@base <http://www.openlinksw.com/schemas/cert> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix foaf: <http://xmlns.com/foaf/0.1/> .
@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix ns5: <http://creativecommons.org/ns#> .
@prefix wdrs: <http://www.w3.org/2007/05/powder-s#> .
@prefix schema: <http://schema.org/> .
@prefix xhv: <http://www.w3.org/1999/xhtml/vocab#> .
@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
@prefix ns10: <http://open.vocab.org/terms/> .

<../DAV/data/turtle/cert.ttl>
    ns5:License <http://creativecommons.org/licenses/by-sa/3.0/> ;
    ns5:attributionName "OpenLink Software" ;
    ns5:attributionURL <../dataspace/organization/openlink#this> ;
    dcterms:subject <#> ;
    schema:about <#> ;
    schema:author <../#this> ;
    schema:comment "Description of OpenLink Software Certificate Ontology and Related Items."@en ;
    schema:creator <../#this> ;
    schema:dateCreated "2014-01-03T13:00:00-05:00"^^<http://www.w3.org/2001/XMLSchema#dateTime> ;
    schema:dateModified "2018-09-03T16:00:00-05:00"^^<http://www.w3.org/2001/XMLSchema#dateTime> ;
    schema:name "About Certificates and Related Items "^^<http://www.w3.org/2001/XMLSchema#string> ;
    a schema:CreativeWork, schema:TechArticle, foaf:Document ;
    xhv:canonical <> ;
    xhv:describes <#> ;
    xhv:license <http://creativecommons.org/licenses/by/4.0/deed.en_US> ;
    rdfs:comment "This is a turtle document that uses Linked Data oriented content to describe an OpenLink Identity & Certification Ontology"@en ;
    rdfs:label "OpenLink Identity and Certification Ontology Description Document (Turtle)" ;
    owl:sameAs <../data/turtle/cert.ttl> ;
    foaf:primaryTopic <#> .

<../data/turtle/cert.ttl>
    ns5:attributionName "OpenLink Software" ;
    ns5:attributionURL <../dataspace/organization/openlink#this> ;
    ns5:license <http://creativecommons.org/licenses/by-sa/3.0/> ;
    dcterms:subject <#> ;
    schema:about <#> ;
    schema:author <../#this> ;
    schema:comment "Description of OpenLink Software Certificate Ontology and Related Items."@en ;
    schema:creator <../#this> ;
    schema:dateCreated "2014-01-03T13:00:00-05:00"^^<http://www.w3.org/2001/XMLSchema#dateTime> ;
    schema:dateModified "2018-09-03T16:00:00-05:00"^^<http://www.w3.org/2001/XMLSchema#dateTime> ;
    schema:name "About Certificates and Related Items "^^<http://www.w3.org/2001/XMLSchema#string> ;
    a schema:CreativeWork, schema:TechArticle, foaf:Document ;
    xhv:canonical <> ;
    xhv:describes <#> ;
    xhv:license <http://creativecommons.org/licenses/by/4.0/deed.en_US> ;
    rdfs:comment "This is a turtle document that uses Linked Data oriented content to describe an OpenLink Identity and Certification ontology"@en ;
    rdfs:label "OpenLink Identity and Certification Ontology Description Document (Turtle)" ;
    owl:sameAs <../DAV/data/turtle/cert.ttl> ;
    foaf:primaryTopic <#> .

