1# CCITT was renamed to ITU-T quite some time ago
20			: ITU-T			: itu-t
3!Alias ccitt itu-t
4
51			: ISO			: iso
6
72			: JOINT-ISO-ITU-T	: joint-iso-itu-t
8!Alias joint-iso-ccitt joint-iso-itu-t
9
10iso 2			: member-body		: ISO Member Body
11
12iso 3			: identified-organization
13
14identified-organization 132	: certicom-arc
15
16joint-iso-itu-t 23	: international-organizations	: International Organizations
17
18international-organizations 43	: wap
19wap 13			: wap-wsg
20
21joint-iso-itu-t 5 1 5	: selected-attribute-types	: Selected Attribute Types
22
23selected-attribute-types 55	: clearance
24
25member-body 840		: ISO-US		: ISO US Member Body
26ISO-US 10040		: X9-57			: X9.57
27X9-57 4			: X9cm			: X9.57 CM ?
28
29!Cname dsa
30X9cm 1			: DSA			: dsaEncryption
31X9cm 3			: DSA-SHA1		: dsaWithSHA1
32
33
34ISO-US 10045		: ansi-X9-62		: ANSI X9.62
35!module X9-62
36!Alias id-fieldType ansi-X9-62 1
37X9-62_id-fieldType 1		: prime-field
38X9-62_id-fieldType 2		: characteristic-two-field
39X9-62_characteristic-two-field 3 : id-characteristic-two-basis
40X9-62_id-characteristic-two-basis 1 : onBasis
41X9-62_id-characteristic-two-basis 2 : tpBasis
42X9-62_id-characteristic-two-basis 3 : ppBasis
43!Alias id-publicKeyType ansi-X9-62 2
44X9-62_id-publicKeyType 1	: id-ecPublicKey
45!Alias ellipticCurve ansi-X9-62 3
46!Alias c-TwoCurve X9-62_ellipticCurve 0
47X9-62_c-TwoCurve 1		: c2pnb163v1
48X9-62_c-TwoCurve 2		: c2pnb163v2
49X9-62_c-TwoCurve 3		: c2pnb163v3
50X9-62_c-TwoCurve 4		: c2pnb176v1
51X9-62_c-TwoCurve 5		: c2tnb191v1
52X9-62_c-TwoCurve 6		: c2tnb191v2
53X9-62_c-TwoCurve 7		: c2tnb191v3
54X9-62_c-TwoCurve 8		: c2onb191v4
55X9-62_c-TwoCurve 9		: c2onb191v5
56X9-62_c-TwoCurve 10		: c2pnb208w1
57X9-62_c-TwoCurve 11		: c2tnb239v1
58X9-62_c-TwoCurve 12		: c2tnb239v2
59X9-62_c-TwoCurve 13		: c2tnb239v3
60X9-62_c-TwoCurve 14		: c2onb239v4
61X9-62_c-TwoCurve 15		: c2onb239v5
62X9-62_c-TwoCurve 16		: c2pnb272w1
63X9-62_c-TwoCurve 17		: c2pnb304w1
64X9-62_c-TwoCurve 18		: c2tnb359v1
65X9-62_c-TwoCurve 19		: c2pnb368w1
66X9-62_c-TwoCurve 20		: c2tnb431r1
67!Alias primeCurve X9-62_ellipticCurve 1
68X9-62_primeCurve 1	 	: prime192v1
69X9-62_primeCurve 2	 	: prime192v2
70X9-62_primeCurve 3	 	: prime192v3
71X9-62_primeCurve 4	 	: prime239v1
72X9-62_primeCurve 5	 	: prime239v2
73X9-62_primeCurve 6	 	: prime239v3
74X9-62_primeCurve 7	 	: prime256v1
75!Alias id-ecSigType ansi-X9-62 4
76!global
77X9-62_id-ecSigType 1		: ecdsa-with-SHA1
78
79# SECG curve OIDs from "SEC 2: Recommended Elliptic Curve Domain Parameters"
80# (http://www.secg.org/)
81!Alias secg_ellipticCurve certicom-arc 0
82# SECG prime curves OIDs
83secg-ellipticCurve 6		: secp112r1
84secg-ellipticCurve 7		: secp112r2
85secg-ellipticCurve 28		: secp128r1
86secg-ellipticCurve 29		: secp128r2
87secg-ellipticCurve 9		: secp160k1
88secg-ellipticCurve 8		: secp160r1
89secg-ellipticCurve 30		: secp160r2
90secg-ellipticCurve 31		: secp192k1
91# NOTE: the curve secp192r1 is the same as prime192v1 defined above
92#       and is therefore omitted
93secg-ellipticCurve 32		: secp224k1
94secg-ellipticCurve 33		: secp224r1
95secg-ellipticCurve 10		: secp256k1
96# NOTE: the curve secp256r1 is the same as prime256v1 defined above
97#       and is therefore omitted
98secg-ellipticCurve 34		: secp384r1
99secg-ellipticCurve 35		: secp521r1
100# SECG characteristic two curves OIDs
101secg-ellipticCurve 4		: sect113r1
102secg-ellipticCurve 5		: sect113r2
103secg-ellipticCurve 22		: sect131r1
104secg-ellipticCurve 23		: sect131r2
105secg-ellipticCurve 1		: sect163k1
106secg-ellipticCurve 2		: sect163r1
107secg-ellipticCurve 15		: sect163r2
108secg-ellipticCurve 24		: sect193r1
109secg-ellipticCurve 25		: sect193r2
110secg-ellipticCurve 26		: sect233k1
111secg-ellipticCurve 27		: sect233r1
112secg-ellipticCurve 3		: sect239k1
113secg-ellipticCurve 16		: sect283k1
114secg-ellipticCurve 17		: sect283r1
115secg-ellipticCurve 36		: sect409k1
116secg-ellipticCurve 37		: sect409r1
117secg-ellipticCurve 38		: sect571k1
118secg-ellipticCurve 39		: sect571r1
119
120# WAP/TLS curve OIDs (http://www.wapforum.org/)
121!Alias wap-wsg-idm-ecid wap-wsg 4
122wap-wsg-idm-ecid 1	: wap-wsg-idm-ecid-wtls1
123wap-wsg-idm-ecid 3	: wap-wsg-idm-ecid-wtls3
124wap-wsg-idm-ecid 4	: wap-wsg-idm-ecid-wtls4
125wap-wsg-idm-ecid 5	: wap-wsg-idm-ecid-wtls5
126wap-wsg-idm-ecid 6	: wap-wsg-idm-ecid-wtls6
127wap-wsg-idm-ecid 7	: wap-wsg-idm-ecid-wtls7
128wap-wsg-idm-ecid 8	: wap-wsg-idm-ecid-wtls8
129wap-wsg-idm-ecid 9	: wap-wsg-idm-ecid-wtls9
130wap-wsg-idm-ecid 10	: wap-wsg-idm-ecid-wtls10
131wap-wsg-idm-ecid 11	: wap-wsg-idm-ecid-wtls11
132wap-wsg-idm-ecid 12	: wap-wsg-idm-ecid-wtls12
133
134
135ISO-US 113533 7 66 10	: CAST5-CBC		: cast5-cbc
136			: CAST5-ECB		: cast5-ecb
137!Cname cast5-cfb64
138			: CAST5-CFB		: cast5-cfb
139!Cname cast5-ofb64
140			: CAST5-OFB		: cast5-ofb
141!Cname pbeWithMD5AndCast5-CBC
142ISO-US 113533 7 66 12	:			: pbeWithMD5AndCast5CBC
143
144ISO-US 113549		: rsadsi		: RSA Data Security, Inc.
