Home | History | Annotate | Download | only in x509
      1 
      2 ## constructor exceptions 
      3 
      4 # cert path is empty
      5 CertPathReviewer.emptyCertPath.title = CertPath is empty
      6 CertPathReviewer.emptyCertPath.text = PKIXCertPathReviewer: the CertPath is empty.
      7 CertPathReviewer.emptyCertPath.summary = PKIXCertPathReviewer: the CertPath is empty.
      8 CertPathReviewer.emptyCertPath.details = PKIXCertPathReviewer: the CertPath is empty.
      9 
     10 ## name constraints processing errors
     11 
     12 # cert DN is not in the permitted tree
     13 # {0} DN as String 
     14 CertPathReviewer.notPermittedDN.title = Name constraint error: certificate DN is not permitted
     15 CertPathReviewer.notPermittedDN.text = Name constraint error: the certificate DN {0} is not permitted.
     16 CertPathReviewer.notPermittedDN.summary = Name constraint error: certificate DN is not permitted.
     17 CertPathReviewer.notPermittedDN.details = Name constraint checking error. The certificate DN {0} is not in the permitted set of DNs.
     18 
     19 # cert DN is in the excluded tree
     20 # {0} DN as String
     21 CertPathReviewer.excludedDN.title = Name constraint error: certificate DN is excluded
     22 CertPathReviewer.excludedDN.text = Name constraint error: The certificate DN {0} is excluded.
     23 CertPathReviewer.excludedDN.summary = Name constraint error: certificate DN is excluded.
     24 CertPathReviewer.excludedDN.details = Name constraint checking error. The certificate DN {0} is inside of the excluded set of DNs.
     25 
     26 # cert email is not in the permitted tree
     27 # {0} email address as String
     28 CertPathReviewer.notPermittedEmail.title = Name constraint error: not permitted email address
     29 CertPathReviewer.notPermittedEmail.text = Name constraint error: certificate contains the not permitted email address {0}.
     30 CertPathReviewer.notPermittedEmail.summary = Name constraint error: not permitted email address.
     31 CertPathReviewer.notPermittedEmail.details = Name constraint checking error. The certificate contains the email address {0} which is not in the permitted set of email addresses.
     32 
     33 # cert email is in the excluded tree
     34 # {0} email as String
     35 CertPathReviewer.excludedEmail.title = Name constraint error: excluded email address
     36 CertPathReviewer.excludedEmail.text = Name constraint error: certificate contains the excluded email address {0}. 
     37 CertPathReviewer.excludedEmail.summary = Name constraint error: excluded email address.
     38 CertPathReviewer.excludedEmail.details = Name constraint checking error. The certificate contains the email address {0} which is in the excluded set of email addresses.
     39 
     40 # cert IP is not in the permitted tree
     41 # {0} ip address as String
     42 CertPathReviewer.notPermittedIP.title = Name constraint error: not permitted IP address
     43 CertPathReviewer.notPermittedIP.text = Name constraint error: certificate contains the not permitted IP address {0}.
     44 CertPathReviewer.notPermittedIP.summary = Name constraint error: not permitted IP address.
     45 CertPathReviewer.notPermittedIP.details = Name constraint checking error. The certificate contains the IP address {0} which is not in the permitted set of IP addresses.
     46 
     47 # cert ip is in the excluded tree
     48 # {0} ip address as String
     49 CertPathReviewer.excludedIP.title = Name constraint error: excluded IP address
     50 CertPathReviewer.excludedIP.text = Name constraint error: certificate contains the excluded IP address {0}.
     51 CertPathReviewer.excludedIP.summary = Name constraint error: excluded IP address.
     52 CertPathReviewer.excludedIP.details = Name constraint checking error. The certificate contains the IP address {0} which is in the excluded set of IP addresses.
     53 
     54 # error processing the name constraints extension
     55 CertPathReviewer.ncExtError.title = Name constraint checking failed
     56 CertPathReviewer.ncExtError.text = Name constraint checking failed: there was an error processing the name constraints extension of the certificate.
     57 CertPathReviewer.ncExtError.summary = Error processing the name constraints extension.
     58 CertPathReviewer.ncExtError.details = Name constraint checking failed: there was an error processing the name constraints extension of the certificate.
     59 
     60 # error processing the subject alternative name extension
     61 CertPathReviewer.subjAltNameExtError.title = Name constraint checking failed
     62 CertPathReviewer.subjAltNameExtError.text = Name constraint checking failed: there was an error processing the subject alternative name extension of the certificate.
     63 CertPathReviewer.subjAltNameExtError.summary = Error processing the subject alternative name extension.
     64 CertPathReviewer.subjAltNameExtError.details = Name constraint checking failed: there was an error processing the subject alternative name extension of the certificate.
     65 
     66 # exception extracting subject name when checking subtrees
     67 # {0} subject Principal
     68 CertPathReviewer.ncSubjectNameError.title = Name constraint checking failed
     69 CertPathReviewer.ncSubjectNameError.text = Name constraint checking failed: there was an exception extracting the DN from the certificate.
     70 CertPathReviewer.ncSubjectNameError.summary = Name constraint checking failed: exception extracting the DN.
     71 CertPathReviewer.ncSubjectNameError.details = Name constraint checking failed: there was an exception extracting the DN from the certificate.
     72 
     73 
     74 ## path length errors
     75 
     76 # max path length extended
     77 CertPathReviewer.pathLenghtExtended.title = Maximum path length extended 
     78 CertPathReviewer.pathLenghtExtended.text = Certificate path invalid: Maximum path length extended.
     79 CertPathReviewer.pathLenghtExtended.summary = Certificate path invalid: Maximum path length extended.
     80 CertPathReviewer.pathLenghtExtended.details = Certificate path invalid: Maximum path length extended.
     81 
     82 # error reading length constraint from basic constraint extension
     83 CertPathReviewer.processLengthConstError.title = Path length checking failed
     84 CertPathReviewer.processLengthConstError.text = Path length checking failed: there was an error processing the basic constraint extension of the certificate. 