<>
    ns5:license <http://creativecommons.org/licenses/by-sa/3.0/> ;
    dcterms:subject <#> ;
    schema:creator <../#this> ;
    a schema:TechArticle, foaf:Document ;
    rdfs:comment "This is a document that uses Linked Data oriented content to describe OpenLink Identity and Certification Ontology."@en ;
    rdfs:label "OpenLink Identity and Certification Ontology Description Document"^^<http://www.w3.org/2001/XMLSchema#string> ;
    foaf:primaryTopic <#> ;
    foaf:topic <#Certificate>, <#IAN>, <#NetID>, <#SAN>, <#SparqlNamedGraph>, <#WebID>, <#digestURI>, <#docSignature>, <#fingerprint>, <#fingerprint-digest>, <#hasCertificate>, <#hasDBStorage>, <#hasNetID>, <#hasPart>, <#hasPublicKey>, <#hasWebID>, <#identifiedBy>, <#issuer>, <#notAfter>, <#notBefore>, <#onBehalfOf>, <#serial>, <#signature>, <#signatureAlgorithm>, <#statementSignature>, <#subject>, <#trustedOrigin> .

<#>
    ns10:defines <#Certificate>, <#IAN>, <#NetID>, <#SAN>, <#SparqlNamedGraph>, <#WebID>, <#digestURI>, <#docSignature>, <#fingerprint>, <#fingerprint-digest>, <#hasCertificate>, <#hasDBStorage>, <#hasNetID>, <#hasPart>, <#hasPublicKey>, <#hasWebID>, <#identifiedBy>, <#issuer>, <#notAfter>, <#notBefore>, <#onBehalfOf>, <#serial>, <#signature>, <#signatureAlgorithm>, <#statementSignature>, <#subject>, <#trustedOrigin> ;
    dcterms:created "2014-05-18T13:00:00-05:00"^^<http://www.w3.org/2001/XMLSchema#dateTime> ;
    dcterms:modified "2018-09-01T10:00:00-05:00"^^<http://www.w3.org/2001/XMLSchema#dateTime> ;
    schema:about <#Certificate>, <#IAN>, <#NetID>, <#SAN>, <#SparqlNamedGraph>, <#WebID>, <#digestURI>, <#docSignature>, <#fingerprint>, <#fingerprint-digest>, <#hasCertificate>, <#hasDBStorage>, <#hasNetID>, <#hasPart>, <#hasPublicKey>, <#hasWebID>, <#identifiedBy>, <#issuer>, <#notAfter>, <#notBefore>, <#onBehalfOf>, <#serial>, <#signature>, <#signatureAlgorithm>, <#statementSignature>, <#subject>, <#trustedOrigin> ;
    schema:creator <../#this> ;
    a owl:Ontology ;
    rdfs:comment """Ontology that defines entity and relation types used to describe certificates and relations
  for identifying Agents using different types of resolvable identifiers. Examples include WebID, NewID, public keys, issuers, fingerprint etc."""@en ;
    rdfs:label "OpenLink Identity and Certification Ontology" ;
    owl:imports <http://purl.org/dc/terms/>, <../ontology/acl#>, <http://www.w3.org/1999/02/22-rdf-syntax-ns#>, <http://www.w3.org/ns/pim/space#> ;
    owl:versionInfo "1.0.0"^^<http://www.w3.org/2001/XMLSchema#string> ;
    wdrs:describedby <> .

<#Certificate>
    a owl:Class ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "Certificate" ;
    rdfs:subClassOf <http://www.w3.org/ns/auth/cert#Certificate> ;
    owl:equivalentClass <http://www.w3.org/ns/auth/cert#X509Certificate>, <http://xmlns.com/wot/0.1/PubKey> .

<#IAN>
    a rdf:Property, owl:ObjectProperty ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "IAN" ;
    rdfs:range rdfs:Resource ;
    skos:altLabel "Certificate Issuer Alternative Name (IAN)" .

<#NetID>
    a owl:Class ;
    rdfs:comment "Network ID (NetID) -- personal, unique identifier."@en ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "NetID" ;
    rdfs:subClassOf <http://sw.opencyc.org/concept/Mx4rvViIrZwpEbGdrcN5Y29ycA> ;
    skos:altLabel "NetID" ;
    skos:related dcterms:identifier, schema:identifier .

