorithm, beg, end);  in Curl_parseX509()
757   beg = getASN1Element(&cert->issuer, beg, end);  in Curl_parseX509()
764   ccp = getASN1Element(&cert->notBefore, elem.beg, elem.end);  in Curl_parseX509()
767   if(!getASN1Element(&cert->notAfter, ccp, elem.end))  in Curl_parseX509()
770   beg = getASN1Element(&cert->subject, beg, end);  in Curl_parseX509()
774   beg = getASN1Element(&cert->subjectPublicKeyInfo, beg, end);  in Curl_parseX509()
777   ccp = getASN1Element(&cert->subjectPublicKeyAlgorithm,  in Curl_parseX509()
778                        cert->subjectPublicKeyInfo.beg,  in Curl_parseX509()
779                        cert->subjectPublicKeyInfo.end);  in Curl_parseX509()
782   if(!getASN1Element(&cert->subjectPublicKey, ccp,  in Curl_parseX509()
783                      cert->subjectPublicKeyInfo.end))  in Curl_parseX509()
786   cert->issuerUniqueID.tag = cert->subjectUniqueID.tag = 0;  in Curl_parseX509()
787   cert->extensions.tag = elem.tag = 0;  in Curl_parseX509()
788   cert->issuerUniqueID.header = cert->subjectUniqueID.header = NULL;  in Curl_parseX509()
789   cert->issuerUniqueID.beg = cert->issuerUniqueID.end = "";  in Curl_parseX509()
790   cert->subjectUniqueID.beg = cert->subjectUniqueID.end = "";  in Curl_parseX509()
791   cert->extensions.header = NULL;  in Curl_parseX509()
792   cert->extensions.beg = cert->extensions.end = "";  in Curl_parseX509()
799     cert->issuerUniqueID = elem;  in Curl_parseX509()
807     cert->subjectUniqueID = elem;  in Curl_parseX509()
815     if(!getASN1Element(&cert->extensions, elem.beg, elem.end))  in Curl_parseX509()
953   struct Curl_X509certificate cert;  in Curl_extract_certinfo()  local
971   if(Curl_parseX509(&cert, beg, end))  in Curl_extract_certinfo()
975   ccp = DNtostr(&cert.subject);  in Curl_extract_certinfo()
985   ccp = DNtostr(&cert.issuer);  in Curl_extract_certinfo()
996   for(ccp = cert.version.beg; ccp < cert.version.end; ccp++)  in Curl_extract_certinfo()
1009   ccp = ASN1tostr(&cert.serialNumber, 0);  in Curl_extract_certinfo()
1019   ccp = dumpAlgo(&param, cert.signatureAlgorithm.beg,  in Curl_extract_certinfo()
1020                  cert.signatureAlgorithm.end);  in Curl_extract_certinfo()
1030   ccp = ASN1tostr(&cert.notBefore, 0);  in Curl_extract_certinfo()
1040   ccp = ASN1tostr(&cert.notAfter, 0);  in Curl_extract_certinfo()
1050   ccp = dumpAlgo(&param, cert.subjectPublicKeyAlgorithm.beg,  in Curl_extract_certinfo()
1051                  cert.subjectPublicKeyAlgorithm.end);  in Curl_extract_certinfo()
1058   do_pubkey(data, certnum, ccp, &param, &cert.subjectPublicKey);  in Curl_extract_certinfo()
1062   ccp = ASN1tostr(&cert.signature, 0);  in Curl_extract_certinfo()
1072   result = Curl_base64_encode(data, cert.certificate.beg,  in Curl_extract_certinfo()
1073                               cert.certificate.end - cert.certificate.beg,  in Curl_extract_certinfo()
1137   struct Curl_X509certificate cert;  in Curl_verifyhost()  local
1162   if(Curl_parseX509(&cert, beg, end))  in Curl_verifyhost()
1175   for(p = cert.extensions.beg; p < cert.extensions.end && matched != 1;) {  in Curl_verifyhost()
1176     p = getASN1Element(&ext, p, cert.extensions.end);  in Curl_verifyhost()
1235   q = cert.subject.beg;  in Curl_verifyhost()
1238   while(q < cert.subject.end) {  in Curl_verifyhost()
1239     q = getASN1Element(&dn, q, cert.subject.end);  in Curl_verifyhost()