<?xml version="1.0" encoding="UTF-8"?>
<xs:schema xmlns:cim="http://schemas.dmtf.org/wbem/wscim/1/common" xmlns:class="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_X509Certificate" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" elementFormDefault="qualified" targetNamespace="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_X509Certificate">
<xs:import namespace="http://schemas.dmtf.org/wbem/wscim/1/common" schemaLocation="http://schemas.dmtf.org/wbem/wscim/1/common.xsd"/>
<xs:element name="Subject" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Distinguished name identifying the subject of the certificate.Subject shall contain information as required by section 4.1.2.6 of RFC 3280 and shall be formatted based on RFC 4514.</cim:Qualifier>
<cim:Qualifier name="DN" type="cim:cimBoolean">true</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2.6</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="AltSubject" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Alternate subject identifier for the Certificate.</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.2.1.7</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="PublicKey" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">The DER-encoded raw public key that belongs to the subject the certificate vouches for.Only the first element of PublicKey array property shall be populated with DER encoded raw public key octet string.</cim:Qualifier>
<cim:Qualifier name="OctetString" type="cim:cimBoolean">true</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2.7</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="PublicKeySize" nillable="true" type="cim:cimUnsignedShort">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">The length of the public key represented in the PublicKey property.</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2.7</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="IsValid" nillable="true" type="cim:cimBoolean">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">IsValid represents whether the certificate is currently valid. When the certificate is revoked or expired or put on hold or invalidated for any reason IsValid shall be set to FALSE.</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="SerialNumber" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Unique number that identifies this certificate.Only the first element of the array property shall be populated.</cim:Qualifier>
<cim:Qualifier name="OctetString" type="cim:cimBoolean">true</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2.2</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="PublicKeyAlgorithm" nillable="true">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Public key algorithm.</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2.7</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="0">Unknown</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="2">RSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="3">DSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="4">ECDSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="5..32767">DMTF Reserved</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="32768..65535">Vendor Specified</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
<xs:complexType>
<xs:simpleContent>
<xs:restriction base="cim:cimAnySimpleType">
<xs:simpleType>
<xs:union>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:enumeration value="0"/>
<xs:enumeration value="2"/>
<xs:enumeration value="3"/>
<xs:enumeration value="4"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:minInclusive value="5"/>
<xs:maxInclusive value="32767"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:minInclusive value="32768"/>
<xs:maxInclusive value="65535"/>
</xs:restriction>
</xs:simpleType>
</xs:union>
</xs:simpleType>
<xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:restriction>
</xs:simpleContent>
</xs:complexType>
</xs:element>
<xs:element name="KeyUsage" nillable="true">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Key usage defines the purpose of the key. Key usage could include digital signing, key agreement, certificate signing, and more. The key usage is an extension to the X.509 specification.</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.2.1.3</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="0">Unknown</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="2">Digital Signature</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="3">Non Repudiation</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="4">Key Encipherment</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="5">Data Encipherment</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="6">Key Agreement</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="7">Key Certificate Signature</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="8..32767">DMTF Reserved</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="32768..65535">Vendor Specified</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
<xs:complexType>
<xs:simpleContent>
<xs:restriction base="cim:cimAnySimpleType">
<xs:simpleType>
<xs:union>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:enumeration value="0"/>
<xs:enumeration value="2"/>
<xs:enumeration value="3"/>
<xs:enumeration value="4"/>
<xs:enumeration value="5"/>
<xs:enumeration value="6"/>
<xs:enumeration value="7"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:minInclusive value="8"/>
<xs:maxInclusive value="32767"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:minInclusive value="32768"/>
<xs:maxInclusive value="65535"/>
</xs:restriction>
</xs:simpleType>
</xs:union>
</xs:simpleType>
<xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:restriction>
</xs:simpleContent>
</xs:complexType>
</xs:element>
