rfc2459.asn1 revision 178825
1178825Sdfr-- $Id$ -- 2178825Sdfr-- Definitions from rfc2459/rfc3280 3178825Sdfr 472445SassarRFC2459 DEFINITIONS ::= BEGIN 572445Sassar 6178825SdfrIMPORTS heim_any FROM heim; 772445Sassar 8178825SdfrVersion ::= INTEGER { 9178825Sdfr rfc3280_version_1(0), 10178825Sdfr rfc3280_version_2(1), 11178825Sdfr rfc3280_version_3(2) 12178825Sdfr} 1372445Sassar 14178825Sdfrid-pkcs-1 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) 15178825Sdfr rsadsi(113549) pkcs(1) 1 } 16178825Sdfrid-pkcs1-rsaEncryption OBJECT IDENTIFIER ::= { id-pkcs-1 1 } 17178825Sdfrid-pkcs1-md2WithRSAEncryption OBJECT IDENTIFIER ::= { id-pkcs-1 2 } 18178825Sdfrid-pkcs1-md5WithRSAEncryption OBJECT IDENTIFIER ::= { id-pkcs-1 4 } 19178825Sdfrid-pkcs1-sha1WithRSAEncryption OBJECT IDENTIFIER ::= { id-pkcs-1 5 } 20178825Sdfrid-pkcs1-sha256WithRSAEncryption OBJECT IDENTIFIER ::= { id-pkcs-1 11 } 21178825Sdfrid-pkcs1-sha384WithRSAEncryption OBJECT IDENTIFIER ::= { id-pkcs-1 12 } 22178825Sdfrid-pkcs1-sha512WithRSAEncryption OBJECT IDENTIFIER ::= { id-pkcs-1 13 } 23178825Sdfr 24178825Sdfrid-heim-rsa-pkcs1-x509 OBJECT IDENTIFIER ::= { 1 2 752 43 16 1 } 25178825Sdfr 26178825Sdfrid-pkcs-2 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) 27178825Sdfr rsadsi(113549) pkcs(1) 2 } 28178825Sdfrid-pkcs2-md2 OBJECT IDENTIFIER ::= { id-pkcs-2 2 } 29178825Sdfrid-pkcs2-md4 OBJECT IDENTIFIER ::= { id-pkcs-2 4 } 30178825Sdfrid-pkcs2-md5 OBJECT IDENTIFIER ::= { id-pkcs-2 5 } 31178825Sdfr 32178825Sdfrid-rsa-digestAlgorithm OBJECT IDENTIFIER ::= 33178825Sdfr{ iso(1) member-body(2) us(840) rsadsi(113549) 2 } 34178825Sdfr 35178825Sdfrid-rsa-digest-md2 OBJECT IDENTIFIER ::= { id-rsa-digestAlgorithm 2 } 36178825Sdfrid-rsa-digest-md4 OBJECT IDENTIFIER ::= { id-rsa-digestAlgorithm 4 } 37178825Sdfrid-rsa-digest-md5 OBJECT IDENTIFIER ::= { id-rsa-digestAlgorithm 5 } 38178825Sdfr 39178825Sdfrid-pkcs-3 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) 40178825Sdfr rsadsi(113549) pkcs(1) 3 } 41178825Sdfr 42178825Sdfrid-pkcs3-rc2-cbc OBJECT IDENTIFIER ::= { id-pkcs-3 2 } 43178825Sdfrid-pkcs3-rc4 OBJECT IDENTIFIER ::= { id-pkcs-3 4 } 44178825Sdfrid-pkcs3-des-ede3-cbc OBJECT IDENTIFIER ::= { id-pkcs-3 7 } 45178825Sdfr 46178825Sdfrid-rsadsi-encalg OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) 47178825Sdfr rsadsi(113549) 3 } 48178825Sdfr 49178825Sdfrid-rsadsi-rc2-cbc OBJECT IDENTIFIER ::= { id-rsadsi-encalg 2 } 50178825Sdfrid-rsadsi-des-ede3-cbc OBJECT IDENTIFIER ::= { id-rsadsi-encalg 7 } 51178825Sdfr 52178825Sdfrid-secsig-sha-1 OBJECT IDENTIFIER ::= { iso(1) identified-organization(3) 53178825Sdfr oiw(14) secsig(3) algorithm(2) 