     85 CertPathReviewer.processLengthConstError.summary = Error processing the subject alternative name extension.
     86 CertPathReviewer.processLengthConstError.details = Path length checking failed: there was an error processing the basic constraint extension of the certificate.
     87 
     88 
     89 ## path length notifications
     90 
     91 # total path length as defined in rfc 3280
     92 # {0} the path length as Integer
     93 CertPathReviewer.totalPathLength.title = Total path length
     94 CertPathReviewer.totalPathLength.text = The total path length without self-signed certificates is {0}.
     95 CertPathReviewer.totalPathLength.summary = The total path length without self-signed certificates is {0}.
     96 CertPathReviewer.totalPathLength.details = The total path length without self-signed certificates, as defined in RFC 3280, is {0}.
     97 
     98 
     99 ## critical extensions errors
    100 
    101 # one unknown critical extension
    102 # {0} extension as String
    103 CertPathReviewer.unknownCriticalExt.title = Unknown critical extension
    104 CertPathReviewer.unknownCriticalExt.text = The certificate contains the unknown critical extension {0}.
    105 CertPathReviewer.unknownCriticalExt.summary = Unknown critical extension: {0}.
    106 CertPathReviewer.unknownCriticalExt.details = The certificate contains the unknown critical extension with the OID {0}.
    107 
    108 # more unknown critical extensions
    109 # {0} extensions as Set of Strings
    110 CertPathReviewer.unknownCriticalExts.title = Unknown critical extensions
    111 CertPathReviewer.unknownCriticalExts.text = The certificate contains two or more unknown critical extensions: {0}.
    112 CertPathReviewer.unknownCriticalExts.summary = Unknown critical extensions: {0}.
    113 CertPathReviewer.unknownCriticalExts.details = The certificate contains two or more unknown critical extensions with the OIDs: {0}.
    114 
    115 # error processing critical extension
    116 # {0} the message of the underlying exception
    117 # {1} the underlying exception
    118 # {2} the name of the exception
    119 CertPathReviewer.criticalExtensionError.title = Error processing a critical extension
    120 CertPathReviewer.criticalExtensionError.text = Error processing a critical extension. A {0} occurred.
    121 CertPathReviewer.criticalExtensionError.summary = Error processing a critical extension. A {0} occurred.
    122 CertPathReviewer.criticalExtensionError.details = Error processing a critical extension. A {0} occurred. Cause: {0}.
    123 
    124 # error initializing the certpath checkers
    125 # {0} the message of the underlying exception
    126 # {1} the underlying exception
    127 # {2} the name of the exception
    128 CertPathReviewer.certPathCheckerError.title = Checking critical extensions failed
    129 CertPathReviewer.certPathCheckerError.text = Checking critical extensions failed: there was a {2} initializing a CertPathChecker.
    130 CertPathReviewer.certPathCheckerError.summary = Checking critical extensions failed: {2} initializing a CertPathChecker
    131 CertPathReviewer.certPathCheckerError.details = Checking critical extensions failed: there was an {2} initializing a CertPathChecker. Cause: {0}
    132 
    133 
    134 ## check signature errors
    135 
    136 CertPathReviewer.rootKeyIsValidButNotATrustAnchor.title = Root key with valid signature but no trust anchor
    137 CertPathReviewer.rootKeyIsValidButNotATrustAnchor.text = The certificate has a valid signature, but is no trust anchor
    138 CertPathReviewer.rootKeyIsValidButNotATrustAnchor.summary = The certificate has a valid signature, but is no trust anchor
    139 CertPathReviewer.rootKeyIsValidButNotATrustAnchor.details = The certificate has a valid signature, but is no trust anchor
    140 
    141 # trustanchor found, but certificate validation failed
    142 CertPathReviewer.trustButInvalidCert.title = Trust anchor found, but different public key
    143 CertPathReviewer.trustButInvalidCert.text = A trust anchor was found. But it has a different public key, than was used to issue the first certificate of the cert path.
    144 CertPathReviewer.trustButInvalidCert.summary = A trust anchor was found. But it has a different public key, than was used to issue the first certificate of the cert path.
    145 CertPathReviewer.trustButInvalidCert.details = A trust anchor was found. But it has a different public key, than was used to issue the first certificate of the cert path.
    146 
    147 # trustanchor - cannot extract issuer
    148 CertPathReviewer.trustAnchorIssuerError.title = Finding trust anchor failed 
    149 CertPathReviewer.trustAnchorIssuerError.text = Finding trust anchor failed: cannot extract issuer from certificate.
    150 CertPathReviewer.trustAnchorIssuerError.summary = Finding trust anchor failed: cannot extract issuer from certificate.
    151 CertPathReviewer.trustAnchorIssuerError.details = Finding trust anchor failed: cannot extract issuer from certificate.
    152 
    153 # no trustanchor was found for the certificate path
    154 # {0} issuer of the root certificate of the path
    155 # {1} number of trusted root certificates (trustanchors) provided
    156 CertPathReviewer.noTrustAnchorFound.title = No trusted root certificate found
    157 CertPathReviewer.noTrustAnchorFound.text = The root certificate of the certificate path was issued by a CA that is not in the the trusted-root-certificate-store used for the path validation. The name of the CA is "{0}".
    158 CertPathReviewer.noTrustAnchorFound.summary = The root certificate of the certificate path was issued by a CA that is not in the the trusted-root-certificate-store used for the path validation.