145
146rsadsi 1		: pkcs			: RSA Data Security, Inc. PKCS
147
148pkcs 1			: pkcs1
149pkcs1 1			:			: rsaEncryption
150pkcs1 2			: RSA-MD2		: md2WithRSAEncryption
151pkcs1 3			: RSA-MD4		: md4WithRSAEncryption
152pkcs1 4			: RSA-MD5		: md5WithRSAEncryption
153pkcs1 5			: RSA-SHA1		: sha1WithRSAEncryption
154# According to PKCS #1 version 2.1
155pkcs1 11		: RSA-SHA256		: sha256WithRSAEncryption
156pkcs1 12		: RSA-SHA384		: sha384WithRSAEncryption
157pkcs1 13		: RSA-SHA512		: sha512WithRSAEncryption
158pkcs1 14		: RSA-SHA224		: sha224WithRSAEncryption
159
160pkcs 3			: pkcs3
161pkcs3 1			:			: dhKeyAgreement
162
163pkcs 5			: pkcs5
164pkcs5 1			: PBE-MD2-DES		: pbeWithMD2AndDES-CBC
165pkcs5 3			: PBE-MD5-DES		: pbeWithMD5AndDES-CBC
166pkcs5 4			: PBE-MD2-RC2-64	: pbeWithMD2AndRC2-CBC
167pkcs5 6			: PBE-MD5-RC2-64	: pbeWithMD5AndRC2-CBC
168pkcs5 10		: PBE-SHA1-DES		: pbeWithSHA1AndDES-CBC
169pkcs5 11		: PBE-SHA1-RC2-64	: pbeWithSHA1AndRC2-CBC
170!Cname id_pbkdf2
171pkcs5 12		:			: PBKDF2
172!Cname pbes2
173pkcs5 13		:			: PBES2
174!Cname pbmac1
175pkcs5 14		:			: PBMAC1
176
177pkcs 7			: pkcs7
178pkcs7 1			:			: pkcs7-data
179!Cname pkcs7-signed
180pkcs7 2			:			: pkcs7-signedData
181!Cname pkcs7-enveloped
182pkcs7 3			:			: pkcs7-envelopedData
183!Cname pkcs7-signedAndEnveloped
184pkcs7 4			:			: pkcs7-signedAndEnvelopedData
185!Cname pkcs7-digest
186pkcs7 5			:			: pkcs7-digestData
187!Cname pkcs7-encrypted
188pkcs7 6			:			: pkcs7-encryptedData
189
190pkcs 9			: pkcs9
191!module pkcs9
192pkcs9 1			: 			: emailAddress
193pkcs9 2			:			: unstructuredName
194pkcs9 3			:			: contentType
195pkcs9 4			:			: messageDigest
196pkcs9 5			:			: signingTime
197pkcs9 6			:			: countersignature
198pkcs9 7			:			: challengePassword
199pkcs9 8			:			: unstructuredAddress
200!Cname extCertAttributes
201pkcs9 9			:			: extendedCertificateAttributes
202!global
203
204!Cname ext-req
205pkcs9 14		: extReq		: Extension Request
206
207!Cname SMIMECapabilities
208pkcs9 15		: SMIME-CAPS		: S/MIME Capabilities
209
210# S/MIME
211!Cname SMIME
212pkcs9 16		: SMIME			: S/MIME
213SMIME 0			: id-smime-mod
214SMIME 1			: id-smime-ct
215SMIME 2			: id-smime-aa
216SMIME 3			: id-smime-alg
217SMIME 4			: id-smime-cd
218SMIME 5			: id-smime-spq
219SMIME 6			: id-smime-cti
220
221# S/MIME Modules
222id-smime-mod 1		: id-smime-mod-cms
223id-smime-mod 2		: id-smime-mod-ess
224id-smime-mod 3		: id-smime-mod-oid
225id-smime-mod 4		: id-smime-mod-msg-v3
226id-smime-mod 5		: id-smime-mod-ets-eSignature-88
227id-smime-mod 6		: id-smime-mod-ets-eSignature-97
228id-smime-mod 7		: id-smime-mod-ets-eSigPolicy-88
229id-smime-mod 8		: id-smime-mod-ets-eSigPolicy-97
230
231# S/MIME Content Types
232id-smime-ct 1		: id-smime-ct-receipt
233id-smime-ct 2		: id-smime-ct-authData
234id-smime-ct 3		: id-smime-ct-publishCert
235id-smime-ct 4		: id-smime-ct-TSTInfo
236id-smime-ct 5		: id-smime-ct-TDTInfo
237id-smime-ct 6		: id-smime-ct-contentInfo
238id-smime-ct 7		: id-smime-ct-DVCSRequestData
239id-smime-ct 8		: id-smime-ct-DVCSResponseData
240
241# S/MIME Attributes
242id-smime-aa 1		: id-smime-aa-receiptRequest
243id-smime-aa 2		: id-smime-aa-securityLabel
244id-smime-aa 3		: id-smime-aa-mlExpandHistory
245id-smime-aa 4		: id-smime-aa-contentHint
246id-smime-aa 5		: id-smime-aa-msgSigDigest
247# obsolete
248id-smime-aa 6		: id-smime-aa-encapContentType
249id-smime-aa 7		: id-smime-aa-contentIdentifier
250# obsolete
251id-smime-aa 8		: id-smime-aa-macValue
252id-smime-aa 9		: id-smime-aa-equivalentLabels
253id-smime-aa 10		: id-smime-aa-contentReference
254id-smime-aa 11		: id-smime-aa-encrypKeyPref
255id-smime-aa 12		: id-smime-aa-signingCertificate
256id-smime-aa 13		: id-smime-aa-smimeEncryptCerts
257id-smime-aa 14		: id-smime-aa-timeStampToken
258id-smime-aa 15		: id-smime-aa-ets-sigPolicyId
259id-smime-aa 16		: id-smime-aa-ets-commitmentType
260id-smime-aa 17		: id-smime-aa-ets-signerLocation
261id-smime-aa 18		: id-smime-aa-ets-signerAttr
262id-smime-aa 19		: id-smime-aa-ets-otherSigCert
263id-smime-aa 20		: id-smime-aa-ets-contentTimestamp
264id-smime-aa 21		: id-smime-aa-ets-CertificateRefs
265id-smime-aa 22		: id-smime-aa-ets-RevocationRefs
266id-smime-aa 23		: id-smime-aa-ets-certValues
267id-smime-aa 24		: id-smime-aa-ets-revocationValues
268id-smime-aa 25		: id-smime-aa-ets-escTimeStamp
269id-smime-aa 26		: id-smime-aa-ets-certCRLTimestamp
270id-smime-aa 27		: id-smime-aa-ets-archiveTimeStamp
271id-smime-aa 28		: id-smime-aa-signatureType
272id-smime-aa 29		: id-smime-aa-dvcs-dvc
273
274# S/MIME Algorithm Identifiers
275# obsolete
276id-smime-alg 1		: id-smime-alg-ESDHwith3DES
277# obsolete
278id-smime-alg 2		: id-smime-alg-ESDHwithRC2
279# obsolete
280id-smime-alg 3		: id-smime-alg-3DESwrap
281# obsolete
282id-smime-alg 4		: id-smime-alg-RC2wrap
283id-smime-alg 5		: id-smime-alg-ESDH