26 } 54178825Sdfr 55178825Sdfrid-nistAlgorithm OBJECT IDENTIFIER ::= { 56178825Sdfr joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) 4 } 57178825Sdfr 58178825Sdfrid-nist-aes-algs OBJECT IDENTIFIER ::= { id-nistAlgorithm 1 } 59178825Sdfr 60178825Sdfrid-aes-128-cbc OBJECT IDENTIFIER ::= { id-nist-aes-algs 2 } 61178825Sdfrid-aes-192-cbc OBJECT IDENTIFIER ::= { id-nist-aes-algs 22 } 62178825Sdfrid-aes-256-cbc OBJECT IDENTIFIER ::= { id-nist-aes-algs 42 } 63178825Sdfr 64178825Sdfrid-nist-sha-algs OBJECT IDENTIFIER ::= { id-nistAlgorithm 2 } 65178825Sdfr 66178825Sdfrid-sha256 OBJECT IDENTIFIER ::= { id-nist-sha-algs 1 } 67178825Sdfrid-sha224 OBJECT IDENTIFIER ::= { id-nist-sha-algs 4 } 68178825Sdfrid-sha384 OBJECT IDENTIFIER ::= { id-nist-sha-algs 2 } 69178825Sdfrid-sha512 OBJECT IDENTIFIER ::= { id-nist-sha-algs 3 } 70178825Sdfr 71178825Sdfrid-dhpublicnumber OBJECT IDENTIFIER ::= { 72178825Sdfr iso(1) member-body(2) us(840) ansi-x942(10046) 73178825Sdfr number-type(2) 1 } 74178825Sdfr 75178825Sdfrid-x9-57 OBJECT IDENTIFIER ::= { 76178825Sdfr iso(1) member-body(2) us(840) ansi-x942(10046) 77178825Sdfr 4 } 78178825Sdfr 79178825Sdfrid-dsa OBJECT IDENTIFIER ::= { id-x9-57 1 } 80178825Sdfrid-dsa-with-sha1 OBJECT IDENTIFIER ::= { id-x9-57 3 } 81178825Sdfr 82178825Sdfr-- x.520 names types 83178825Sdfr 84178825Sdfrid-x520-at OBJECT IDENTIFIER ::= { joint-iso-ccitt(2) ds(5) 4 } 85178825Sdfr 86178825Sdfrid-at-commonName OBJECT IDENTIFIER ::= { id-x520-at 3 } 87178825Sdfrid-at-surname OBJECT IDENTIFIER ::= { id-x520-at 4 } 88178825Sdfrid-at-serialNumber OBJECT IDENTIFIER ::= { id-x520-at 5 } 89178825Sdfrid-at-countryName OBJECT IDENTIFIER ::= { id-x520-at 6 } 90178825Sdfrid-at-localityName OBJECT IDENTIFIER ::= { id-x520-at 7 } 91178825Sdfrid-at-stateOrProvinceName OBJECT IDENTIFIER ::= { id-x520-at 8 } 92178825Sdfrid-at-streetAddress OBJECT IDENTIFIER ::= { id-x520-at 9 } 93178825Sdfrid-at-organizationName OBJECT IDENTIFIER ::= { id-x520-at 10 } 94178825Sdfrid-at-organizationalUnitName OBJECT IDENTIFIER ::= { id-x520-at 11 } 95178825Sdfrid-at-name OBJECT IDENTIFIER ::= { id-x520-at 41 } 96178825Sdfrid-at-givenName OBJECT IDENTIFIER ::= { id-x520-at 42 } 97178825Sdfrid-at-initials OBJECT IDENTIFIER ::= { id-x520-at 43 } 98178825Sdfrid-at-generationQualifier OBJECT IDENTIFIER ::= { id-x520-at 44 } 99178825Sdfrid-at-pseudonym OBJECT IDENTIFIER ::= { id-x520-at 65 } 100178825Sdfr-- RFC 2247 101178825Sdfrid-Userid OBJECT IDENTIFIER ::= 102178825Sdfr { 0 9 2342 19200300 100 1 1 } 103178825Sdfrid-domainComponent OBJECT IDENTIFIER ::= 104178825Sdfr { 0 9 2342 19200300 100 1 25 } 105178825Sdfr 106178825Sdfr 