Checks whether the certificate that can be uniquely identified with the given serial_nr
and issuer
is marked as
distrusted (for example by the user, or because it's part of a CRL).
Since we can't directly use [iface@Certificate] to fetch these values, you need to call these with the raw serial number and issuer as provided by the PKCS#11 fields `CKA_SERIAL_NR` and `CKA_ISSUER`.
serial_nr |
The serial number of the certificate |
issuer |
The raw issuer |
cancellable |
a Cancellable or null |
issuer_len |
The nr of bytes in |
serial_nr_len |
The nr of bytes in |
true if the certificate is marked as distrusted |