    159 CertPathReviewer.noTrustAnchorFound.details = The root certificate of the certificate path was issued by a CA that is not in the the trusted-root-certificate-store used for the path validation. The name of the CA is "{0}". The trusted-root-certificate store contains {1} CA(s).
    160 
    161 # conflicting trust anchors
    162 # {0} number of trustanchors found (Integer)
    163 # {1} the ca name
    164 CertPathReviewer.conflictingTrustAnchors.title = Corrupt trust root store
    165 CertPathReviewer.conflictingTrustAnchors.text = Warning: corrupt trust root store: There are {0} trusted public keys for the CA "{1}" - please ensure with CA which is the correct key.
    166 CertPathReviewer.conflictingTrustAnchors.summary = Warning: corrupt trust root store: There are {0} trusted public keys for the CA "{1}" - please ensure with CA which is the correct key.
    167 CertPathReviewer.conflictingTrustAnchors.details = Warning: corrupt trust root store: There are {0} trusted public keys for the CA "{1}" - please ensure with CA which is the correct key.
    168 
    169 # trustanchor DN is invalid
    170 # {0} DN of the Trustanchor
    171 CertPathReviewer.trustDNInvalid.title = DN of TrustAnchor is improperly specified
    172 CertPathReviewer.trustDNInvalid.text = The DN of the TrustAnchor is improperly specified: {0}.
    173 CertPathReviewer.trustDNInvalid.summary = The DN of the TrustAnchor is improperly specified.
    174 CertPathReviewer.trustDNInvalid.details = The DN of the TrustAnchor is improperly specified: {0}. It's not a valid X.500 name. See RFC 1779 or RFC 2253. 
    175 
    176 # trustanchor public key algorithm error
    177 CertPathReviewer.trustPubKeyError.title = Error processing public key of the trust anchor
    178 CertPathReviewer.trustPubKeyError.text = Error processing public key of the trust anchor.
    179 CertPathReviewer.trustPubKeyError.summary = Error processing public key of the trust anchor.
    180 CertPathReviewer.trustPubKeyError.details = Error processing public key of the trust anchor. Could not extract the AlorithmIdentifier for the key.
    181 
    182 # can not verifiy signature: issuer public key unknown
    183 CertPathReviewer.NoIssuerPublicKey.title = Can not verify the certificate signature 
    184 CertPathReviewer.NoIssuerPublicKey.text = Can not verify the certificate signature: Issuer public key is unknown.
    185 CertPathReviewer.NoIssuerPublicKey.summary = Can not verify the certificate signature: Issuer public key is unknown.
    186 CertPathReviewer.NoIssuerPublicKey.details = Can not verify the certificate signature: Issuer public key is unknown.
    187 
    188 # signature can not be verified
    189 # {0} message of the underlying exception (english)
    190 # {1} the underlying exception
    191 # {2} the name of the exception
    192 CertPathReviewer.signatureNotVerified.title = Certificate signature invalid
    193 CertPathReviewer.signatureNotVerified.text = The certificate signature is invalid. A {2} occurred.
    194 CertPathReviewer.signatureNotVerified.summary = The certificate signature is invalid.
    195 CertPathReviewer.signatureNotVerified.details = The certificate signature is invalid. A {2} occurred. Cause: {0}
    196 
    197 # certificate expired
    198 # {0} the date the certificate expired 
    199 CertPathReviewer.certificateExpired.title = Certificate is expired
    200 CertPathReviewer.certificateExpired.text = Could not validate the certificate. Certificate expired on {0,date} {0,time,full}.
    201 CertPathReviewer.certificateExpired.summary = Certificate expired on {0,date} {0,time,full}.
    202 CertPathReviewer.certificateExpired.details = Could not validate the certificate. Certificate expired on {0,date} {0,time,full}. 
    203 
    204 # certificate not yet valid
    205 # {0} the date from which on the certificate is valid
    206 CertPathReviewer.certificateNotYetValid.title = Certificate is not yet valid
    207 CertPathReviewer.certificateNotYetValid.text = Could not validate the certificate. Certificate is not valid until {0,date} {0,time,full}.
    208 CertPathReviewer.certificateNotYetValid.summary = Certificate is not valid until {0,date} {0,time,full}.
    209 CertPathReviewer.certificateNotYetValid.details = Could not validate the certificate. Certificate is not valid until {0,date} {0,time,full}. 
    210 
    211 # certificate invalid issuer DN
    212 # {0} expected issuer DN as String
    213 # {1} found issuer DN as String
    214 CertPathReviewer.certWrongIssuer.title = Issuer of certificate not valid
    215 CertPathReviewer.certWrongIssuer.text = Issuer of certificate is not valid. Expected {0}, but found {1}. 
    216 CertPathReviewer.certWrongIssuer.summary = Issuer of certificate is not valid. 
    217 CertPathReviewer.certWrongIssuer.details = Issuer of certificate is not valid. Expected {0}, but found {1}.
    218 
    219 # intermediate certificate is no ca cert
    220 CertPathReviewer.noCACert.title = Certificate is no CA certificate
    221 CertPathReviewer.noCACert.text = Intermediate certificate is no CA certificate.
    222 CertPathReviewer.noCACert.summary = The certificate is no CA certificate.
    223 CertPathReviewer.noCACert.details = The certificate is no CA certificate but used as one.
    224 
    225 # cert laks basic constraints
    226 CertPathReviewer.noBasicConstraints.title = Certificate has no basic constraints
    227 CertPathReviewer.noBasicConstraints.text = Intermediate certificate has no basic constraints.
    228 CertPathReviewer.noBasicConstraints.summary = Intermediate certificate has no basic constraints.
    229 CertPathReviewer.noBasicConstraints.details = Intermediate certificate has no basic constraints.
    230 
    231 # error processing basic constraints
    232 CertPathReviewer.errorProcesingBC.title = Error processing the basic constraints extension
    233 CertPathReviewer.errorProcesingBC.text = There was an error while processing the basic constraints extension of this certificate.