107178825Sdfr-- rfc3280 108178825Sdfr 109178825Sdfrid-x509-ce OBJECT IDENTIFIER ::= {joint-iso-ccitt(2) ds(5) 29} 110178825Sdfr 111178825SdfrAlgorithmIdentifier ::= SEQUENCE { 112178825Sdfr algorithm OBJECT IDENTIFIER, 113178825Sdfr parameters heim_any OPTIONAL 114178825Sdfr} 115178825Sdfr 116178825SdfrAttributeType ::= OBJECT IDENTIFIER 117178825Sdfr 118178825SdfrAttributeValue ::= heim_any 119178825Sdfr 120178825SdfrTeletexStringx ::= [UNIVERSAL 20] IMPLICIT OCTET STRING 121178825Sdfr 122178825SdfrDirectoryString ::= CHOICE { 123178825Sdfr ia5String IA5String, 124178825Sdfr teletexString TeletexStringx, 125178825Sdfr printableString PrintableString, 126178825Sdfr universalString UniversalString, 127178825Sdfr utf8String UTF8String, 128178825Sdfr bmpString BMPString 129178825Sdfr} 130178825Sdfr 131178825SdfrAttribute ::= SEQUENCE { 132178825Sdfr type AttributeType, 133178825Sdfr value SET OF -- AttributeValue -- heim_any 134178825Sdfr} 135178825Sdfr 13672445SassarAttributeTypeAndValue ::= SEQUENCE { 137178825Sdfr type AttributeType, 138178825Sdfr value DirectoryString 13972445Sassar} 14072445Sassar 141178825SdfrRelativeDistinguishedName ::= SET OF AttributeTypeAndValue 14272445Sassar 14372445SassarRDNSequence ::= SEQUENCE OF RelativeDistinguishedName 14472445Sassar 145178825SdfrName ::= CHOICE { 146178825Sdfr rdnSequence RDNSequence 14772445Sassar} 14872445Sassar 149178825SdfrCertificateSerialNumber ::= INTEGER 150178825Sdfr 151178825SdfrTime ::= CHOICE { 152178825Sdfr utcTime UTCTime, 153178825Sdfr generalTime GeneralizedTime 154178825Sdfr} 155178825Sdfr 156178825SdfrValidity ::= SEQUENCE { 157178825Sdfr notBefore Time, 158178825Sdfr notAfter Time 159178825Sdfr} 160178825Sdfr 161178825SdfrUniqueIdentifier ::= BIT STRING 162178825Sdfr 163178825SdfrSubjectPublicKeyInfo ::= SEQUENCE { 164178825Sdfr algorithm AlgorithmIdentifier, 165178825Sdfr subjectPublicKey BIT STRING 166178825Sdfr} 167178825Sdfr 168178825SdfrExtension ::= SEQUENCE { 169178825Sdfr extnID OBJECT IDENTIFIER, 170178825Sdfr critical BOOLEAN OPTIONAL, -- DEFAULT FALSE XXX 171178825Sdfr extnValue OCTET STRING 172178825Sdfr} 173178825Sdfr 174178825SdfrExtensions ::= SEQUENCE SIZE (1..MAX) OF Extension 175178825Sdfr 176178825SdfrTBSCertificate ::= SEQUENCE { 177178825Sdfr version [0] Version OPTIONAL, -- EXPLICIT nnn DEFAULT 1, 178178825Sdfr serialNumber CertificateSerialNumber, 179178825Sdfr signature AlgorithmIdentifier, 180178825Sdfr issuer Name, 181178825Sdfr validity Validity, 182178825Sdfr subject Name, 183178825Sdfr subjectPublicKeyInfo SubjectPublicKeyInfo, 184178825Sdfr issuerUniqueID [1] IMPLICIT BIT STRING -- UniqueIdentifier -- OPTIONAL, 