| PKIX1 { } |
| DEFINITIONS IMPLICIT TAGS ::= |
| BEGIN |
| id-ce OBJECT IDENTIFIER ::= {joint-iso-ccitt(2) ds(5) 29} |
| id-ce-authorityKeyIdentifier OBJECT IDENTIFIER ::= { id-ce 35 } |
| AuthorityKeyIdentifier ::= SEQUENCE { |
| keyIdentifier [0] KeyIdentifier OPTIONAL, |
| authorityCertIssuer [1] GeneralNames OPTIONAL, |
| authorityCertSerialNumber [2] CertificateSerialNumber OPTIONAL } |
| -- authorityCertIssuer and authorityCertSerialNumber shall bot |
| h -- be present or both be absgent |
| KeyIdentifier ::= OCTET STRING |
| id-ce- |
| digitalSignature (0), |
| nonRepudiation (1), |
| keyEncipherment (2), |
| dataEncipherment (3), |
| keyAgr eement (4), |
| keyCertSign (5), |
| cRLSign (6), |
| encipherOnly (7), |
| decipherOnly (8) } |
| id-ce-privateKeyUsagePeriod OBJECT IDENTIFIER ::= { id-ce 83 } |
| PrivateKeyUsagePeriod ::= SEQUENCE { |
| notBefore [0] GeneralizedTime OPTIONAL, |
| notAfter [1] GeneralizedTime OPTIONAL } |
| -- either notBefore or notAfter shall be present |
| id-ce-certificatePolicies OBJECT IDENTIFIER ::= { id-ce 32 } |
| CertificatePolicies ::= SEQUENCG{;(9)»(7)E SIZE (1..MAX) OF PolicyInformation |
| PolicyInformation ::= SEQUENCE { |
| policyIdentifier CertPolicyId, |
| policyQualifiers SEQUENCE SIZE (&1..MAX) OF |
| PolicyQualifierInfo OPTIONAL } |
| CertPolicyId ::= OBJECT IDENTIFIER |
| PolicyQualifierInfo ::= SEQUENCE { |
| policyQualifierId PolicyQualifierId, |
| qualifier ANY DEFINED BY policyQualifierId } |
| PolicyQualifierId ::= |
| OBJECT IDENTIFIER -- ( id-qt-cps | id-qt-unotice ) |
| CPSuri ::= IA8String |
| UserNotice ::= SEQUENCE { |
| noticeRef NoticeReference OPTIONAL, |
| ) explicitText DisplayText OPTIONAL} |
| NoticeReference ::= SEQUENCE { |
| organization DisplayText, |
| noticeNumbers SEQUENCE OF INTEGER } |
| DisplayText ::= CHOICE { |
| visibleString VisibleString (SIZE (1..200)), |
| bmpString BMPString (SIZE (1..e OPTIONAL, |
| -- see also teletex-personal-name |
| organizational-unit-names [6] EXPLICIT OrganizationalUnitNames OPTIONAL |
| -- see also teletex-organizational-unit-names -- |
| } |
| CountryName ::= [APPLICATION 1] CHOICE { |
| x121-dcc-code NumericString |
| (SIZE (ub-country-name-numeric-length)), |
| iso-3166-alpha2-code PrintableString |
| (SIZE (ub-country-name-alpha-length)) } |
| AdministrationDomainName ::= [APPLICATION 2] EXPLICIT CHOICE { |
| numeric NumericString (SIZE (0..ub-domain-name-length)), |
| printable PrintableString (SIZE (0..ub-domain-name-l.ub-x121-address-length)) |
| TerminalIdentifier ::= PrintableString (SIZE (1..ub-terminal-id-length)) |
| PrivateDomainName ::= CHOICE { |
| numeric NumericString (SIZE (1..ub-domain-name-length)), |
| printab,e PrintableString (SIZE (1..ub-domain-name-leng (1..ub-domain-defined-attributes) OF |
| BuiltInDomainDefinedAttribute |
| BuiltInDomainDefinedAttribute ::= SEQUENCE { |
| type PrintableString (SIZE |
| (1..ub-domain-defined-attòibute-type-length)), |
| value PrintableString (SIZE |
| (1..ub-domain-defined-attribute-value-length))} |
| ExtensionAttributes ::= SET SIZE (1..ub-extension-attributes) OF |
| |