284id-smime-alg 6		: id-smime-alg-CMS3DESwrap
285id-smime-alg 7		: id-smime-alg-CMSRC2wrap
286
287# S/MIME Certificate Distribution
288id-smime-cd 1		: id-smime-cd-ldap
289
290# S/MIME Signature Policy Qualifier
291id-smime-spq 1		: id-smime-spq-ets-sqt-uri
292id-smime-spq 2		: id-smime-spq-ets-sqt-unotice
293
294# S/MIME Commitment Type Identifier
295id-smime-cti 1		: id-smime-cti-ets-proofOfOrigin
296id-smime-cti 2		: id-smime-cti-ets-proofOfReceipt
297id-smime-cti 3		: id-smime-cti-ets-proofOfDelivery
298id-smime-cti 4		: id-smime-cti-ets-proofOfSender
299id-smime-cti 5		: id-smime-cti-ets-proofOfApproval
300id-smime-cti 6		: id-smime-cti-ets-proofOfCreation
301
302pkcs9 20		:			: friendlyName
303pkcs9 21		:			: localKeyID
304!Cname ms-csp-name
3051 3 6 1 4 1 311 17 1	: CSPName		: Microsoft CSP Name
306!Alias certTypes pkcs9 22
307certTypes 1		:			: x509Certificate
308certTypes 2		:			: sdsiCertificate
309!Alias crlTypes pkcs9 23
310crlTypes 1		:			: x509Crl
311
312!Alias pkcs12 pkcs 12
313!Alias pkcs12-pbeids pkcs12 1
314
315!Cname pbe-WithSHA1And128BitRC4
316pkcs12-pbeids 1		: PBE-SHA1-RC4-128	: pbeWithSHA1And128BitRC4
317!Cname pbe-WithSHA1And40BitRC4
318pkcs12-pbeids 2		: PBE-SHA1-RC4-40	: pbeWithSHA1And40BitRC4
319!Cname pbe-WithSHA1And3_Key_TripleDES-CBC
320pkcs12-pbeids 3		: PBE-SHA1-3DES		: pbeWithSHA1And3-KeyTripleDES-CBC
321!Cname pbe-WithSHA1And2_Key_TripleDES-CBC
322pkcs12-pbeids 4		: PBE-SHA1-2DES		: pbeWithSHA1And2-KeyTripleDES-CBC
323!Cname pbe-WithSHA1And128BitRC2-CBC
324pkcs12-pbeids 5		: PBE-SHA1-RC2-128	: pbeWithSHA1And128BitRC2-CBC
325!Cname pbe-WithSHA1And40BitRC2-CBC
326pkcs12-pbeids 6		: PBE-SHA1-RC2-40	: pbeWithSHA1And40BitRC2-CBC
327
328!Alias pkcs12-Version1 pkcs12 10
329!Alias pkcs12-BagIds pkcs12-Version1 1
330pkcs12-BagIds 1		:			: keyBag
331pkcs12-BagIds 2		:			: pkcs8ShroudedKeyBag
332pkcs12-BagIds 3		:			: certBag
333pkcs12-BagIds 4		:			: crlBag
334pkcs12-BagIds 5		:			: secretBag
335pkcs12-BagIds 6		:			: safeContentsBag
336
337rsadsi 2 2		: MD2			: md2
338rsadsi 2 4		: MD4			: md4
339rsadsi 2 5		: MD5			: md5
340			: MD5-SHA1		: md5-sha1
341rsadsi 2 7		:			: hmacWithSHA1
342rsadsi 3 2		: RC2-CBC		: rc2-cbc
343			: RC2-ECB		: rc2-ecb
344!Cname rc2-cfb64
345			: RC2-CFB		: rc2-cfb
346!Cname rc2-ofb64
347			: RC2-OFB		: rc2-ofb
348			: RC2-40-CBC		: rc2-40-cbc
349			: RC2-64-CBC		: rc2-64-cbc
350rsadsi 3 4		: RC4			: rc4
351			: RC4-40		: rc4-40
352rsadsi 3 7		: DES-EDE3-CBC		: des-ede3-cbc
353rsadsi 3 8		: RC5-CBC		: rc5-cbc
354			: RC5-ECB		: rc5-ecb
355!Cname rc5-cfb64
356			: RC5-CFB		: rc5-cfb
357!Cname rc5-ofb64
358			: RC5-OFB		: rc5-ofb
359
360!Cname ms-ext-req
3611 3 6 1 4 1 311 2 1 14	: msExtReq		: Microsoft Extension Request
362!Cname ms-code-ind
3631 3 6 1 4 1 311 2 1 21	: msCodeInd		: Microsoft Individual Code Signing
364!Cname ms-code-com
3651 3 6 1 4 1 311 2 1 22	: msCodeCom		: Microsoft Commercial Code Signing
366!Cname ms-ctl-sign
3671 3 6 1 4 1 311 10 3 1	: msCTLSign		: Microsoft Trust List Signing
368!Cname ms-sgc
3691 3 6 1 4 1 311 10 3 3	: msSGC			: Microsoft Server Gated Crypto
370!Cname ms-efs
3711 3 6 1 4 1 311 10 3 4	: msEFS			: Microsoft Encrypted File System
372!Cname ms-smartcard-login
3731 3 6 1 4 1 311 20 2 2	: msSmartcardLogin	: Microsoft Smartcardlogin
374!Cname ms-upn
3751 3 6 1 4 1 311 20 2 3	: msUPN			: Microsoft Universal Principal Name
376
3771 3 6 1 4 1 188 7 1 1 2	: IDEA-CBC		: idea-cbc
378			: IDEA-ECB		: idea-ecb
379!Cname idea-cfb64
380			: IDEA-CFB		: idea-cfb
381!Cname idea-ofb64
382			: IDEA-OFB		: idea-ofb
383
3841 3 6 1 4 1 3029 1 2	: BF-CBC		: bf-cbc
385			: BF-ECB		: bf-ecb
386!Cname bf-cfb64
387			: BF-CFB		: bf-cfb
388!Cname bf-ofb64
389			: BF-OFB		: bf-ofb
390
391!Cname id-pkix
3921 3 6 1 5 5 7		: PKIX
393
394# PKIX Arcs
395id-pkix 0		: id-pkix-mod
396id-pkix 1		: id-pe
397id-pkix 2		: id-qt
398id-pkix 3		: id-kp
399id-pkix 4		: id-it
400id-pkix 5		: id-pkip
401id-pkix 6		: id-alg
402id-pkix 7		: id-cmc
403id-pkix 8		: id-on
404id-pkix 9		: id-pda
405id-pkix 10		: id-aca
406id-pkix 11		: id-qcs
407id-pkix 12		: id-cct
408id-pkix 21		: id-ppl
409id-pkix 48		: id-ad
410
411# PKIX Modules
412id-pkix-mod 1		: id-pkix1-explicit-88
413id-pkix-mod 2		: id-pkix1-implicit-88
414id-pkix-mod 3		: id-pkix1-explicit-93
415id-pkix-mod 4		: id-pkix1-implicit-93
416id-pkix-mod 5		: id-mod-crmf
417id-pkix-mod 6		: id-mod-cmc
418id-pkix-mod 7		: id-mod-kea-profile-88
419id-pkix-mod 8		: id-mod-kea-profile-93
420id-pkix-mod 9		: id-mod-cmp
421id-pkix-mod 10		: id-mod-qualified-cert-88
422id-pkix-mod 11		: id-mod-qualified-cert-93
423id-pkix-mod 12		: id-mod-attribute-cert
424id-pkix-mod 13		: id-mod-timestamp-protocol
425id-pkix-mod 14		: id-mod-ocsp
426id-pkix-mod 15		: id-mod-dvcs
427id-pkix-mod 16		: id-mod-cmp2000
428
429# PKIX Private Extensions
430!Cname info-access