185178825Sdfr -- If present, version shall be v2 or v3 186178825Sdfr subjectUniqueID [2] IMPLICIT BIT STRING -- UniqueIdentifier -- OPTIONAL, 187178825Sdfr -- If present, version shall be v2 or v3 188178825Sdfr extensions [3] EXPLICIT Extensions OPTIONAL 189178825Sdfr -- If present, version shall be v3 190178825Sdfr} 191178825Sdfr 192178825SdfrCertificate ::= SEQUENCE { 193178825Sdfr tbsCertificate TBSCertificate, 194178825Sdfr signatureAlgorithm AlgorithmIdentifier, 195178825Sdfr signatureValue BIT STRING 196178825Sdfr} 197178825Sdfr 198178825SdfrCertificates ::= SEQUENCE OF Certificate 199178825Sdfr 200178825SdfrValidationParms ::= SEQUENCE { 201178825Sdfr seed BIT STRING, 202178825Sdfr pgenCounter INTEGER 203178825Sdfr} 204178825Sdfr 205178825SdfrDomainParameters ::= SEQUENCE { 206178825Sdfr p INTEGER, -- odd prime, p=jq +1 207178825Sdfr g INTEGER, -- generator, g 208178825Sdfr q INTEGER, -- factor of p-1 209178825Sdfr j INTEGER OPTIONAL, -- subgroup factor 210178825Sdfr validationParms ValidationParms OPTIONAL -- ValidationParms 211178825Sdfr} 212178825Sdfr 213178825SdfrDHPublicKey ::= INTEGER 214178825Sdfr 215178825SdfrOtherName ::= SEQUENCE { 216178825Sdfr type-id OBJECT IDENTIFIER, 217178825Sdfr value [0] EXPLICIT heim_any 218178825Sdfr} 219178825Sdfr 220178825SdfrGeneralName ::= CHOICE { 221178825Sdfr otherName [0] IMPLICIT -- OtherName -- SEQUENCE { 222178825Sdfr type-id OBJECT IDENTIFIER, 223178825Sdfr value [0] EXPLICIT heim_any 224178825Sdfr }, 225178825Sdfr rfc822Name [1] IMPLICIT IA5String, 226178825Sdfr dNSName [2] IMPLICIT IA5String, 227178825Sdfr-- x400Address [3] IMPLICIT ORAddress,-- 228178825Sdfr directoryName [4] IMPLICIT -- Name -- CHOICE { 229178825Sdfr rdnSequence RDNSequence 230178825Sdfr }, 231178825Sdfr-- ediPartyName [5] IMPLICIT EDIPartyName, -- 232178825Sdfr uniformResourceIdentifier [6] IMPLICIT IA5String, 233178825Sdfr iPAddress [7] IMPLICIT OCTET STRING, 234178825Sdfr registeredID [8] IMPLICIT OBJECT IDENTIFIER 235178825Sdfr} 236178825Sdfr 237178825SdfrGeneralNames ::= SEQUENCE SIZE (1..MAX) OF GeneralName 238178825Sdfr 239178825Sdfrid-x509-ce-keyUsage OBJECT IDENTIFIER ::= { id-x509-ce 15 } 240178825Sdfr 241178825SdfrKeyUsage ::= BIT STRING { 242178825Sdfr digitalSignature (0), 243178825Sdfr nonRepudiation (1), 244178825Sdfr keyEncipherment (2), 245178825Sdfr dataEncipherment (3), 246178825Sdfr keyAgreement (4), 247178825Sdfr keyCertSign (5), 248178825Sdfr cRLSign (6), 249178825Sdfr encipherOnly (7), 250178825Sdfr decipherOnly (8) 251178825Sdfr} 252178825Sdfr 253178825Sdfrid-x509-ce-authorityKeyIdentifier OBJECT IDENTIFIER ::= { id-x509-ce 35 } 254178825Sdfr 