<xs:element name="ExtendedKeyUsage" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">This extension indicates one or more purposes for which the certified public key may be used, in addition to or in place of the basic purposes indicated in the key usage extension.</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.2.1.13</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="PathLengthConstraint" nillable="true" type="cim:cimUnsignedShort">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">An X.509 certificate may contain an optional extension that identifies whether the subject of the certificate is a certificate authority (CA). If the subject is a CA, this property defines the number of certificates that may follow this certificate in a certification chain.</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.2.1.10</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="EncodedCertificate" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">The full content of the certificate in binary form.Only the first element of the array property shall be populated.</cim:Qualifier>
<cim:Qualifier name="OctetString" type="cim:cimBoolean">true</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="ExtensionID" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Extension identifier array for additional attributes associated with the certificate. The corresponding array element in the IsCritical property denotes whether the extension is critical. The corresponding array element in the ExtensionValue property contains the value of the extension attribute.</cim:Qualifier>
<cim:Qualifier name="ArrayType" type="cim:cimString">Indexed</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2.9</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.2</cim:Qualifier>
<cim:Qualifier name="ModelCorrespondence" type="cim:cimString">CIM_X509Certificate.IsCritical</cim:Qualifier>
<cim:Qualifier name="ModelCorrespondence" type="cim:cimString">CIM_X509Certificate.ExtensionValue</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="ExtensionValue" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Certificate extension attribute value array. The corresponding array element in the ExtensionID property contains the identifier of the certificate extension attribute. The corresponding array element in the IsCritical property denotes whether the extension is critical.</cim:Qualifier>
<cim:Qualifier name="ArrayType" type="cim:cimString">Indexed</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2.9</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.2</cim:Qualifier>
<cim:Qualifier name="ModelCorrespondence" type="cim:cimString">CIM_X509Certificate.IsCritical</cim:Qualifier>
<cim:Qualifier name="ModelCorrespondence" type="cim:cimString">CIM_X509Certificate.ExtensionID</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="IsCritical" nillable="true" type="cim:cimBoolean">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">TRUE value represents that the extension attribute is critical. The corresponding array element in the ExtensionID property contains the identifier of the extension attribute. The corresponding array element in the ExtensionValue property contains the value of the extension attribute.</cim:Qualifier>
<cim:Qualifier name="ArrayType" type="cim:cimString">Indexed</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2.9</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.2</cim:Qualifier>
<cim:Qualifier name="ModelCorrespondence" type="cim:cimString">CIM_X509Certificate.ExtensionID</cim:Qualifier>
<cim:Qualifier name="ModelCorrespondence" type="cim:cimString">CIM_X509Certificate.ExtensionValue</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="IssuerUniqueID" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">String that identifies the issuer of the certificate.</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2.8</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="SubjectUniqueID" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Certificate's unique subject identifier.</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2.8</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="TrustedRootCertificate" nillable="true" type="cim:cimBoolean">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">TRUE value represents that the certificate is a trusted root certificate.</cim:Qualifier>
<cim:Classorigin name="CIM_X509Certificate"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="Version" nillable="true">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Version of X.509.</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2.1</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 5.1.2.1</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="0">Unknown</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="2">v1</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="3">v2</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="4">v3</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="..">DMTF Reserved</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="32768..65535">Vendor Specified</cim:Qualifier>
<cim:Classorigin name="CIM_X509Infrastructure"/>
</xs:appinfo>
</xs:annotation>
<xs:complexType>
<xs:simpleContent>
<xs:restriction base="cim:cimAnySimpleType">
<xs:simpleType>
<xs:union>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:enumeration value="0"/>
<xs:enumeration value="2"/>
<xs:enumeration value="3"/>
<xs:enumeration value="4"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType>
<xs:union>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:enumeration value="1"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:minInclusive value="5"/>
<xs:maxInclusive value="32767"/>
</xs:restriction>
</xs:simpleType>
</xs:union>
</xs:simpleType>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:minInclusive value="32768"/>
<xs:maxInclusive value="65535"/>
</xs:restriction>
</xs:simpleType>
</xs:union>
</xs:simpleType>
<xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:restriction>
</xs:simpleContent>
</xs:complexType>
</xs:element>