431id-pe 1			: authorityInfoAccess	: Authority Information Access
432id-pe 2			: biometricInfo		: Biometric Info
433id-pe 3			: qcStatements
434id-pe 4			: ac-auditEntity
435id-pe 5			: ac-targeting
436id-pe 6			: aaControls
437id-pe 7			: sbgp-ipAddrBlock
438id-pe 8			: sbgp-autonomousSysNum
439id-pe 9			: sbgp-routerIdentifier
440id-pe 10		: ac-proxying
441!Cname sinfo-access
442id-pe 11		: subjectInfoAccess	: Subject Information Access
443id-pe 14		: proxyCertInfo		: Proxy Certificate Information
444
445# PKIX policyQualifiers for Internet policy qualifiers
446id-qt 1			: id-qt-cps		: Policy Qualifier CPS
447id-qt 2			: id-qt-unotice		: Policy Qualifier User Notice
448id-qt 3			: textNotice
449
450# PKIX key purpose identifiers
451!Cname server-auth
452id-kp 1			: serverAuth		: TLS Web Server Authentication
453!Cname client-auth
454id-kp 2			: clientAuth		: TLS Web Client Authentication
455!Cname code-sign
456id-kp 3			: codeSigning		: Code Signing
457!Cname email-protect
458id-kp 4			: emailProtection	: E-mail Protection
459id-kp 5			: ipsecEndSystem	: IPSec End System
460id-kp 6			: ipsecTunnel		: IPSec Tunnel
461id-kp 7			: ipsecUser		: IPSec User
462!Cname time-stamp
463id-kp 8			: timeStamping		: Time Stamping
464# From OCSP spec RFC2560
465!Cname OCSP-sign
466id-kp 9			: OCSPSigning		: OCSP Signing
467id-kp 10		: DVCS			: dvcs
468
469# CMP information types
470id-it 1			: id-it-caProtEncCert
471id-it 2			: id-it-signKeyPairTypes
472id-it 3			: id-it-encKeyPairTypes
473id-it 4			: id-it-preferredSymmAlg
474id-it 5			: id-it-caKeyUpdateInfo
475id-it 6			: id-it-currentCRL
476id-it 7			: id-it-unsupportedOIDs
477# obsolete
478id-it 8			: id-it-subscriptionRequest
479# obsolete
480id-it 9			: id-it-subscriptionResponse
481id-it 10		: id-it-keyPairParamReq
482id-it 11		: id-it-keyPairParamRep
483id-it 12		: id-it-revPassphrase
484id-it 13		: id-it-implicitConfirm
485id-it 14		: id-it-confirmWaitTime
486id-it 15		: id-it-origPKIMessage
487
488# CRMF registration
489id-pkip 1		: id-regCtrl
490id-pkip 2		: id-regInfo
491
492# CRMF registration controls
493id-regCtrl 1		: id-regCtrl-regToken
494id-regCtrl 2		: id-regCtrl-authenticator
495id-regCtrl 3		: id-regCtrl-pkiPublicationInfo
496id-regCtrl 4		: id-regCtrl-pkiArchiveOptions
497id-regCtrl 5		: id-regCtrl-oldCertID
498id-regCtrl 6		: id-regCtrl-protocolEncrKey
499
500# CRMF registration information
501id-regInfo 1		: id-regInfo-utf8Pairs
502id-regInfo 2		: id-regInfo-certReq
503
504# algorithms
505id-alg 1		: id-alg-des40
506id-alg 2		: id-alg-noSignature
507id-alg 3		: id-alg-dh-sig-hmac-sha1
508id-alg 4		: id-alg-dh-pop
509
510# CMC controls
511id-cmc 1		: id-cmc-statusInfo
512id-cmc 2		: id-cmc-identification
513id-cmc 3		: id-cmc-identityProof
514id-cmc 4		: id-cmc-dataReturn
515id-cmc 5		: id-cmc-transactionId
516id-cmc 6		: id-cmc-senderNonce
517id-cmc 7		: id-cmc-recipientNonce
518id-cmc 8		: id-cmc-addExtensions
519id-cmc 9		: id-cmc-encryptedPOP
520id-cmc 10		: id-cmc-decryptedPOP
521id-cmc 11		: id-cmc-lraPOPWitness
522id-cmc 15		: id-cmc-getCert
523id-cmc 16		: id-cmc-getCRL
524id-cmc 17		: id-cmc-revokeRequest
525id-cmc 18		: id-cmc-regInfo
526id-cmc 19		: id-cmc-responseInfo
527id-cmc 21		: id-cmc-queryPending
528id-cmc 22		: id-cmc-popLinkRandom
529id-cmc 23		: id-cmc-popLinkWitness
530id-cmc 24		: id-cmc-confirmCertAcceptance 
531
532# other names
533id-on 1			: id-on-personalData
534
535# personal data attributes
536id-pda 1		: id-pda-dateOfBirth
537id-pda 2		: id-pda-placeOfBirth
538id-pda 3		: id-pda-gender
539id-pda 4		: id-pda-countryOfCitizenship
540id-pda 5		: id-pda-countryOfResidence
541
542# attribute certificate attributes
543id-aca 1		: id-aca-authenticationInfo
544id-aca 2		: id-aca-accessIdentity
545id-aca 3		: id-aca-chargingIdentity
546id-aca 4		: id-aca-group
547# attention : the following seems to be obsolete, replace by 'role'
548id-aca 5		: id-aca-role
549id-aca 6		: id-aca-encAttrs
550
551# qualified certificate statements
552id-qcs 1		: id-qcs-pkixQCSyntax-v1
553
554# CMC content types
555id-cct 1		: id-cct-crs
556id-cct 2		: id-cct-PKIData
557id-cct 3		: id-cct-PKIResponse
558
559# Predefined Proxy Certificate policy languages
560id-ppl 0		: id-ppl-anyLanguage	: Any language
561id-ppl 1		: id-ppl-inheritAll	: Inherit all
562id-ppl 2		: id-ppl-independent	: Independent
563
564# access descriptors for authority info access extension
565!Cname ad-OCSP
566id-ad 1			: OCSP			: OCSP
567!Cname ad-ca-issuers
568id-ad 2			: caIssuers		: CA Issuers
569!Cname ad-timeStamping
570id-ad 3			: ad_timestamping	: AD Time Stamping
571!Cname ad-dvcs
572id-ad 4			: AD_DVCS		: ad dvcs
573
574
575!Alias id-pkix-OCSP ad-OCSP
576!module id-pkix-OCSP
577!Cname basic
578id-pkix-OCSP 1		: basicOCSPResponse	: Basic OCSP Response
579id-pkix-OCSP 2		: Nonce			: OCSP Nonce
580id-pkix-OCSP 3		: CrlID			: OCSP CRL ID