255178825SdfrKeyIdentifier ::= OCTET STRING 256178825Sdfr 257178825SdfrAuthorityKeyIdentifier ::= SEQUENCE { 258178825Sdfr keyIdentifier [0] IMPLICIT OCTET STRING OPTIONAL, 259178825Sdfr authorityCertIssuer [1] IMPLICIT -- GeneralName -- 260178825Sdfr SEQUENCE -- SIZE (1..MAX) -- OF GeneralName OPTIONAL, 261178825Sdfr authorityCertSerialNumber [2] IMPLICIT INTEGER OPTIONAL 262178825Sdfr} 263178825Sdfr 264178825Sdfrid-x509-ce-subjectKeyIdentifier OBJECT IDENTIFIER ::= { id-x509-ce 14 } 265178825Sdfr 266178825SdfrSubjectKeyIdentifier ::= KeyIdentifier 267178825Sdfr 268178825Sdfrid-x509-ce-basicConstraints OBJECT IDENTIFIER ::= { id-x509-ce 19 } 269178825Sdfr 270178825SdfrBasicConstraints ::= SEQUENCE { 271178825Sdfr cA BOOLEAN OPTIONAL -- DEFAULT FALSE --, 272178825Sdfr pathLenConstraint INTEGER (0..4294967295) OPTIONAL 273178825Sdfr} 274178825Sdfr 275178825Sdfrid-x509-ce-nameConstraints OBJECT IDENTIFIER ::= { id-x509-ce 30 } 276178825Sdfr 277178825SdfrBaseDistance ::= INTEGER -- (0..MAX) -- 278178825Sdfr 279178825SdfrGeneralSubtree ::= SEQUENCE { 280178825Sdfr base GeneralName, 281178825Sdfr minimum [0] IMPLICIT -- BaseDistance -- INTEGER OPTIONAL -- DEFAULT 0 --, 282178825Sdfr maximum [1] IMPLICIT -- BaseDistance -- INTEGER OPTIONAL 283178825Sdfr} 284178825Sdfr 285178825SdfrGeneralSubtrees ::= SEQUENCE -- SIZE (1..MAX) -- OF GeneralSubtree 286178825Sdfr 287178825SdfrNameConstraints ::= SEQUENCE { 288178825Sdfr permittedSubtrees [0] IMPLICIT -- GeneralSubtrees -- SEQUENCE OF GeneralSubtree OPTIONAL, 289178825Sdfr excludedSubtrees [1] IMPLICIT -- GeneralSubtrees -- SEQUENCE OF GeneralSubtree OPTIONAL 290178825Sdfr} 291178825Sdfr 292178825Sdfrid-x509-ce-privateKeyUsagePeriod OBJECT IDENTIFIER ::= { id-x509-ce 16 } 293178825Sdfrid-x509-ce-certificatePolicies OBJECT IDENTIFIER ::= { id-x509-ce 32 } 294178825Sdfrid-x509-ce-policyMappings OBJECT IDENTIFIER ::= { id-x509-ce 33 } 295178825Sdfrid-x509-ce-subjectAltName OBJECT IDENTIFIER ::= { id-x509-ce 17 } 296178825Sdfrid-x509-ce-issuerAltName OBJECT IDENTIFIER ::= { id-x509-ce 18 } 297178825Sdfrid-x509-ce-subjectDirectoryAttributes OBJECT IDENTIFIER ::= { id-x509-ce 9 } 298178825Sdfrid-x509-ce-policyConstraints OBJECT IDENTIFIER ::= { id-x509-ce 36 } 299178825Sdfr 300178825Sdfrid-x509-ce-extKeyUsage OBJECT IDENTIFIER ::= { id-x509-ce 37} 301178825Sdfr 302178825SdfrExtKeyUsage ::= SEQUENCE OF OBJECT IDENTIFIER 303178825Sdfr 304178825Sdfrid-x509-ce-cRLDistributionPoints OBJECT IDENTIFIER ::= { id-x509-ce 31 } 305178825Sdfrid-x509-ce-deltaCRLIndicator OBJECT IDENTIFIER ::= { id-x509-ce 27 } 306178825Sdfrid-x509-ce-issuingDistributionPoint OBJECT IDENTIFIER ::= { id-x509-ce 