<xs:element name="TBSCertificate" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">The To Be Signed (TBS) certificate is used as an input data to the signature algorithm when the certificate is signed or verified. Only the first element of the array property shall be populated.</cim:Qualifier>
<cim:Qualifier name="OctetString" type="cim:cimBoolean">true</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 5.1.2</cim:Qualifier>
<cim:Classorigin name="CIM_X509Infrastructure"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="MD5Fingerprint" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Digital signature algorithm that verifies data integrity by creating a 128-bit message digest or fingerprint. The fingerprint is unique to the input data and contains the binary hash of the encoded X509 object such as encoded certificate or CRL.</cim:Qualifier>
<cim:Qualifier name="OctetString" type="cim:cimBoolean">true</cim:Qualifier>
<cim:Classorigin name="CIM_X509Infrastructure"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="SHA1Fingerprint" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Secure hashing algorithm, a cryptographic message digest algorithm used to verify data integrity by making replication of the fingerprint. The fingerprint is unique to the input data and contains the binary hash of the encoded X509 object such as encoded certificate or CRL.</cim:Qualifier>
<cim:Qualifier name="OctetString" type="cim:cimBoolean">true</cim:Qualifier>
<cim:Classorigin name="CIM_X509Infrastructure"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="FingerprintDigestAlgorithms" nillable="true">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">The algorithm used for hashing the encoded X509 certificate's or CRL's message digest represented in the corresponding element of the FingerPrint array.</cim:Qualifier>
<cim:Qualifier name="ArrayType" type="cim:cimString">Indexed</cim:Qualifier>
<cim:Qualifier name="ModelCorrespondence" type="cim:cimString">CIM_X509Infrastructure.Fingerprints</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="2">MD5</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="3">SHA1</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="..">DMTF Reserved</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="32768..65535">Vendor Specified</cim:Qualifier>
<cim:Classorigin name="CIM_X509Infrastructure"/>
</xs:appinfo>
</xs:annotation>
<xs:complexType>
<xs:simpleContent>
<xs:restriction base="cim:cimAnySimpleType">
<xs:simpleType>
<xs:union>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:enumeration value="2"/>
<xs:enumeration value="3"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType>
<xs:union>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:maxInclusive value="1"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:minInclusive value="4"/>
<xs:maxInclusive value="32767"/>
</xs:restriction>
</xs:simpleType>
</xs:union>
</xs:simpleType>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:minInclusive value="32768"/>
<xs:maxInclusive value="65535"/>
</xs:restriction>
</xs:simpleType>
</xs:union>
</xs:simpleType>
<xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:restriction>
</xs:simpleContent>
</xs:complexType>
</xs:element>
<xs:element name="Fingerprints" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Fingerprints property represents the message digests of the encoded X509 certificate or CRL that uniquely identify it and can be used for the integrity verification of the X509 certificate or CRL. Fingerprint is the hash of the encoded X509 certificate or CRL that is based on the algorithm described in the corresponding element of the FingerprintDigestAlgorithms array.</cim:Qualifier>
<cim:Qualifier name="OctetString" type="cim:cimBoolean">true</cim:Qualifier>
<cim:Qualifier name="ArrayType" type="cim:cimString">Indexed</cim:Qualifier>
<cim:Qualifier name="ModelCorrespondence" type="cim:cimString">CIM_X509Infrastructure.FingerprintDigestAlgorithms</cim:Qualifier>
<cim:Classorigin name="CIM_X509Infrastructure"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="IssuerName" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Override" type="cim:cimString">IssuerName</cim:Qualifier>
<cim:Qualifier name="Description" type="cim:cimString">Issuer represents the information about the issuer of the CRL. The Issuer property shall contain information as required by section 4.1.2.4 of RFC 3280 and shall be formatted based on RFC 4514. An example of the value of the Subject parameter could be "CN=Marshall T. Rose, O=Dover Beach Consulting, OU=Sales, L=Santa Clara, ST=California, C=US".</cim:Qualifier>
<cim:Qualifier name="DN" type="cim:cimBoolean">true</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 4.1.2.4</cim:Qualifier>
<cim:Qualifier name="MappingStrings" type="cim:cimString">RFC3280.IETF|Section 5.1.2.3</cim:Qualifier>
<cim:Classorigin name="CIM_X509Infrastructure"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="InstanceID" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Key" type="cim:cimBoolean">true</cim:Qualifier>
<cim:Qualifier name="Override" type="cim:cimString">InstanceID</cim:Qualifier>
<cim:Qualifier name="Description" type="cim:cimString">Within the scope of the instantiating Namespace, InstanceID opaquely and uniquely identifies an instance of this class. In order to ensure uniqueness within the NameSpace, the value of InstanceID SHOULD be constructed using the following 'preferred' algorithm: 
&lt;OrgID&gt;:&lt;LocalID&gt; 
Where &lt;OrgID&gt; and &lt;LocalID&gt; are separated by a colon ':', and where &lt;OrgID&gt; MUST include a copyrighted, trademarked or otherwise unique name that is owned by the business entity creating/defining the InstanceID, or is a registered ID that is assigned to the business entity by a recognized global authority. (This is similar to the &lt;Schema Name&gt;_&lt;Class Name&gt; structure of Schema class names.) In addition, to ensure uniqueness, &lt;OrgID&gt; MUST NOT contain a colon (':'). When using this algorithm, the first colon to appear in InstanceID MUST appear between &lt;OrgID&gt; and &lt;LocalID&gt;. 