<#SAN>
    schema:rangeIncludes <#NetID>, <#WebID> ;
    a rdf:Property, owl:DatatypeProperty ;
    rdfs:comment "The object of this relation is an identifier that denotes (names) the certificate's subject. "@en ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "subjectAlternativeName" ;
    owl:equivalentProperty <http://schemas.microsoft.com/2012/12/certificatecontext/extension/san> ;
    skos:altLabel "Certificate Subject Alternative Name (SAN)", "SAN" .

<#SparqlNamedGraph>
    a owl:Class ;
    rdfs:comment "A database document [dataset i.e., relations collection] managed by a SPARQL compliant RDBMS or Store"@en ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "Named Graph" ;
    rdfs:subClassOf <http://rdfs.org/ns/void#Dataset>, <http://www.w3.org/ns/pim/space#ControlledStorage>, foaf:Document .

<#WebID>
    a owl:Class ;
    rdfs:comment "HTTP URI that denotes an agent on HTTP based networks."@en ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "WebID" ;
    rdfs:subClassOf <http://sw.opencyc.org/concept/Mx4rvViIrZwpEbGdrcN5Y29ycA>, <#NetID> ;
    owl:disjointWith <#NetID> ;
    skos:altLabel "WebID" ;
    skos:related dcterms:identifier, schema:identifier .

<#digestURI>
    a rdf:Property, owl:ObjectProperty ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "digestURI" ;
    rdfs:range rdfs:Resource ;
    skos:altLabel "digest uri" .

<#docSignature>
    a rdf:Property, owl:DatatypeProperty ;
    rdfs:comment "Handles the digest of document content"@en ;
    rdfs:domain foaf:Document ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "docSignature" ;
    rdfs:range <http://www.w3.org/2001/XMLSchema#hexBinary> ;
    skos:altLabel "document signature" .

<#fingerprint>
    a rdf:Property, owl:ObjectProperty, owl:inverseFunctionalProperty ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "fingerprint" ;
    rdfs:range <http://www.w3.org/ns/auth/cert#hex> ;
    skos:altLabel "fingerprint" .

<#fingerprint-digest>
    a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "fingerprint-digest" ;
    rdfs:range <http://www.w3.org/2001/XMLSchema#string> ;
    skos:altLabel "fingerprint digest" .

<#hasCertificate>
    a rdf:Property, owl:ObjectProperty ;
    rdfs:domain foaf:Agent ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "hasCertificate" ;
    rdfs:range <#Certificate> ;
    skos:altLabel "certificate" .

<#hasDBStorage>
    a rdf:Property, owl:ObjectProperty ;
    rdfs:comment "Associates an Agent with document storage provided by an RDF RDBMS or store. The object of this relation identifies an internal document [in the case of an RDF RDBMS that supports SPARQL, this would be a Named Graph IRI]. "@en ;
    rdfs:domain foaf:Agent ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "hasDBStorage" ;
    rdfs:range <http://www.w3.org/ns/pim/space#Storage> ;
    rdfs:subPropertyOf <http://www.w3.org/ns/pim/space#storage> .

<#hasNetID>
    a rdf:Property, owl:ObjectProperty ;
    rdfs:comment """Relation that associates a foaf:Agent with a URI (as opposed to a document URL) that
  functions as its name (or idenitifer)."""@en ;
    rdfs:domain foaf:Agent ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "hasNetID" ;
    rdfs:range <#NetID> ;
    rdfs:subPropertyOf dcterms:identifier .

<#hasPart>
    a rdf:Property, owl:ObjectProperty, owl:inverseFunctionalProperty ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "hasPart" ;
    rdfs:range <http://www.w3.org/ns/auth/cert#RSAPublicKey> ;
    skos:altLabel "hasPart" .

<#hasPublicKey>
    a rdf:Property, owl:ObjectProperty ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "hasPublicKey" ;
    rdfs:range <http://www.w3.org/ns/auth/cert#RSAPublicKey> ;
    skos:altLabel "public key" .