    234 CertPathReviewer.errorProcesingBC.summary = Error processing the basic constraints extension. 
    235 CertPathReviewer.errorProcesingBC.details = There was an error while processing the basic constraints extension of this certificate.
    236 
    237 # certificate not usable for signing certs
    238 CertPathReviewer.noCertSign.title = Key not usable for signing certificates
    239 CertPathReviewer.noCertSign.text = The key usage constraint does not allow the use of this certificate key for signing certificates.
    240 CertPathReviewer.noCertSign.summary = The certificate key can not be used for signing certificates.
    241 CertPathReviewer.noCertSign.details = The key usage constraint does not allow the use of this certificate key for signing certificates.
    242 
    243 # error processing public key
    244 CertPathReviewer.pubKeyError.title = Error processing public key
    245 CertPathReviewer.pubKeyError.text = Error processing public key of the certificate.
    246 CertPathReviewer.pubKeyError.summary = Error processing public key of the certificate.
    247 CertPathReviewer.pubKeyError.details = Error processing public key of the certificate. Could not extract the AlorithmIdentifier for the key.
    248 
    249 
    250 ## check signatures notifications
    251 
    252 #
    253 # trust anchor has no keyusage certSign
    254 CertPathReviewer.trustKeyUsage.title = Trust anchor key usage
    255 CertPathReviewer.trustKeyUsage.text = The trust anchor is not alloed to sign certificates. 
    256 CertPathReviewer.trustKeyUsage.summary = The trust anchor is not alloed to sign certificates.
    257 CertPathReviewer.trustKeyUsage.details = The trust anchor is not alloed to sign certificates.
    258 
    259 # certificate path validation date
    260 # {0} date for which the cert path is validated
    261 # {1} current date
    262 CertPathReviewer.certPathValidDate.title = Certificate path validation date
    263 CertPathReviewer.certPathValidDate.text = The certificate path was applied on {0,date} {0,time,full}. It was checked at {1,date} {1,time,full}.
    264 CertPathReviewer.certPathValidDate.summary = The certificate path was validated for {0,date} {0,time,full}. It was checked at {1,date} {1,time,full}.
    265 CertPathReviewer.certPathValidDate.details = The certificate path was validated for {0,date} {0,time,full}. It was checked at {1,date} {1,time,full}.
    266 
    267 
    268 ## check policy errors
    269 
    270 # error processing certificate policy extension
    271 CertPathReviewer.policyExtError.title = Policy checking failed
    272 CertPathReviewer.policyExtError.text = Policy checking failed: there was an error processing the certificate policy extension. 
    273 CertPathReviewer.policyExtError.summary = Error processing the certificate policy extension.
    274 CertPathReviewer.policyExtError.details = Policy checking failed: there was an error processing the certificate policy extension. 
    275 
    276 # error processing policy constraints extension
    277 CertPathReviewer.policyConstExtError.title = Policy checking failed
    278 CertPathReviewer.policyConstExtError.text = Policy checking failed: there was an error processing the policy constraints extension.
    279 CertPathReviewer.policyConstExtError.summary = Error processing the policy constraints extension.
    280 CertPathReviewer.policyConstExtError.details = Policy checking failed: there was an error processing the policy constraints extension.
    281 
    282 # error processing policy mapping extension
    283 CertPathReviewer.policyMapExtError.title = Policy checking failed
    284 CertPathReviewer.policyMapExtError.text = Policy checking failed: there was an error processing the policy mapping extension.
    285 CertPathReviewer.policyMapExtError.summary = Error processing the policy mapping extension.
    286 CertPathReviewer.policyMapExtError.details = Policy checking failed: there was an error processing the policy mapping extension.
    287 
    288 # error processing inhibit any policy extension
    289 CertPathReviewer.policyInhibitExtError.title = Policy checking failed
    290 CertPathReviewer.policyInhibitExtError.text = Policy checking failed: there was an error processing the inhibit any policy extension.
    291 CertPathReviewer.policyInhibitExtError.summary = Error processing the inhibit any policy extension.
    292 CertPathReviewer.policyInhibitExtError.details = Policy checking failed: there was an error processing the inhibit any policy extension.