&lt;LocalID&gt; is chosen by the organizational entity and SHOULD not be re-used to identify different underlying (real-world) elements. If the above 'preferred' algorithm is not used, the defining entity MUST assure that the resultant InstanceID is not re-used across any InstanceIDs produced by this or other providers for this instance's NameSpace. 
For DMTF defined instances, the 'preferred' algorithm MUST be used with the &lt;OrgID&gt; set to 'CIM'.</cim:Qualifier>
<cim:Classorigin name="CIM_SignedCredential"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="Signature" nillable="true" type="cim:cimUnsignedByte">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Certificate authority's or credential owner's identifying digest that confers validity on a signed credential.</cim:Qualifier>
<cim:Qualifier name="OctetString" type="cim:cimBoolean">true</cim:Qualifier>
<cim:Classorigin name="CIM_SignedCredential"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="SignatureAlgorithm" nillable="true">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Algorithm used to generate the signature. The algorithms specified are described in RFC3279. If the value of this property is 1, "Other", then the OtherSignatureAlgorithm shall be non NULL, non blank string</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="1">Other</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="2">SHA1withDSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="3">SHA1withECDSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="4">SHA224withECDSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="5">SHA256withECDSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="6">SHA384withECDSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="7">SHA512withECDSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="8">GOST3411withGOST3410</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="9">GOST3411withECGOST3410</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="10">MD2withRSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="11">MD5withRSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="12">SHA1withRSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="13">SHA224withRSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="14">SHA256withRSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="15">SHA384withRSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="16">SHA512withRSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="17">RIPEMD160withRSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="18">RIPEMD128withRSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="19">RIPEMD256withRSA</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="20..32767">DMTF Reserved</cim:Qualifier>
<cim:Qualifier name="Values" type="cim:cimString" valuemap="32768..65535">Vendor Reserved</cim:Qualifier>
<cim:Classorigin name="CIM_SignedCredential"/>
</xs:appinfo>
</xs:annotation>
<xs:complexType>
<xs:simpleContent>
<xs:restriction base="cim:cimAnySimpleType">
<xs:simpleType>
<xs:union>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:enumeration value="1"/>
<xs:enumeration value="2"/>
<xs:enumeration value="3"/>
<xs:enumeration value="4"/>
<xs:enumeration value="5"/>
<xs:enumeration value="6"/>
<xs:enumeration value="7"/>
<xs:enumeration value="8"/>
<xs:enumeration value="9"/>
<xs:enumeration value="10"/>
<xs:enumeration value="11"/>
<xs:enumeration value="12"/>
<xs:enumeration value="13"/>
<xs:enumeration value="14"/>
<xs:enumeration value="15"/>
<xs:enumeration value="16"/>
<xs:enumeration value="17"/>
<xs:enumeration value="18"/>
<xs:enumeration value="19"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:minInclusive value="20"/>
<xs:maxInclusive value="32767"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:minInclusive value="32768"/>
<xs:maxInclusive value="65535"/>
</xs:restriction>
</xs:simpleType>
</xs:union>
</xs:simpleType>
<xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:restriction>
</xs:simpleContent>
</xs:complexType>
</xs:element>
<xs:element name="OtherSignatureAlgorithm" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">A string describing the signature algorithm when the SignatureAlgorithm property has the value 1, "Other".</cim:Qualifier>
<cim:Classorigin name="CIM_SignedCredential"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="SignatureAlgorithmOID" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Object ID of the signature algorithm.</cim:Qualifier>
<cim:Classorigin name="CIM_SignedCredential"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="Issued" nillable="true" type="cim:cimDateTime">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">The date and time when the credential was issued. Use a value of all '00000101000000.000000+000', (midnight, January 1, 1 BCE at coordinated universal time +0 minutes), if this information is not applicable. On CreateInstance, if this property is unspecified, or set to NULL, then current time is assumed.</cim:Qualifier>
<cim:Classorigin name="CIM_Credential"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="Expires" nillable="true" type="cim:cimDateTime">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">The date and time when the credential expires (and is not appropriate for use for authentication/ authorization). If this information is not applicable, Use a value of '99991231235959.999999+999', (1 microsecond before midnight, December 31, 9999 CE, at coordinated universal time + 999 minutes). 