28 } 307178825Sdfrid-x509-ce-holdInstructionCode OBJECT IDENTIFIER ::= { id-x509-ce 23 } 308178825Sdfrid-x509-ce-invalidityDate OBJECT IDENTIFIER ::= { id-x509-ce 24 } 309178825Sdfrid-x509-ce-certificateIssuer OBJECT IDENTIFIER ::= { id-x509-ce 29 } 310178825Sdfrid-x509-ce-inhibitAnyPolicy OBJECT IDENTIFIER ::= { id-x509-ce 54 } 311178825Sdfr 312178825SdfrDistributionPointReasonFlags ::= BIT STRING { 313178825Sdfr unused (0), 314178825Sdfr keyCompromise (1), 315178825Sdfr cACompromise (2), 316178825Sdfr affiliationChanged (3), 317178825Sdfr superseded (4), 318178825Sdfr cessationOfOperation (5), 319178825Sdfr certificateHold (6), 320178825Sdfr privilegeWithdrawn (7), 321178825Sdfr aACompromise (8) 322178825Sdfr} 323178825Sdfr 324178825SdfrDistributionPointName ::= CHOICE { 325178825Sdfr fullName [0] IMPLICIT -- GeneralNames -- SEQUENCE SIZE (1..MAX) OF GeneralName, 326178825Sdfr nameRelativeToCRLIssuer [1] RelativeDistinguishedName 327178825Sdfr} 328178825Sdfr 329178825SdfrDistributionPoint ::= SEQUENCE { 330178825Sdfr distributionPoint [0] IMPLICIT heim_any -- DistributionPointName -- OPTIONAL, 331178825Sdfr reasons [1] IMPLICIT heim_any -- DistributionPointReasonFlags -- OPTIONAL, 332178825Sdfr cRLIssuer [2] IMPLICIT heim_any -- GeneralNames -- OPTIONAL 333178825Sdfr} 334178825Sdfr 335178825SdfrCRLDistributionPoints ::= SEQUENCE SIZE (1..MAX) OF DistributionPoint 336178825Sdfr 337178825Sdfr 338178825Sdfr-- rfc3279 339178825Sdfr 340178825SdfrDSASigValue ::= SEQUENCE { 341178825Sdfr r INTEGER, 342178825Sdfr s INTEGER 343178825Sdfr} 344178825Sdfr 345178825SdfrDSAPublicKey ::= INTEGER 346178825Sdfr 347178825SdfrDSAParams ::= SEQUENCE { 348178825Sdfr p INTEGER, 349178825Sdfr q INTEGER, 350178825Sdfr g INTEGER 351178825Sdfr} 352178825Sdfr 353178825Sdfr-- really pkcs1 354178825Sdfr 355178825SdfrRSAPublicKey ::= SEQUENCE { 356178825Sdfr modulus INTEGER, -- n 357178825Sdfr publicExponent INTEGER -- e 358178825Sdfr} 359178825Sdfr 360178825SdfrRSAPrivateKey ::= SEQUENCE { 361178825Sdfr version INTEGER (0..4294967295), 362178825Sdfr modulus INTEGER, -- n 363178825Sdfr publicExponent INTEGER, -- e 364178825Sdfr privateExponent INTEGER, -- d 365178825Sdfr prime1 INTEGER, -- p 366178825Sdfr prime2 INTEGER, -- q 367178825Sdfr exponent1 INTEGER, -- d mod (p-1) 368178825Sdfr exponent2 INTEGER, -- d mod (q-1) 369178825Sdfr coefficient INTEGER -- (inverse of q) mod p 370178825Sdfr} 371178825Sdfr 372178825SdfrDigestInfo ::= SEQUENCE { 373178825Sdfr digestAlgorithm AlgorithmIdentifier, 374178825Sdfr digest OCTET STRING 375178825Sdfr} 376178825Sdfr 377178825Sdfr-- some ms ext 378178825Sdfr 379178825Sdfr-- szOID_ENROLL_CERTTYPE_EXTENSION "1.3.6.1.4.1.311.20.2" is Encoded as a 380178825Sdfr 381178825Sdfr-- UNICODESTRING (0x1E tag) 382178825Sdfr 383178825Sdfr-- szOID_CERTIFICATE_TEMPLATE "1.3.6.1.4.1.311.21.7" is Encoded as: 384178825Sdfr 385178825Sdfr-- TemplateVersion ::= INTEGER (0..4294967295) 386178825Sdfr 387178825Sdfr-- CertificateTemplate ::= SEQUENCE { 388178825Sdfr-- templateID OBJECT IDENTIFIER, 389178825Sdfr-- templateMajorVersion TemplateVersion, 390178825Sdfr-- templateMinorVersion TemplateVersion OPTIONAL 391178825Sdfr-- } 392178825Sdfr 393178825Sdfr 394178825Sdfr-- 395178825Sdfr-- CRL 396178825Sdfr-- 397178825Sdfr 398178825SdfrTBSCRLCertList ::= SEQUENCE { 399178825Sdfr version Version OPTIONAL, -- if present, MUST be v2 400178825Sdfr signature AlgorithmIdentifier, 401178825Sdfr issuer Name, 402178825Sdfr thisUpdate Time, 403178825Sdfr nextUpdate Time OPTIONAL, 404178825Sdfr revokedCertificates SEQUENCE OF SEQUENCE { 405178825Sdfr userCertificate CertificateSerialNumber, 406178825Sdfr revocationDate Time, 407178825Sdfr crlEntryExtensions Extensions OPTIONAL 408178825Sdfr -- if present, MUST be v2 409178825Sdfr } OPTIONAL, 410178825Sdfr crlExtensions [0] EXPLICIT Extensions OPTIONAL 411178825Sdfr -- if present, MUST be v2 412178825Sdfr} 413178825Sdfr 414178825Sdfr 415178825SdfrCRLCertificateList ::= SEQUENCE { 416178825Sdfr tbsCertList TBSCRLCertList, 417178825Sdfr signatureAlgorithm AlgorithmIdentifier, 418178825Sdfr signatureValue BIT STRING 419178825Sdfr} 420178825Sdfr 421178825Sdfrid-x509-ce-cRLNumber OBJECT IDENTIFIER ::= { id-x509-ce 20 } 422178825Sdfrid-x509-ce-freshestCRL OBJECT IDENTIFIER ::= { id-x509-ce 46 } 423178825Sdfrid-x509-ce-cRLReason OBJECT IDENTIFIER ::= { id-x509-ce 21 } 424178825Sdfr 425178825SdfrCRLReason ::= ENUMERATED { 426178825Sdfr unspecified (0), 427178825Sdfr keyCompromise (1), 428178825Sdfr cACompromise (2), 429178825Sdfr affiliationChanged (3), 430178825Sdfr superseded (4), 431178825Sdfr cessationOfOperation (5), 432178825Sdfr certificateHold (6), 433178825Sdfr removeFromCRL (8), 434178825Sdfr privilegeWithdrawn (9), 435178825Sdfr aACompromise (10) 436178825Sdfr} 437178825Sdfr 438178825SdfrPKIXXmppAddr ::= UTF8String 439178825Sdfr 440178825Sdfrid-pkix OBJECT IDENTIFIER ::= { iso(1) identified-organization(3) 441178825Sdfr dod(6) internet(1) security(5) mechanisms(5) pkix(7) } 442178825Sdfr 443178825Sdfrid-pkix-on OBJECT IDENTIFIER ::= { id-pkix 8 } 444178825Sdfrid-pkix-on-xmppAddr OBJECT IDENTIFIER ::= { id-pkix-on 5 } 445178825Sdfrid-pkix-on-dnsSRV OBJECT IDENTIFIER ::= { id-pkix-on 7 } 446178825Sdfr 447178825Sdfrid-pkix-kp OBJECT IDENTIFIER ::= { id-pkix 3 } 