581id-pkix-OCSP 4		: acceptableResponses	: Acceptable OCSP Responses
582id-pkix-OCSP 5		: noCheck		: OCSP No Check
583id-pkix-OCSP 6		: archiveCutoff		: OCSP Archive Cutoff
584id-pkix-OCSP 7		: serviceLocator	: OCSP Service Locator
585id-pkix-OCSP 8		: extendedStatus	: Extended OCSP Status
586id-pkix-OCSP 9		: valid
587id-pkix-OCSP 10		: path
588id-pkix-OCSP 11		: trustRoot		: Trust Root
589!global
590
5911 3 14 3 2		: algorithm		: algorithm
592algorithm 3		: RSA-NP-MD5		: md5WithRSA
593algorithm 6		: DES-ECB		: des-ecb
594algorithm 7		: DES-CBC		: des-cbc
595!Cname des-ofb64
596algorithm 8		: DES-OFB		: des-ofb
597!Cname des-cfb64
598algorithm 9		: DES-CFB		: des-cfb
599algorithm 11		: rsaSignature
600!Cname dsa-2
601algorithm 12		: DSA-old		: dsaEncryption-old
602algorithm 13		: DSA-SHA		: dsaWithSHA
603algorithm 15		: RSA-SHA		: shaWithRSAEncryption
604!Cname des-ede-ecb
605algorithm 17		: DES-EDE		: des-ede
606!Cname des-ede3-ecb
607			: DES-EDE3		: des-ede3
608			: DES-EDE-CBC		: des-ede-cbc
609!Cname des-ede-cfb64
610			: DES-EDE-CFB		: des-ede-cfb
611!Cname des-ede3-cfb64
612			: DES-EDE3-CFB		: des-ede3-cfb
613!Cname des-ede-ofb64
614			: DES-EDE-OFB		: des-ede-ofb
615!Cname des-ede3-ofb64
616			: DES-EDE3-OFB		: des-ede3-ofb
617			: DESX-CBC		: desx-cbc
618algorithm 18		: SHA			: sha
619algorithm 26		: SHA1			: sha1
620!Cname dsaWithSHA1-2
621algorithm 27		: DSA-SHA1-old		: dsaWithSHA1-old
622algorithm 29		: RSA-SHA1-2		: sha1WithRSA
623
6241 3 36 3 2 1		: RIPEMD160		: ripemd160
6251 3 36 3 3 1 2		: RSA-RIPEMD160		: ripemd160WithRSA
626
627!Cname sxnet
6281 3 101 1 4 1		: SXNetID		: Strong Extranet ID
629
6302 5			: X500			: directory services (X.500)
631
632X500 4			: X509
633X509 3			: CN			: commonName
634X509 4			: SN			: surname
635X509 5			: 			: serialNumber
636X509 6			: C			: countryName
637X509 7			: L			: localityName
638X509 8			: ST			: stateOrProvinceName
639X509 9			:			: streetAddress
640X509 10			: O			: organizationName
641X509 11			: OU			: organizationalUnitName
642X509 12			: 			: title
643X509 13			: 			: description
644X509 17			:			: postalCode
645X509 41			: name			: name
646X509 42			: GN			: givenName
647X509 43			: 			: initials
648X509 44			: 			: generationQualifier
649X509 45			: 			: x500UniqueIdentifier
650X509 46			: dnQualifier		: dnQualifier
651X509 65			:			: pseudonym
652X509 72			: role			: role
653
654X500 8			: X500algorithms	: directory services - algorithms
655X500algorithms 1 1	: RSA			: rsa
656X500algorithms 3 100	: RSA-MDC2		: mdc2WithRSA
657X500algorithms 3 101	: MDC2			: mdc2
658
659X500 29			: id-ce
660!Cname subject-directory-attributes
661id-ce 9			: subjectDirectoryAttributes : X509v3 Subject Directory Attributes
662!Cname subject-key-identifier
663id-ce 14		: subjectKeyIdentifier	: X509v3 Subject Key Identifier
664!Cname key-usage
665id-ce 15		: keyUsage		: X509v3 Key Usage
666!Cname private-key-usage-period
667id-ce 16		: privateKeyUsagePeriod	: X509v3 Private Key Usage Period
668!Cname subject-alt-name
669id-ce 17		: subjectAltName	: X509v3 Subject Alternative Name
670!Cname issuer-alt-name
671id-ce 18		: issuerAltName		: X509v3 Issuer Alternative Name
672!Cname basic-constraints
673id-ce 19		: basicConstraints	: X509v3 Basic Constraints
674!Cname crl-number
675id-ce 20		: crlNumber		: X509v3 CRL Number
676!Cname crl-reason
677id-ce 21		: CRLReason		: X509v3 CRL Reason Code
678!Cname invalidity-date
679id-ce 24		: invalidityDate	: Invalidity Date
680!Cname delta-crl
681id-ce 27		: deltaCRL		: X509v3 Delta CRL Indicator
682!Cname issuing-distribution-point
683id-ce 28		: issuingDistributionPoint : X509v3 Issuing Distrubution Point
684!Cname certificate-issuer
685id-ce 29		: certificateIssuer	: X509v3 Certificate Issuer
686!Cname name-constraints
687id-ce 30		: nameConstraints	: X509v3 Name Constraints
688!Cname crl-distribution-points
689id-ce 31		: crlDistributionPoints	: X509v3 CRL Distribution Points
690!Cname certificate-policies
691id-ce 32		: certificatePolicies	: X509v3 Certificate Policies
692!Cname any-policy
693certificate-policies 0	: anyPolicy		: X509v3 Any Policy
694!Cname policy-mappings
695id-ce 33		: policyMappings	: X509v3 Policy Mappings
696!Cname authority-key-identifier
697id-ce 35		: authorityKeyIdentifier : X509v3 Authority Key Identifier
698!Cname policy-constraints
699id-ce 36		: policyConstraints	: X509v3 Policy Constraints
700!Cname ext-key-usage
701id-ce 37		: extendedKeyUsage	: X509v3 Extended Key Usage
702!Cname inhibit-any-policy
703id-ce 54		: inhibitAnyPolicy	: X509v3 Inhibit Any Policy
704!Cname target-information
705id-ce 55		: targetInformation	: X509v3 AC Targeting
706!Cname no-rev-avail
707id-ce 56		: noRevAvail		: X509v3 No Revocation Available
708
709!Cname netscape
7102 16 840 1 113730	: Netscape		: Netscape Communications Corp.