On CreateInstance, if this property is unspecified, or set to NULL, then a value of '99991231235959.999999+999' is assumed. Note that this property does not define how the expiration is set - but that there IS an expiration. The property may be set to either a specific date/time or an interval (calculated from the Issued datetime). For example, for Certificate Authority-signed public key, the expiration is determined by the CA. Another example is a voice mail password that expires 60 days after it is set/issued.</cim:Qualifier>
<cim:Classorigin name="CIM_Credential"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="Caption" nillable="true">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">The Caption property is a short textual description (one- line string) of the object.</cim:Qualifier>
<cim:Qualifier name="MaxLen" type="cim:cimUnsignedInt">64</cim:Qualifier>
<cim:Classorigin name="CIM_ManagedElement"/>
</xs:appinfo>
</xs:annotation>
<xs:complexType>
<xs:simpleContent>
<xs:restriction base="cim:cimString">
<xs:maxLength value="64"/>
<xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:restriction>
</xs:simpleContent>
</xs:complexType>
</xs:element>
<xs:element name="Description" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">The Description property provides a textual description of the object.</cim:Qualifier>
<cim:Classorigin name="CIM_ManagedElement"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="ElementName" nillable="true" type="cim:cimString">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">A user-friendly name for the object. This property allows each instance to define a user-friendly name in addition to its key properties, identity data, and description information. 
Note that the Name property of ManagedSystemElement is also defined as a user-friendly name. But, it is often subclassed to be a Key. It is not reasonable that the same property can convey both identity and a user-friendly name, without inconsistencies. Where Name exists and is not a Key (such as for instances of LogicalDevice), the same information can be present in both the Name and ElementName properties. Note that if there is an associated instance of CIM_EnabledLogicalElementCapabilities, restrictions on this properties may exist as defined in ElementNameMask and MaxElementNameLen properties defined in that class.</cim:Qualifier>
<cim:Classorigin name="CIM_ManagedElement"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="Generation" nillable="true" type="cim:cimUnsignedLong">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Qualifier name="Description" type="cim:cimString">Generation is an optional, monotonically increasing property that may be used to identify a particular generation of the resource represented by this class.
If Generation is supported by the implementation, its value shall not be null. 
Except as otherwise specified, a value (including null) of Generation specified at creation time shall be replaced by null if Generation is not supported by the implementation or shall be a, (possibly different), non-null value if the implementation does support Generation.
After creation and if supported, Generation shall be updated, at least once per access, whenever the represented resource is modified, regardless of the source of the modification.
Note: the Generation value only needs to be updated once between references, even if the resource is updated many times. The key point is to assure that it will be different if there have been updates, not to count each update.
Note: unless otherwise specified, the value of Generation within one instance is not required to be coordinated with the value of Generation in any other instance.
Note:the semantics of the instance, (as defined by its creation class), define the underlying resource. That underlying resource may be a collection or aggregation of resources. And, in that case, the semantics of the instance further define when updates to constituent resources also require updates to the Generation of the collective resource. Default behavior of composite aggregations should be to update the Generation of the composite whenever the Generation of a component is updated.
Subclasses may define additional requirements for updates on some or all of related instances.
For a particular instance, the value of Generation may wrap through zero, but the elapsed time between wraps shall be greater than 10's of years.
This class does not require Generation to be unique across instances of other classes nor across instances of the same class that have different keys. Generation shall be different across power cycles, resets, or reboots if any of those actions results in an update. Generation may be different across power cycles, resets, or reboots if those actions do not result in an update. If the Generation property of an instance is non-null, and if any attempt to update the instance includes the Generation property, then if it doesn't match the current value, the update shall fail.