448178825Sdfrid-pkix-kp-serverAuth OBJECT IDENTIFIER ::= { id-pkix-kp 1 } 449178825Sdfrid-pkix-kp-clientAuth OBJECT IDENTIFIER ::= { id-pkix-kp 2 } 450178825Sdfrid-pkix-kp-emailProtection OBJECT IDENTIFIER ::= { id-pkix-kp 4 } 451178825Sdfrid-pkix-kp-timeStamping OBJECT IDENTIFIER ::= { id-pkix-kp 8 } 452178825Sdfrid-pkix-kp-OCSPSigning OBJECT IDENTIFIER ::= { id-pkix-kp 9 } 453178825Sdfr 454178825Sdfrid-pkix-pe OBJECT IDENTIFIER ::= { id-pkix 1 } 455178825Sdfr 456178825Sdfrid-pkix-pe-authorityInfoAccess OBJECT IDENTIFIER ::= { id-pkix-pe 1 } 457178825Sdfr 458178825SdfrAccessDescription ::= SEQUENCE { 459178825Sdfr accessMethod OBJECT IDENTIFIER, 460178825Sdfr accessLocation GeneralName 461178825Sdfr} 462178825Sdfr 463178825SdfrAuthorityInfoAccessSyntax ::= SEQUENCE SIZE (1..MAX) OF AccessDescription 464178825Sdfr 465178825Sdfr-- RFC 3820 Proxy Certificate Profile 466178825Sdfr 467178825Sdfrid-pkix-pe-proxyCertInfo OBJECT IDENTIFIER ::= { id-pkix-pe 14 } 468178825Sdfr 469178825Sdfrid-pkix-ppl OBJECT IDENTIFIER ::= { id-pkix 21 } 470178825Sdfr 471178825Sdfrid-pkix-ppl-anyLanguage OBJECT IDENTIFIER ::= { id-pkix-ppl 0 } 472178825Sdfrid-pkix-ppl-inheritAll OBJECT IDENTIFIER ::= { id-pkix-ppl 1 } 473178825Sdfrid-pkix-ppl-independent OBJECT IDENTIFIER ::= { id-pkix-ppl 2 } 474178825Sdfr 475178825SdfrProxyPolicy ::= SEQUENCE { 476178825Sdfr policyLanguage OBJECT IDENTIFIER, 477178825Sdfr policy OCTET STRING OPTIONAL 478178825Sdfr} 479178825Sdfr 480178825SdfrProxyCertInfo ::= SEQUENCE { 481178825Sdfr pCPathLenConstraint INTEGER (0..4294967295) OPTIONAL, -- really MAX 482178825Sdfr proxyPolicy ProxyPolicy 483178825Sdfr} 484178825Sdfr 485178825Sdfr--- U.S. Federal PKI Common Policy Framework 486178825Sdfr-- Card Authentication key 487178825Sdfrid-uspkicommon-card-id OBJECT IDENTIFIER ::= { 2 16 840 1 101 3 6 6 } 488178825Sdfrid-uspkicommon-piv-interim OBJECT IDENTIFIER ::= { 2 16 840 1 101 3 6 9 1 } 489178825Sdfr 490178825Sdfr--- Netscape extentions 491178825Sdfr 492178825Sdfrid-netscape OBJECT IDENTIFIER ::= 493178825Sdfr { joint-iso-itu-t(2) country(16) us(840) organization(1) netscape(113730) } 494178825Sdfrid-netscape-cert-comment OBJECT IDENTIFIER ::= { id-netscape 1 13 } 495178825Sdfr 496178825Sdfr--- MS extentions 497178825Sdfr 498178825Sdfrid-ms-cert-enroll-domaincontroller OBJECT IDENTIFIER ::= 499178825Sdfr { 1 3 6 1 4 1 311 20 2 } 500178825Sdfr 501178825Sdfrid-ms-client-authentication OBJECT IDENTIFIER ::= 502178825Sdfr { 1 3 6 1 5 5 7 3 2 } 503178825Sdfr 504178825Sdfr-- DER:1e:20:00:44:00:6f:00:6d:00:61:00:69:00:6e:00:43:00:6f:00:6e:00:74:00:72:00:6f:00:6c:00:6c:00:65:00:72 505178825Sdfr 506178825SdfrEND 507