    293 
    294 # error building qualifier set
    295 CertPathReviewer.policyQualifierError.title = Policy checking failed
    296 CertPathReviewer.policyQualifierError.text = Policy checking failed: error building the policy qualifier set.
    297 CertPathReviewer.policyQualifierError.summary = Policy checking failed: error building the policy qualifier set.
    298 CertPathReviewer.policyQualifierError.details = Policy checking failed: error building the policy qualifier set.
    299 
    300 # no valid policy tree - explicit policy required
    301 CertPathReviewer.noValidPolicyTree.title = Policy checking failed
    302 CertPathReviewer.noValidPolicyTree.text = Policy checking failed: no valid policy tree found when one expected.
    303 CertPathReviewer.noValidPolicyTree.summary = Policy checking failed: no valid policy tree found when one expected.
    304 CertPathReviewer.noValidPolicyTree.details = Policy checking failed: no valid policy tree found when one expected.
    305 
    306 # expicit policy requested, but no policy available
    307 CertPathReviewer.explicitPolicy.title = Policy checking failed
    308 CertPathReviewer.explicitPolicy.text = Policy checking failed: explicit policy requested but no policy available.
    309 CertPathReviewer.explicitPolicy.summary = Policy checking failed: explicit policy requested but no policy available.
    310 CertPathReviewer.explicitPolicy.details = Policy checking failed: explicit policy requested but no policy available.
    311 
    312 # path processing failed on policy
    313 CertPathReviewer.invalidPolicy.title = Path processing failed on policy
    314 CertPathReviewer.invalidPolicy.text = Path processing failed on policy.
    315 CertPathReviewer.invalidPolicy.summary = Path processing failed on policy.
    316 CertPathReviewer.invalidPolicy.details = Path processing failed on policy.
    317 
    318 # invalid policy mapping
    319 CertPathReviewer.invalidPolicyMapping.title = Invalid policy mapping 
    320 CertPathReviewer.invalidPolicyMapping.text = Certificate contains an invalid policy mapping.
    321 CertPathReviewer.invalidPolicyMapping.summary = Certificate contains an invalid policy mapping. 
    322 CertPathReviewer.invalidPolicyMapping.details = Certificate contains a policy mapping including the value any policy which is invalid.
    323 
    324 ## check CRL notifications
    325 
    326 # found local valid CRL
    327 # {0} thisUpdate of the CRL
    328 # {1} nextUpdate of the CRL
    329 CertPathReviewer.localValidCRL.title = Found valid local CRL
    330 CertPathReviewer.localValidCRL.text = Found a valid CRL in local certstore. Issued on {0,date}, next update {1,date}.
    331 CertPathReviewer.localValidCRL.summary = Found a valid CRL in local certstore. Issued on {0,date}, next update {1,date}.
    332 CertPathReviewer.localValidCRL.details = Found a valid CRL in local certstore. Issued on {0,date}, next update {1,date}.
    333 
    334 
    335 # found matching CRL, but not valid
    336 # {0} thisUpdate of the CRL
    337 # {1} nextUpdate of the CRL
    338 CertPathReviewer.localInvalidCRL.title = Local CRL outdated
    339 CertPathReviewer.localInvalidCRL.text = Did not use a matching CRL in a local certstore, because it is outdated. Issued on {0,date}, next update {1,date}.
    340 CertPathReviewer.localInvalidCRL.summary = Did not use a matching CRL in a local certstore, because it is outdated. Issued on {0,date}, next update {1,date}.
    341 CertPathReviewer.localInvalidCRL.details = Did not use a matching CRL in a local certstore, because it is outdated. Issued on {0,date}, next update {1,date}.
    342 
    343 # found a valid crl at crl distribution point
    344 # {0} thisUpdate of the CRL
    345 # {1} nextUpdate of the CRL
    346 # {2} the url of the distribution point
    347 CertPathReviewer.onlineValidCRL.title = Found valid CRL at CRL distribution point
    348 CertPathReviewer.onlineValidCRL.text = Found a valid CRL at: {2}. Issued on {0,date}, next update on {1,date}.
    349 CertPathReviewer.onlineValidCRL.summary = Found a valid CRL at: {2}. Issued on {0,date}, next update on {1,date}.
    350 CertPathReviewer.onlineValidCRL.details = Found a valid CRL at: {2}. Issued on {0,date}, next update on {1,date}.
    351 
    352 # found an invalid CRL at crl distribution point
    353 # {0} thisUpdate of the CRL
    354 # {1} nextUpdate of the CRL
    355 # {2} the url of the distribution point
    356 CertPathReviewer.onlineInvalidCRL.title = Outdated CRL at CRL distribution point
    357 CertPathReviewer.onlineInvalidCRL.text = The CRL loaded from {2} was outdated. Issued on {0,date}, next update on {1,date}.
    358 CertPathReviewer.onlineInvalidCRL.summary = The CRL loaded from {2} was outdated. Issued on {0,date}, next update on {1,date}.
    359 CertPathReviewer.onlineInvalidCRL.details = The CRL loaded from {2} was outdated. Issued on {0,date}, next update on {1,date}.
    360 
    361 #found a CRL at a crl distribution point, but issued by another CA
    362 # {0} issuer of the CRL
    363 # {1} expected issuer
    364 # {2} the url of the distribution point
    365 CertPathReviewer.onlineCRLWrongCA.title = CRL from wrong issuer at CRL distribution point
    366 CertPathReviewer.onlineCRLWrongCA.text = The CRL loaded from {2} has was issued by {0}, excpected {1}.
    367 CertPathReviewer.onlineCRLWrongCA.summary = The CRL loaded from {2} has a wrong issuer.
    368 CertPathReviewer.onlineCRLWrongCA.details = The CRL loaded from {2} has was issued by {0}, excpected {1}.
    369 
    370 # Certificate not revoked
    371 CertPathReviewer.notRevoked.title = Certificate not revoked
    372 CertPathReviewer.notRevoked.text = The certificate was not revoked.
    373 CertPathReviewer.notRevoked.summary = The certificate was not revoked.
    374 CertPathReviewer.notRevoked.details = The certificate was not revoked.
    375 
    376 # CRL found: certificate was revoked, but after the validationDate
    377 # {0} the date the certificate was revoked
    378 # {1} the reason for revoking the certificate
    379 CertPathReviewer.revokedAfterValidation.title = Certificate was revoked after the validation date
    380 CertPathReviewer.revokedAfterValidation.text = The certificate was revoked after the validation date at {0,date} {0,time,full}. Reason: {1}.
    381 CertPathReviewer.revokedAfterValidation.summary = The certificate was revoked after the validation date at {0,date} {0,time,full}.
    382 CertPathReviewer.revokedAfterValidation.details = The certificate was revoked after the validation date at {0,date} {0,time,full}. Reason: {1}.