711!Cname netscape-cert-extension
712netscape 1		: nsCertExt		: Netscape Certificate Extension
713!Cname netscape-data-type
714netscape 2		: nsDataType		: Netscape Data Type
715!Cname netscape-cert-type
716netscape-cert-extension 1 : nsCertType		: Netscape Cert Type
717!Cname netscape-base-url
718netscape-cert-extension 2 : nsBaseUrl		: Netscape Base Url
719!Cname netscape-revocation-url
720netscape-cert-extension 3 : nsRevocationUrl	: Netscape Revocation Url
721!Cname netscape-ca-revocation-url
722netscape-cert-extension 4 : nsCaRevocationUrl	: Netscape CA Revocation Url
723!Cname netscape-renewal-url
724netscape-cert-extension 7 : nsRenewalUrl	: Netscape Renewal Url
725!Cname netscape-ca-policy-url
726netscape-cert-extension 8 : nsCaPolicyUrl	: Netscape CA Policy Url
727!Cname netscape-ssl-server-name
728netscape-cert-extension 12 : nsSslServerName	: Netscape SSL Server Name
729!Cname netscape-comment
730netscape-cert-extension 13 : nsComment		: Netscape Comment
731!Cname netscape-cert-sequence
732netscape-data-type 5	: nsCertSequence	: Netscape Certificate Sequence
733!Cname ns-sgc
734netscape 4 1		: nsSGC			: Netscape Server Gated Crypto
735
736# iso(1)
737iso 3			: ORG			: org
738org 6			: DOD			: dod
739dod 1			: IANA			: iana
740!Alias internet iana
741
742internet 1		: directory		: Directory
743internet 2		: mgmt			: Management
744internet 3		: experimental		: Experimental
745internet 4		: private		: Private
746internet 5		: security		: Security
747internet 6		: snmpv2		: SNMPv2
748# Documents refer to "internet 7" as "mail". This however leads to ambiguities
749# with RFC2798, Section 9.1.3, where "mail" is defined as the short name for
750# rfc822Mailbox. The short name is therefore here left out for a reason.
751# Subclasses of "mail", e.g. "MIME MHS" don't consitute a problem, as
752# references are realized via long name "Mail" (with capital M).
753internet 7		:			: Mail
754
755Private 1		: enterprises		: Enterprises
756
757# RFC 2247
758Enterprises 1466 344	: dcobject		: dcObject
759
760# RFC 1495
761Mail 1			: mime-mhs		: MIME MHS
762mime-mhs 1		: mime-mhs-headings	: mime-mhs-headings
763mime-mhs 2		: mime-mhs-bodies	: mime-mhs-bodies
764mime-mhs-headings 1	: id-hex-partial-message : id-hex-partial-message
765mime-mhs-headings 2	: id-hex-multipart-message : id-hex-multipart-message
766
767# What the hell are these OIDs, really?
768!Cname rle-compression
7691 1 1 1 666 1		: RLE			: run length compression
770!Cname zlib-compression
7711 1 1 1 666 2		: ZLIB			: zlib compression
772
773# AES aka Rijndael
774
775!Alias csor 2 16 840 1 101 3
776!Alias nistAlgorithms csor 4
777!Alias aes nistAlgorithms 1
778
779aes 1			: AES-128-ECB		: aes-128-ecb
780aes 2			: AES-128-CBC		: aes-128-cbc
781!Cname aes-128-ofb128
782aes 3			: AES-128-OFB		: aes-128-ofb
783!Cname aes-128-cfb128
784aes 4			: AES-128-CFB		: aes-128-cfb
785
786aes 21			: AES-192-ECB		: aes-192-ecb
787aes 22			: AES-192-CBC		: aes-192-cbc
788!Cname aes-192-ofb128
789aes 23			: AES-192-OFB		: aes-192-ofb
790!Cname aes-192-cfb128
791aes 24			: AES-192-CFB		: aes-192-cfb
792
793aes 41			: AES-256-ECB		: aes-256-ecb
794aes 42			: AES-256-CBC		: aes-256-cbc
795!Cname aes-256-ofb128
796aes 43			: AES-256-OFB		: aes-256-ofb
797!Cname aes-256-cfb128
798aes 44			: AES-256-CFB		: aes-256-cfb
799
800# There are no OIDs for these modes...
801
802			: AES-128-CFB1		: aes-128-cfb1
803			: AES-192-CFB1		: aes-192-cfb1
804			: AES-256-CFB1		: aes-256-cfb1
805			: AES-128-CFB8		: aes-128-cfb8
806			: AES-192-CFB8		: aes-192-cfb8
807			: AES-256-CFB8		: aes-256-cfb8
808			: DES-CFB1		: des-cfb1
809			: DES-CFB8		: des-cfb8
810			: DES-EDE3-CFB1		: des-ede3-cfb1
811			: DES-EDE3-CFB8		: des-ede3-cfb8
812
813# OIDs for SHA224, SHA256, SHA385 and SHA512, according to x9.84.