The usage of this property is intended to be further specified by applicable management profiles. 
Typically, a client will read the value of this property and then supply that value as input to an operation that modifies the instance in some means. This may be via an explicit parameter in an extrinsic method or via an embedded value in an extrinsic method or intrinsic operation.
For example: a profile may require that an intrinsic instance modification supply the Generation property and that it must match for the modification to succeed.</cim:Qualifier>
<cim:Classorigin name="CIM_ManagedElement"/>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:element name="CIM_X509Certificate" type="class:CIM_X509Certificate_Type">
<xs:annotation>
<xs:appinfo source="http://schemas.dmtf.org/wbem/wscim/1/common">
<cim:Class name="CIM_X509Certificate" superclass="CIM_X509Infrastructure"/>
<cim:Qualifier name="Version" type="cim:cimString">2.29.0</cim:Qualifier>
<cim:Qualifier name="ClassConstraint" type="cim:cimString">/* The constraints below aim to efficiently */ /* represent a singular OctetString. Each of the properties*/  /* is a single encoded stringthus only the first element */  /* needs to be populated. */ inv:self.PublicKey-&gt;size()&lt;=1 and self.SerialNumber-&gt;size()&lt;=1 and self.EncodedCertificate-&gt;size()&lt;=1</cim:Qualifier>
<cim:Qualifier name="UMLPackagePath" type="cim:cimString">CIM::User::PublicKey</cim:Qualifier>
<cim:Qualifier name="Description" type="cim:cimString">CIM_X509Certificate describes Internet X509 Public Key Infrastructure (PKI) standard based certificates. The certificates are signed by a trusted Certificate Authority (CA) or by the owner of the certificate and issued to an authenticated entity (e.g., human user, service, etc.) called the Subject in the certificate. The public key in the certificate is cryptographically related to a private key that is held and kept private by the authenticated Subject. The certificate and its related private key can then be used for establishing trust relationships and securing communications with the Subject. Refer to the Internet X.509 PKI standard (RFC 3280) for more information.</cim:Qualifier>
</xs:appinfo>
</xs:annotation>
</xs:element>
<xs:complexType name="CIM_X509Certificate_Type">
<xs:sequence>
<xs:element minOccurs="0" ref="class:AltSubject"/>
<xs:element minOccurs="0" ref="class:Caption"/>
<xs:element minOccurs="0" ref="class:Description"/>
<xs:element minOccurs="0" ref="class:ElementName"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:EncodedCertificate"/>
<xs:element minOccurs="0" ref="class:Expires"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:ExtendedKeyUsage"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:ExtensionID"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:ExtensionValue"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:FingerprintDigestAlgorithms"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:Fingerprints"/>
<xs:element minOccurs="0" ref="class:Generation"/>
<xs:element ref="class:InstanceID"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:IsCritical"/>
<xs:element minOccurs="0" ref="class:IsValid"/>
<xs:element minOccurs="0" ref="class:Issued"/>
<xs:element minOccurs="0" ref="class:IssuerName"/>
<xs:element minOccurs="0" ref="class:IssuerUniqueID"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:KeyUsage"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:MD5Fingerprint"/>
<xs:element minOccurs="0" ref="class:OtherSignatureAlgorithm"/>
<xs:element minOccurs="0" ref="class:PathLengthConstraint"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:PublicKey"/>
<xs:element minOccurs="0" ref="class:PublicKeyAlgorithm"/>
<xs:element minOccurs="0" ref="class:PublicKeySize"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:SHA1Fingerprint"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:SerialNumber"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:Signature"/>
<xs:element minOccurs="0" ref="class:SignatureAlgorithm"/>
<xs:element minOccurs="0" ref="class:SignatureAlgorithmOID"/>
<xs:element minOccurs="0" ref="class:Subject"/>
<xs:element minOccurs="0" ref="class:SubjectUniqueID"/>
<xs:element maxOccurs="unbounded" minOccurs="0" ref="class:TBSCertificate"/>
<xs:element minOccurs="0" ref="class:TrustedRootCertificate"/>
<xs:element minOccurs="0" ref="class:Version"/>
<xs:any maxOccurs="unbounded" minOccurs="0" namespace="##other" processContents="lax"/>
</xs:sequence>
<xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>
</xs:schema>
