Fields in CMS SignerInfo
version has “1”, for current version of CMS
issuerAndSerialNumber has DN, serial number
- identifies cert and, thus, indicates signer’s public key
digestAlgorithm has OID for hash used by signer
signedAttrs (optional) has set of signed attributes
- each one has OID and attribute value
signatureAlgorithm has OID and parameters
signature is result of signature algorithm, using private key on hash result of encapsulated content
unsignedAttrs (optional) has unsigned attributes