|  | 
| enum | OpenFlags { ReadOnly = 0
, ReadWrite = 1
, MaxAllowed = 2
, OpenExistingOnly = 4
,
 IncludeArchived = 8
 }
 | 
|  | 
| enum | StoreLocation { CurrentUser = 1
, LocalMachine
 } | 
|  | 
| enum | StoreName { AddressBook = 1
, AuthRoot
, CertificateAuthority
, Disallowed
,
 My
, Root
, TrustedPeople
, TrustedPublisher
 }
 | 
|  | 
| enum | X500DistinguishedNameFlags { None = 0
, Reversed = 1
, UseSemicolons = 0x10
, DoNotUsePlusSign = 0x20
,
 DoNotUseQuotes = 0x40
, UseCommas = 0x80
, UseNewLines = 0x100
, UseUTF8Encoding = 0x1000
,
 UseT61Encoding = 0x2000
, ForceUTF8Encoding = 0x4000
 }
 | 
|  | 
| enum | X509ChainStatusFlags { NoError = 0
, NotTimeValid = 1
, NotTimeNested = 2
, Revoked = 4
,
 NotSignatureValid = 8
, NotValidForUsage = 0x10
, UntrustedRoot = 0x20
, RevocationStatusUnknown = 0x40
,
 Cyclic = 0x80
, InvalidExtension = 0x100
, InvalidPolicyConstraints = 0x200
, InvalidBasicConstraints = 0x400
,
 InvalidNameConstraints = 0x800
, HasNotSupportedNameConstraint = 0x1000
, HasNotDefinedNameConstraint = 0x2000
, HasNotPermittedNameConstraint = 0x4000
,
 HasExcludedNameConstraint = 0x8000
, PartialChain = 0x10000
, CtlNotTimeValid = 0x20000
, CtlNotSignatureValid = 0x40000
,
 CtlNotValidForUsage = 0x80000
, OfflineRevocation = 0x1000000
, NoIssuanceChainPolicy = 0x2000000
, ExplicitDistrust = 0x4000000
,
 HasNotSupportedCriticalExtension = 0x8000000
, HasWeakSignature = 0x100000
 }
 | 
|  | 
| enum | X509ChainTrustMode { System
, CustomRootTrust
 } | 
|  | 
| enum | X509ContentType { Unknown = 0
, Cert = 1
, SerializedCert = 2
, Pfx = 3
,
 Pkcs12 = 3
, SerializedStore = 4
, Pkcs7 = 5
, Authenticode = 6
 }
 | 
|  | 
| enum | X509FindType { FindByThumbprint
, FindBySubjectName
, FindBySubjectDistinguishedName
, FindByIssuerName
,
 FindByIssuerDistinguishedName
, FindBySerialNumber
, FindByTimeValid
, FindByTimeNotYetValid
,
 FindByTimeExpired
, FindByTemplateName
, FindByApplicationPolicy
, FindByCertificatePolicy
,
 FindByExtension
, FindByKeyUsage
, FindBySubjectKeyIdentifier
 }
 | 
|  | 
| enum | X509IncludeOption { None
, ExcludeRoot
, EndCertOnly
, WholeChain
 } | 
|  | 
| enum | X509KeyStorageFlags { DefaultKeySet = 0
, UserKeySet = 1
, MachineKeySet = 2
, Exportable = 4
,
 UserProtected = 8
, PersistKeySet = 0x10
, EphemeralKeySet = 0x20
 }
 | 
|  | 
| enum | X509KeyUsageFlags { None = 0
, EncipherOnly = 1
, CrlSign = 2
, KeyCertSign = 4
,
 KeyAgreement = 8
, DataEncipherment = 0x10
, KeyEncipherment = 0x20
, NonRepudiation = 0x40
,
 DigitalSignature = 0x80
, DecipherOnly = 0x8000
 }
 | 
|  | 
| enum | X509NameType { SimpleName
, EmailName
, UpnName
, DnsName
,
 DnsFromAlternativeName
, UrlName
 }
 | 
|  | 
| enum | X509RevocationFlag { EndCertificateOnly
, EntireChain
, ExcludeRoot
 } | 
|  | 
| enum | X509RevocationMode { NoCheck
, Online
, Offline
 } | 
|  | 
| enum | X509SubjectKeyIdentifierHashAlgorithm { Sha1
, ShortSha1
, CapiSha1
 } | 
|  | 
| enum | X509VerificationFlags { NoFlag = 0
, IgnoreNotTimeValid = 1
, IgnoreCtlNotTimeValid = 2
, IgnoreNotTimeNested = 4
,
 IgnoreInvalidBasicConstraints = 8
, AllowUnknownCertificateAuthority = 0x10
, IgnoreWrongUsage = 0x20
, IgnoreInvalidName = 0x40
,
 IgnoreInvalidPolicy = 0x80
, IgnoreEndRevocationUnknown = 0x100
, IgnoreCtlSignerRevocationUnknown = 0x200
, IgnoreCertificateAuthorityRevocationUnknown = 0x400
,
 IgnoreRootRevocationUnknown = 0x800
, AllFlags = 0xFFF
 }
 | 
|  |