ParsedIssuingDistributionPointScope

ParsedIssuingDistributionPointScope

Which certificate kind a CRL is scoped to. RFC 5280 §5.2.5 allows at most one of onlyContainsUserCerts, onlyContainsCACerts, and onlyContainsAttributeCerts to be TRUE, so the union admits one at a time.

A flag is absent when the encoding omitted it and false when the encoding carried an explicit FALSE.

type ParsedIssuingDistributionPointScope = {
  readonly onlyContainsUserCerts?: false;
  readonly onlyContainsCACerts?: false;
  readonly onlyContainsAttributeCerts?: false
} | {
  readonly onlyContainsUserCerts: true;
  readonly onlyContainsCACerts?: false;
  readonly onlyContainsAttributeCerts?: false
} | {
  readonly onlyContainsUserCerts?: false;
  readonly onlyContainsCACerts: true;
  readonly onlyContainsAttributeCerts?: false
} | {
  readonly onlyContainsUserCerts?: false;
  readonly onlyContainsCACerts?: false;
  readonly onlyContainsAttributeCerts: true
}