<PackageReference Include="BouncyCastle.Cryptography" Version="2.3.0" />

Org.BouncyCastle.Pkix.TrustAnchor

public class TrustAnchor
A trust anchor or most-trusted Certification Authority (CA). This class represents a "most-trusted CA", which is used as a trust anchor for validating X.509 certification paths. A most-trusted CA includes the public key of the CA, the CA's name, and any constraints upon the set of paths which may be validated using this key. These parameters can be specified in the form of a trusted X509Certificate or as individual parameters.
namespace Org.BouncyCastle.Pkix { public class TrustAnchor { public X509Certificate TrustedCert { get; } public X509Name CA { get; } public string CAName { get; } public AsymmetricKeyParameter CAPublicKey { get; } public byte[] GetNameConstraints { get; } public TrustAnchor(X509Certificate trustedCert, byte[] nameConstraints); public TrustAnchor(X509Name caPrincipal, AsymmetricKeyParameter pubKey, byte[] nameConstraints); public TrustAnchor(string caName, AsymmetricKeyParameter pubKey, byte[] nameConstraints); } }