certificateChainValidationResult property

CertificateChainValidationResult certificateChainValidationResult

The certificate chain validation result.

In devices supporting full basic attestation (OnlyDefaultMode, StrictMode or StrictStrongBoxMode), when a new key is created the device must generate an associated certificate chain (or certification path) that fulfills the following criteria:

  • The root certificate is a known Google root certificate.
  • The certificate chain is valid: it does not contain a certificate in the CRL, no certificate is expired, the certificates in the chain are signed with the previous one, etc.

So, when a device supports full basic, this method returns CertificateChainValidationResult.success.

Implementation

CertificateChainValidationResult get certificateChainValidationResult;