    383 
    384 # updated crl available
    385 # {0} date since when the update is available
    386 CertPathReviewer.crlUpdateAvailable.title = CRL update available
    387 CertPathReviewer.crlUpdateAvailable.text = An update for the CRL of this certificate is available since {0,date} {0,time,full}.
    388 CertPathReviewer.crlUpdateAvailable.summary = An update for the CRL of this certificate is available since {0,date} {0,time,full}.
    389 CertPathReviewer.crlUpdateAvailable.details = An update for the CRL of this certificate is available since {0,date} {0,time,full}.
    390 
    391 # crl distribution point url
    392 # {0} the crl distribution point url as String
    393 CertPathReviewer.crlDistPoint.title = CRL distribution point
    394 CertPathReviewer.crlDistPoint.text = A CRL can be obtained from: {0}.
    395 CertPathReviewer.crlDistPoint.summary = A CRL can be obtained from: {0}.
    396 CertPathReviewer.crlDistPoint.details = A CRL can be obtained from: {0}.
    397 
    398 # ocsp location
    399 # {0} the url on which the ocsp service can be found
    400 CertPathReviewer.ocspLocation.title = OCSP responder location
    401 CertPathReviewer.ocspLocation.text = OCSP responder location: {0}.
    402 CertPathReviewer.ocspLocation.summary = OCSP responder location: {0}.
    403 CertPathReviewer.ocspLocation.details = OCSP responder location: {0}.
    404 
    405 # unable to get crl from crl distribution point
    406 # {0} the url of the distribution point
    407 # {1} the message of the occurred exception
    408 # {2} the occurred exception
    409 # {3} the name of the exception
    410 CertPathReviewer.loadCrlDistPointError.title = Cannot load CRL from CRL distribution point
    411 CertPathReviewer.loadCrlDistPointError.text = Unable to load a CRL from: {0}. A {3} occurred.
    412 CertPathReviewer.loadCrlDistPointError.summary = Unable to load a CRL from: {0}. A {3} occurred.
    413 CertPathReviewer.loadCrlDistPointError.details = Unable to load a CRL from: {0}. A {3} occurred. Cause: {1}.
    414 
    415 # no crl found in certstores
    416 # {0} the issuers which we searched for
    417 # {1} list of crl issuer names that are found in the certstores
    418 # {2} number of crls in the certstores
    419 CertPathReviewer.noCrlInCertstore.title = No matching CRL found in local CRL store
    420 CertPathReviewer.noCrlInCertstore.text = No matching CRL was found in the provided local CRL store.
    421 CertPathReviewer.noCrlInCertstore.summary = No matching CRL was found in the provided local CRL store.
    422 CertPathReviewer.noCrlInCertstore.details = No matching CRL was found in the provided local CRL store. \
    423 No CRL was found for the selector "{0}". The {2} CRL(s) in the certstores are from "{1}".
    424 
    425 
    426 ## check CRL exceptions
    427 
    428 # cannot extract issuer from certificate
    429 CertPathReviewer.crlIssuerException.title = CRL checking failed
    430 CertPathReviewer.crlIssuerException.text = CRL checking failed: cannot extract issuer from certificate.
    431 CertPathReviewer.crlIssuerException.summary = CRL checking failed: cannot extract issuer from certificate.
    432 CertPathReviewer.crlIssuerException.details = CRL checking failed: cannot extract issuer from certificate.
    433 
    434 # cannot extract crls
    435 # {0} message from the underlying exception
    436 # {1} the underlying exception
    437 # {2} the name of the exception
    438 CertPathReviewer.crlExtractionError.title = CRL checking failed
    439 CertPathReviewer.crlExtractionError.text = CRL checking failed: Cannot extract CRL from CertStore. There was a {2}.
    440 CertPathReviewer.crlExtractionError.summary = CRL checking failed: Cannot extract CRL from CertStore. There was a {2}.
    441 CertPathReviewer.crlExtractionError.details = CRL checking failed: Cannot extract CRL from CertStore. There was a {2}. Cause: {0}.
    442 
    443 # Issuer certificate key usage extension does not permit crl signing
    444 CertPathReviewer.noCrlSigningPermited.title = CRL checking failed
    445 CertPathReviewer.noCrlSigningPermited.text = CRL checking failed: issuer certificate does not permit CRL signing.
    446 CertPathReviewer.noCrlSigningPermited.summary = CRL checking failed: issuer certificate does not permit CRL signing.
    447 CertPathReviewer.noCrlSigningPermited.details = CRL checking failed: issuer certificate does not permit CRL signing.
    448 
    449 # can not verify crl: issuer public key unknown
    450 CertPathReviewer.crlNoIssuerPublicKey.title = CRL checking failed
    451 CertPathReviewer.crlNoIssuerPublicKey.text = CRL checking failed: Can not verify the CRL: Issuer public key is unknown.
    452 CertPathReviewer.crlNoIssuerPublicKey.summary = CRL checking failed: Can not verify the CRL: Issuer public key is unknown.
    453 CertPathReviewer.crlNoIssuerPublicKey.details = CRL checking failed: Can not verify the CRL: Issuer public key is unknown.
