Class(X.509CertificateData partial CertificateData restriction(credentialVerifiedBy someValuesFrom(SigningWithX.509Certificate)) restriction(uses someValuesFrom(X.509)))