814!Alias nist_hashalgs nistAlgorithms 2
815nist_hashalgs 1		: SHA256		: sha256
816nist_hashalgs 2		: SHA384		: sha384
817nist_hashalgs 3		: SHA512		: sha512
818nist_hashalgs 4		: SHA224		: sha224
819
820# Hold instruction CRL entry extension
821!Cname hold-instruction-code
822id-ce 23		: holdInstructionCode	: Hold Instruction Code
823!Alias holdInstruction	X9-57 2
824!Cname hold-instruction-none
825holdInstruction 1	: holdInstructionNone	: Hold Instruction None
826!Cname hold-instruction-call-issuer
827holdInstruction 2	: holdInstructionCallIssuer : Hold Instruction Call Issuer
828!Cname hold-instruction-reject
829holdInstruction 3	: holdInstructionReject	: Hold Instruction Reject
830
831# OID's from ITU-T.  Most of this is defined in RFC 1274.  A couple of
832# them are also mentioned in RFC 2247
833itu-t 9			: data
834data 2342		: pss
835pss 19200300		: ucl
836ucl 100			: pilot
837pilot 1			:			: pilotAttributeType
838pilot 3			:			: pilotAttributeSyntax
839pilot 4			:			: pilotObjectClass
840pilot 10		:			: pilotGroups
841pilotAttributeSyntax 4	:			: iA5StringSyntax
842pilotAttributeSyntax 5	:			: caseIgnoreIA5StringSyntax
843pilotObjectClass 3	:			: pilotObject
844pilotObjectClass 4	:			: pilotPerson
845pilotObjectClass 5	: account
846pilotObjectClass 6	: document
847pilotObjectClass 7	: room
848pilotObjectClass 9	:			: documentSeries
849pilotObjectClass 13	: domain		: Domain
850pilotObjectClass 14	:			: rFC822localPart
851pilotObjectClass 15	:			: dNSDomain
852pilotObjectClass 17	:			: domainRelatedObject
853pilotObjectClass 18	:			: friendlyCountry
854pilotObjectClass 19	:			: simpleSecurityObject
855pilotObjectClass 20	:			: pilotOrganization
856pilotObjectClass 21	:			: pilotDSA
857pilotObjectClass 22	:			: qualityLabelledData
858pilotAttributeType 1	: UID			: userId
859pilotAttributeType 2	:			: textEncodedORAddress
860pilotAttributeType 3	: mail			: rfc822Mailbox
861pilotAttributeType 4	: info
862pilotAttributeType 5	:			: favouriteDrink
863pilotAttributeType 6	:			: roomNumber
864pilotAttributeType 7	: photo
865pilotAttributeType 8	:			: userClass
866pilotAttributeType 9	: host
867pilotAttributeType 10	: manager
868pilotAttributeType 11	:			: documentIdentifier
869pilotAttributeType 12	:			: documentTitle
870pilotAttributeType 13	:			: documentVersion
871pilotAttributeType 14	:			: documentAuthor
872pilotAttributeType 15	:			: documentLocation
873pilotAttributeType 20	:			: homeTelephoneNumber
874pilotAttributeType 21	: secretary
875pilotAttributeType 22	:			: otherMailbox
876pilotAttributeType 23	:			: lastModifiedTime
877pilotAttributeType 24	:			: lastModifiedBy
878pilotAttributeType 25	: DC			: domainComponent
879pilotAttributeType 26	:			: aRecord
880pilotAttributeType 27	:			: pilotAttributeType27
881pilotAttributeType 28	:			: mXRecord
882pilotAttributeType 29	:			: nSRecord
883pilotAttributeType 30	:			: sOARecord
884pilotAttributeType 31	:			: cNAMERecord
885pilotAttributeType 37	:			: associatedDomain
886pilotAttributeType 38	:			: associatedName
887pilotAttributeType 39	:			: homePostalAddress
888pilotAttributeType 40	:			: personalTitle
889pilotAttributeType 41	:			: mobileTelephoneNumber
890pilotAttributeType 42	:			: pagerTelephoneNumber
891pilotAttributeType 43	:			: friendlyCountryName
892# The following clashes with 2.5.4.45, so commented away
893#pilotAttributeType 44	: uid			: uniqueIdentifier
894pilotAttributeType 45	:			: organizationalStatus
895pilotAttributeType 46	:			: janetMailbox
896pilotAttributeType 47	:			: mailPreferenceOption
897pilotAttributeType 48	:			: buildingName
898pilotAttributeType 49	:			: dSAQuality
899pilotAttributeType 50	:			: singleLevelQuality
900pilotAttributeType 51	:			: subtreeMinimumQuality
901pilotAttributeType 52	:			: subtreeMaximumQuality
902pilotAttributeType 53	:			: personalSignature
903pilotAttributeType 54	:			: dITRedirect
904pilotAttributeType 55	: audio
905pilotAttributeType 56	:			: documentPublisher
906
907international-organizations 42	: id-set	: Secure Electronic Transactions
908
909id-set 0		: set-ctype		: content types
910id-set 1		: set-msgExt		: message extensions
911id-set 3		: set-attr
912id-set 5		: set-policy
913id-set 7		: set-certExt		: certificate extensions
914id-set 8		: set-brand
915
916set-ctype 0		: setct-PANData
917set-ctype 1		: setct-PANToken
918set-ctype 2		: setct-PANOnly
919set-ctype 3		: setct-OIData
920set-ctype 4		: setct-PI
921set-ctype 5		: setct-PIData
922set-ctype 6		: setct-PIDataUnsigned
923set-ctype 7		: setct-HODInput
924set-ctype 8		: setct-AuthResBaggage
925set-ctype 9		: setct-AuthRevReqBaggage
926set-ctype 10		: setct-AuthRevResBaggage
927set-ctype 11		: setct-CapTokenSeq
928set-ctype 12		: setct-PInitResData
929set-ctype 13		: setct-PI-TBS
930set-ctype 14		: setct-PResData
931set-ctype 16		: setct-AuthReqTBS
932set-ctype 17		: setct-AuthResTBS
933set-ctype 18		: setct-AuthResTBSX
934set-ctype 19		: setct-AuthTokenTBS
935set-ctype 20		: setct-CapTokenData
936set-ctype 21		: setct-CapTokenTBS
937set-ctype 22		: setct-AcqCardCodeMsg
938set-ctype 23		: setct-AuthRevReqTBS
939set-ctype 24		: setct-AuthRevResData
940set-ctype 25		: setct-AuthRevResTBS
941set-ctype 26		: setct-CapReqTBS
942set-ctype 27		: setct-CapReqTBSX
943set-ctype 28		: setct-CapResData
944set-ctype 29		: setct-CapRevReqTBS
945set-ctype 30		: setct-CapRevReqTBSX
946set-ctype 31		: setct-CapRevResData
947set-ctype 32		: setct-CredReqTBS
948set-ctype 33		: setct-CredReqTBSX