<#hasWebID>
    a rdf:Property, owl:ObjectProperty ;
    rdfs:comment """Relation that associates a foaf:Agent with an HTTP URI (as opposed to a document URL) that
  functions as its name (or identifier)."""@en ;
    rdfs:domain foaf:Agent ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "hasWebID" ;
    rdfs:range <#WebID> ;
    rdfs:subPropertyOf dcterms:identifier, <#hasNetID> .

<#identifiedBy>
    schema:rangeIncludes schema:WebPage, foaf:Document ;
    a rdf:Property, owl:ObjectProperty ;
    rdfs:comment "Associates an Agent with a Descriptor [document that specifically describes the agent]."@en ;
    rdfs:domain foaf:Agent ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "identifiedBy" ;
    owl:equivalentProperty schema:sameAs .

<#issuer>
    a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "issuer" ;
    rdfs:range <http://www.w3.org/2001/XMLSchema#string> ;
    skos:altLabel "issuer" .

<#notAfter>
    a rdf:Property, owl:DatatypeProperty ;
    rdfs:comment "Property for not after i.e. expiry date"@en ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "notAfter" ;
    rdfs:range <http://www.w3.org/2001/XMLSchema#dateTime> ;
    skos:altLabel "not after" .

<#notBefore>
    a rdf:Property, owl:DatatypeProperty ;
    rdfs:comment "Property for not before i.e. issue date"@en ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "notBefore" ;
    rdfs:range <http://www.w3.org/2001/XMLSchema#dateTime> ;
    skos:altLabel "not before" .

<#onBehalfOf>
    schema:domainIncludes schema:SoftwareApplication ;
    schema:rangeIncludes schema:Person, foaf:Person ;
    a rdf:Property, owl:ObjectProperty ;
    rdfs:comment "This property associates a piece of Software with a Person who functions as its operator. Thus, at resource authorization time, it is the identity of the operator [not Software Agent] that's used in resource access tests." ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "onBehalfOf" ;
    owl:inverseOf <../ontology/acl#hasIdentityDelegate> .

<#serial>
    a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "serial" ;
    rdfs:range <http://www.w3.org/2001/XMLSchema#string> ;
    skos:altLabel "serial number" .

<#signature>
    dcterms:description "A digital signature produced using a specific signature scheme (or algorithm)" ;
    a rdf:Property, owl:ObjectProperty ;
    rdfs:comment "A digital signature produced using a Private Key"@en ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "signature" ;
    rdfs:range <http://www.w3.org/ns/auth/cert#Signature> ;
    rdfs:seeAlso <http://dbpedia.org/resource/Digital_signature> ;
    skos:altLabel "signature" .

<#signatureAlgorithm>
    a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "signatureAlgorithm" ;
    rdfs:range <http://www.w3.org/2001/XMLSchema#integer> ;
    skos:altLabel "signature algorithm" .

<#statementSignature>
    a rdf:Property, owl:DatatypeProperty ;
    rdfs:comment "Digital Signature derived from an SHA hash of the Subject, Predicate, Objects components of a statement."@en ;
    rdfs:domain rdfs:Statement ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "statementSignature" ;
    rdfs:range <http://www.w3.org/2001/XMLSchema#hexBinary> ;
    skos:altLabel "statement signature" .

<#subject>
    a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain <#Certificate> ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "subject" ;
    rdfs:range <http://www.w3.org/2001/XMLSchema#string> ;
    skos:altLabel "subject" .

<#trustedOrigin>
    a rdf:Property, owl:ObjectProperty ;
    xhv:related <https://www.w3.org/wiki/WebAccessControl#Cors_User_Agents> ;
    rdfs:comment "Web Sites (javascript and other code) hosts deemed to be trusted in regards to HTTP user agent sandbox exclusion. This relation enables dynamic generation HTTP responses [by a server] following lookup of a WebID associated with a user agent document (resource) access request."@en ;
    rdfs:domain foaf:Agent ;
    rdfs:isDefinedBy <#> ;
    rdfs:label "trustedOrigin" ;
    rdfs:range schema:WebSite .