    454 
    455 # crl verification failed
    456 CertPathReviewer.crlVerifyFailed.title = CRL checking failed
    457 CertPathReviewer.crlVerifyFailed.text = CRL checking failed: CRL signature is invalid.
    458 CertPathReviewer.crlVerifyFailed.summary = CRL checking failed: CRL signature is invalid.
    459 CertPathReviewer.crlVerifyFailed.details = CRL checking failed: CRL signature is invalid.
    460 
    461 # no valid CRL found
    462 CertPathReviewer.noValidCrlFound.title = CRL checking failed
    463 CertPathReviewer.noValidCrlFound.text = CRL checking failed: no valid CRL found.
    464 CertPathReviewer.noValidCrlFound.summary = CRL checking failed: no valid CRL found.
    465 CertPathReviewer.noValidCrlFound.details = CRL checking failed: no valid CRL found.
    466 
    467 # No base CRL for delta CRL
    468 CertPathReviewer.noBaseCRL.title = CRL checking failed
    469 CertPathReviewer.noBaseCRL.text = CRL checking failed: no base CRL found for delta CRL.
    470 CertPathReviewer.noBaseCRL.summary = CRL checking failed: no base CRL found for delta CRL.
    471 CertPathReviewer.noBaseCRL.details = CRL checking failed: no base CRL found for delta CRL.
    472 
    473 # certificate revoked
    474 # {0} the date the certificate was revoked
    475 # {1} the reason for revoking the certificate
    476 CertPathReviewer.certRevoked.title = Certificate was revoked
    477 CertPathReviewer.certRevoked.text = The certificate was revoked at {0,date} {0,time,full}. Reason: {1}.
    478 CertPathReviewer.certRevoked.summary = The certificate was revoked at {0,date} {0,time,full}.
    479 CertPathReviewer.certRevoked.details = The certificate was revoked at {0,date} {0,time,full}. Reason: {1}.
    480 
    481 # error processing issuing distribution point extension
    482 CertPathReviewer.distrPtExtError.title = CRL checking failed
    483 CertPathReviewer.distrPtExtError.text = CRL checking failed: there was an error processing the issuing distribution point extension. 
    484 CertPathReviewer.distrPtExtError.summary = Error processing the issuing distribution point extension.
    485 CertPathReviewer.distrPtExtError.details = CRL checking failed: there was an error processing the issuing distribution point extension.
    486 
    487 # error processing crl distribution points extension
    488 CertPathReviewer.crlDistPtExtError.title = CRL checking failed
    489 CertPathReviewer.crlDistPtExtError.text = CRL checking failed: there was an error processing the crl distribution points extension.
    490 CertPathReviewer.crlDistPtExtError.summary = Error processing the crl distribution points extension.
    491 CertPathReviewer.crlDistPtExtError.details = CRL checking failed: there was an error processing the crl distribution points extension.
    492 
    493 # error processing the authority info access extension
    494 CertPathReviewer.crlAuthInfoAccError.title = CRL checking failed
    495 CertPathReviewer.crlAuthInfoAccError.text = CRL checking failed: there was an error processing the authority info access extension.
    496 CertPathReviewer.crlAuthInfoAccError.summary = Error processing the authority info access extension.
    497 CertPathReviewer.crlAuthInfoAccError.details = CRL checking failed: there was an error processing the authority info access extension.
    498 
    499 # error processing delta crl indicator extension
    500 CertPathReviewer.deltaCrlExtError.title = CRL checking failed
    501 CertPathReviewer.deltaCrlExtError.text = CRL checking failed: there was an error processing the delta CRL indicator extension. 
    502 CertPathReviewer.deltaCrlExtError.summary = Error processing the delta CRL indicator extension.
    503 CertPathReviewer.deltaCrlExtError.details = CRL checking failed: there was an error processing the delta CRL indicator extension.
    504 
    505 # error porcessing crl number extension
    506 CertPathReviewer.crlNbrExtError.title = CRL checking failed
    507 CertPathReviewer.crlNbrExtError.text = CRL checking failed: there was an error processing the CRL number extension.
    508 CertPathReviewer.crlNbrExtError.summary = Error processing the CRL number extension.
    509 CertPathReviewer.crlNbrExtError.details = CRL checking failed: there was an error processing the CRL number extension.
    510 
    511 # error processing crl reason code extension
    512 CertPathReviewer.crlReasonExtError.title = CRL checking failed
    513 CertPathReviewer.crlReasonExtError.text = CRL checking failed: there was an error processing the CRL reason code extension.
    514 CertPathReviewer.crlReasonExtError.summary = Error processing the CRL reason code extension.
    515 CertPathReviewer.crlReasonExtError.details = CRL checking failed: there was an error processing the CRL reason code extension.
    516 
    517 # error processing basic constraints extension
    518 CertPathReviewer.crlBCExtError.title = CRL checking failed
    519 CertPathReviewer.crlBCExtError.text = CRL checking failed: there was an error processing the basic constraints extension.
    520 CertPathReviewer.crlBCExtError.summary = Error processing the basic constraints extension.
    521 CertPathReviewer.crlBCExtError.details = CRL checking failed: there was an error processing the basic constraints extension.
    522 
    523 # CA Cert CRL only contains user certificates
    524 CertPathReviewer.crlOnlyUserCert.title = CRL checking failed
    525 CertPathReviewer.crlOnlyUserCert.text = CRL checking failed: CRL only contains user certificates.
    526 CertPathReviewer.crlOnlyUserCert.summary = CRL checking failed: CRL only contains user certificates.
    527 CertPathReviewer.crlOnlyUserCert.details = CRL checking failed: CRL for CA certificate only contains user certificates.