949set-ctype 34		: setct-CredResData
950set-ctype 35		: setct-CredRevReqTBS
951set-ctype 36		: setct-CredRevReqTBSX
952set-ctype 37		: setct-CredRevResData
953set-ctype 38		: setct-PCertReqData
954set-ctype 39		: setct-PCertResTBS
955set-ctype 40		: setct-BatchAdminReqData
956set-ctype 41		: setct-BatchAdminResData
957set-ctype 42		: setct-CardCInitResTBS
958set-ctype 43		: setct-MeAqCInitResTBS
959set-ctype 44		: setct-RegFormResTBS
960set-ctype 45		: setct-CertReqData
961set-ctype 46		: setct-CertReqTBS
962set-ctype 47		: setct-CertResData
963set-ctype 48		: setct-CertInqReqTBS
964set-ctype 49		: setct-ErrorTBS
965set-ctype 50		: setct-PIDualSignedTBE
966set-ctype 51		: setct-PIUnsignedTBE
967set-ctype 52		: setct-AuthReqTBE
968set-ctype 53		: setct-AuthResTBE
969set-ctype 54		: setct-AuthResTBEX
970set-ctype 55		: setct-AuthTokenTBE
971set-ctype 56		: setct-CapTokenTBE
972set-ctype 57		: setct-CapTokenTBEX
973set-ctype 58		: setct-AcqCardCodeMsgTBE
974set-ctype 59		: setct-AuthRevReqTBE
975set-ctype 60		: setct-AuthRevResTBE
976set-ctype 61		: setct-AuthRevResTBEB
977set-ctype 62		: setct-CapReqTBE
978set-ctype 63		: setct-CapReqTBEX
979set-ctype 64		: setct-CapResTBE
980set-ctype 65		: setct-CapRevReqTBE
981set-ctype 66		: setct-CapRevReqTBEX
982set-ctype 67		: setct-CapRevResTBE
983set-ctype 68		: setct-CredReqTBE
984set-ctype 69		: setct-CredReqTBEX
985set-ctype 70		: setct-CredResTBE
986set-ctype 71		: setct-CredRevReqTBE
987set-ctype 72		: setct-CredRevReqTBEX
988set-ctype 73		: setct-CredRevResTBE
989set-ctype 74		: setct-BatchAdminReqTBE
990set-ctype 75		: setct-BatchAdminResTBE
991set-ctype 76		: setct-RegFormReqTBE
992set-ctype 77		: setct-CertReqTBE
993set-ctype 78		: setct-CertReqTBEX
994set-ctype 79		: setct-CertResTBE
995set-ctype 80		: setct-CRLNotificationTBS
996set-ctype 81		: setct-CRLNotificationResTBS
997set-ctype 82		: setct-BCIDistributionTBS
998
999set-msgExt 1		: setext-genCrypt	: generic cryptogram
1000set-msgExt 3		: setext-miAuth		: merchant initiated auth
1001set-msgExt 4		: setext-pinSecure
1002set-msgExt 5		: setext-pinAny
1003set-msgExt 7		: setext-track2
1004set-msgExt 8		: setext-cv		: additional verification
1005
1006set-policy 0		: set-policy-root
1007
1008set-certExt 0		: setCext-hashedRoot
1009set-certExt 1		: setCext-certType
1010set-certExt 2		: setCext-merchData
1011set-certExt 3		: setCext-cCertRequired
1012set-certExt 4		: setCext-tunneling
1013set-certExt 5		: setCext-setExt
1014set-certExt 6		: setCext-setQualf
1015set-certExt 7		: setCext-PGWYcapabilities
1016set-certExt 8		: setCext-TokenIdentifier
1017set-certExt 9		: setCext-Track2Data
1018set-certExt 10		: setCext-TokenType
1019set-certExt 11		: setCext-IssuerCapabilities
1020
1021set-attr 0		: setAttr-Cert
1022set-attr 1		: setAttr-PGWYcap	: payment gateway capabilities
1023set-attr 2		: setAttr-TokenType
1024set-attr 3		: setAttr-IssCap	: issuer capabilities
1025
1026setAttr-Cert 0		: set-rootKeyThumb
1027setAttr-Cert 1		: set-addPolicy
1028
1029setAttr-TokenType 1	: setAttr-Token-EMV
1030setAttr-TokenType 2	: setAttr-Token-B0Prime
1031
1032setAttr-IssCap 3	: setAttr-IssCap-CVM
1033setAttr-IssCap 4	: setAttr-IssCap-T2
1034setAttr-IssCap 5	: setAttr-IssCap-Sig
1035
1036setAttr-IssCap-CVM 1	: setAttr-GenCryptgrm	: generate cryptogram
1037setAttr-IssCap-T2 1	: setAttr-T2Enc		: encrypted track 2
1038setAttr-IssCap-T2 2	: setAttr-T2cleartxt	: cleartext track 2
1039
1040setAttr-IssCap-Sig 1	: setAttr-TokICCsig	: ICC or token signature
1041setAttr-IssCap-Sig 2	: setAttr-SecDevSig	: secure device signature
1042
1043set-brand 1		: set-brand-IATA-ATA
1044set-brand 30		: set-brand-Diners
1045set-brand 34		: set-brand-AmericanExpress
1046set-brand 35		: set-brand-JCB
1047set-brand 4		: set-brand-Visa
1048set-brand 5		: set-brand-MasterCard
1049set-brand 6011		: set-brand-Novus
1050
1051rsadsi 3 10		: DES-CDMF		: des-cdmf
1052rsadsi 1 1 6		: rsaOAEPEncryptionSET
1053
1054			: Oakley-EC2N-3		: ipsec3
1055			: Oakley-EC2N-4		: ipsec4
1056
1057
1058# Definitions for Camellia cipher - CBC MODE
10591 2 392 200011 61 1 1 1 2 : CAMELLIA-128-CBC		: camellia-128-cbc
10601 2 392 200011 61 1 1 1 3 : CAMELLIA-192-CBC		: camellia-192-cbc
10611 2 392 200011 61 1 1 1 4 : CAMELLIA-256-CBC		: camellia-256-cbc
1062
1063# Definitions for Camellia cipher - ECB, CFB, OFB MODE
1064!Alias ntt-ds 0 3 4401 5
1065!Alias camellia ntt-ds 3 1 9 
1066
1067camellia 1		: CAMELLIA-128-ECB		: camellia-128-ecb
1068!Cname camellia-128-ofb128
1069camellia 3		: CAMELLIA-128-OFB		: camellia-128-ofb
1070!Cname camellia-128-cfb128
1071camellia 4		: CAMELLIA-128-CFB		: camellia-128-cfb
1072
1073camellia 21		: CAMELLIA-192-ECB		: camellia-192-ecb
1074!Cname camellia-192-ofb128
1075camellia 23		: CAMELLIA-192-OFB		: camellia-192-ofb
1076!Cname camellia-192-cfb128
1077camellia 24		: CAMELLIA-192-CFB		: camellia-192-cfb
1078
1079camellia 41		: CAMELLIA-256-ECB		: camellia-256-ecb
1080!Cname camellia-256-ofb128
1081camellia 43		: CAMELLIA-256-OFB		: camellia-256-ofb
1082!Cname camellia-256-cfb128
1083camellia 44		: CAMELLIA-256-CFB		: camellia-256-cfb
1084
1085# There are no OIDs for these modes...
1086
1087			: CAMELLIA-128-CFB1		: camellia-128-cfb1
1088			: CAMELLIA-192-CFB1		: camellia-192-cfb1
1089			: CAMELLIA-256-CFB1		: camellia-256-cfb1
1090			: CAMELLIA-128-CFB8		: camellia-128-cfb8
1091			: CAMELLIA-192-CFB8		: camellia-192-cfb8
1092			: CAMELLIA-256-CFB8		: camellia-256-cfb8
1093
1094