    528 
    529 # End CRL only contains CA certificates
    530 CertPathReviewer.crlOnlyCaCert.title = CRL checking failed
    531 CertPathReviewer.crlOnlyCaCert.text = CRL checking failed: CRL only contains CA certificates.
    532 CertPathReviewer.crlOnlyCaCert.summary = CRL checking failed: CRL only contains CA certificates.
    533 CertPathReviewer.crlOnlyCaCert.details = CRL checking failed: CRL for end certificate only contains CA certificates.
    534 
    535 # onlyContainsAttributeCerts boolean is asserted
    536 CertPathReviewer.crlOnlyAttrCert.title = CRL checking failed
    537 CertPathReviewer.crlOnlyAttrCert.text = CRL checking failed: CRL only contains attribute certificates.
    538 CertPathReviewer.crlOnlyAttrCert.summary = CRL checking failed: CRL only contains attribute certificates.
    539 CertPathReviewer.crlOnlyAttrCert.details = CRL checking failed: CRL only contains attribute certificates.
    540 
    541 
    542 ## QcStatement notifications
    543 
    544 # unkown statement
    545 # {0} statement OID
    546 # {1} statement as ANS1Sequence
    547 CertPathReviewer.QcUnknownStatement.title = Unknown statement in QcStatement extension 
    548 CertPathReviewer.QcUnknownStatement.text = Unknown statement in QcStatement extension: OID = {0}
    549 CertPathReviewer.QcUnknownStatement.summary = Unknown statement in QcStatement extension: OID = {0}
    550 CertPathReviewer.QcUnknownStatement.details = Unknown statement in QcStatement extension: OID = {0}, statement = {1}
    551 
    552 # QcLimitValue Alpha currency code
    553 # {0} currency code
    554 # {1} limit value
    555 # {2} monetary value as MonetaryValue
    556 CertPathReviewer.QcLimitValueAlpha.title = Transaction Value Limit
    557 CertPathReviewer.QcLimitValueAlpha.text = This certificate has a limit for the transaction value: {1,number, ###,###,###,##0.00#} {0}.
    558 CertPathReviewer.QcLimitValueAlpha.summary = Transaction value limit: {1,number, ###,###,###,##0.00#} {0}.
    559 CertPathReviewer.QcLimitValueAlpha.details = This certificate has a limitation on the value of transaction for which this certificate can be used to the specified amount, according to the Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures, as implemented in the law of the country specified in the issuer field of this certificate. The limit for this certificate is {1,number, ###,###,###,##0.00#} {0}.
    560 
    561 # QcLimitValue Numeric currency code
    562 # {0} currency code
    563 # {1} limit value
    564 # {2} monetary value as MonetaryValue
    565 CertPathReviewer.QcLimitValueNum.title = Transaction Value Limit
    566 CertPathReviewer.QcLimitValueNum.text = This certificate has a limit for the transaction value: {1,number, ###,###,###,##0.00#} of currency {0} (See RFC 4217 for currency codes).
    567 CertPathReviewer.QcLimitValueNum.summary = Transaction value limit: {1,number, ###,###,###,##0.00#} of currency {0} (See RFC 4217 for currency codes).
    568 CertPathReviewer.QcLimitValueNum.details = This certificate has a limitation on the value of transaction for which this certificate can be used to the specified amount, according to the Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures, as implemented in the law of the country specified in the issuer field of this certificate. The limit for this certificate is {1,number, ###,###,###,##0.00#} of currency {0} (See RFC 4217 for currency codes).
    569 
    570 # QcSSCD
    571 CertPathReviewer.QcSSCD.title = QcSSCD Statement
    572 CertPathReviewer.QcSSCD.text = (SSCD) The issuer claims that for the certificate where this statement appears that the private key associated with the public key in the certificate is protected according to Annex III of the Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures.
    573 CertPathReviewer.QcSSCD.summary = (SSCD) The issuer claims that for the certificate where this statement appears that the private key associated with the public key in the certificate is protected according to Annex III of the Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures.
    574 CertPathReviewer.QcSSCD.details = (SSCD) The issuer claims that for the certificate where this statement appears that the private key associated with the public key in the certificate is protected according to Annex III of the Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures.
    575 
    576 # QcEuCompliance
    577 CertPathReviewer.QcEuCompliance.title = Qualified Certificate
    578 CertPathReviewer.QcEuCompliance.text = This certificate is issued as a Qualified Certificate according Annex I and II of the Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures, as implemented in the law of the country specified in the issuer field of this certificate.
    579 CertPathReviewer.QcEuCompliance.summary = This certificate is issued as a Qualified Certificate according Annex I and II of the Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures, as implemented in the law of the country specified in the issuer field of this certificate.
    580 CertPathReviewer.QcEuCompliance.details = This certificate is issued as a Qualified Certificate according Annex I and II of the Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures, as implemented in the law of the country specified in the issuer field of this certificate. 
    581 
    582 ## QcStatement errors
    583 
    584 # error processing the QcStatement extension
    585 CertPathReviewer.QcStatementExtError.title = Error processing the qc statements extension
    586 CertPathReviewer.QcStatementExtError.text = Error processing the qc statements extension.
    587 CertPathReviewer.QcStatementExtError.summary = Error processing the qc statements extension.
    588 CertPathReviewer.QcStatementExtError.details = Error processing the qc statements extension.
    589 
    590 ## unknown/generic errors
    591 CertPathReviewer.unknown.title = Unexpected Error 
    592 CertPathReviewer.unknown.text = Unexpected Error {0}
    593 CertPathReviewer.unknown.summary = Unexpected Error 
    594 CertPathReviewer.unknown.details = Unexpected Error {0}
    595 
    596 #
    597 # crl reasons
    598 #
    599 unspecified = Unspecified
    600 keyCompromise = Key Compromise
    601 cACompromise = CA Compromise
    602 affiliationChanged = Affiliation Changed
    603 superseded = Superseded
    604 cessationOfOperation = Cessation of Operation
    605 certificateHold = Certificate Hold
    606 unknown = Unknown
    607 removeFromCRL = Remove from CRL
    608 privilegeWithdrawn = Privilege Withdrawn
    609 aACompromise = AA Compromise
    610 
    611 #
    612 #
    613 #
    614 missingIssuer = The missing certificate was issued by
    615 missingSerial = with the serial number
    616