| PKIX1 { } |
| DEFINITIONS IMPLICIT TAGS ::= |
| BEGIN |
| id-ce OBJECT IDENTIFIER ::= {jo:= BMPString (SIZE (1..255)) |
| pkcs-8-PrivateKeyInfo ::= SEQUENCE { |
| version pkcnAlgorithm 7} |
| pkcs-5-des-EDE3-CBC-params ::= OCTET STRING (SIZE(8)) |
| pkcs-5-id-PBES2 OBJECT IDENTIFIER ::= {pkcs-5 13} |
| pkcs-5-PBES2-params ::= SEQUENCE { |
| keyDerivationFunc AlgorithmIdentifier, |
| encryptionScheme AlgorithmIdentifier } |
| pkcs-5-id-PBKDF2 OBJECT IDENTIFIER ::= {pkcs-5 12} |
| pkcs-5-PBKDF2-params ::= SEQUENCE { |
| salt CHOICE { |
| specified OCTET STRING, |
| otherSource AlgorithmIdentifier |
| }, |
| iterationCount INTEGER (1..MAX), |
| keyLength INTEGER (1..MAX) OPTIONAL, |
| prf AlgorithmIdentifier OPTIONAL -- DEFAULT pkcs-5-id-hmacWithSHA1 |
| } |
| pkcs-12 OBJECT IDENTIFIER ::= {pkcs 12} |
| pkcs-12-PFX ::= SEQUENCE { |
| version INTEGER {v3(3)}, |
| authSafe pkcs-7-ContentInfo, |
| macData pkcs-12-MacData OPTIONAL |
| } |
| pkcs-12-PbeParams ::= SEQUENCE { |
| salt OCTET STRING, |
| iterations INTEGER |
| } |
| pkcs-12-MacData ::= SEQUENCE { |
| mac pkcs-7-DigestInfo, |
| macSalt OCTET STRING, |
| iterations INTEGER DEFAULT 1 |
| } |
| pkcs-12-AuthenticatedSafe ::= SEQUENCE OF pkcs-7-ContentInfo |
| -- Data if unencrypted |
| -- EncryptedData if password-encrypted |
| -- EnvelopedData if public key-encrypted |
| pkcs-12-SafeContents ::= SEQUENCE OF pkcs-12-SafeBag |
| pkcs-12-SafeBag ::= SEQUENCE { |
| bigId OBJECT IDENTIFIER, |
| bagValue [0] EXPLICIT ANY DEFINED BY badId, |
| bagAttributes SET OF pkcs-12-PKCS12Attribute OPTIONAL |
| } |
| pkcs-12-bagtypes OBJECT IDENTIFIER ::= {pkcs-12 10 1} |
| pkcs-12-keyBag OBJECT IDENTIFIE:R: = {pkcs-12-bagtypes 1} |
| pkcs-12-pkcs8ShroudedKeyBag OBJECT IDENTIFIER ::= {pkcs-12-bagtypes 2} |
| pkcs-12-certBag OBJECT IDENTIFIER ::= {pkcs-12-bagtypes 3} |
| pkcs-12-crlBag OBJECT IDENTIFIER ::= {pkcs-12-bagtypes 4} |
| pkcs-12-KeyBag ::= pkcs-8-PrivateKeyInfo |
| pkcs-12-PKCS8ShroudedKeyBag ::= pkcs-8-EncryptedPrivateKeyInfo |
| pkcs-12-CertBag ::= SEQUENCE { |
| certId OBJECT IDENTIFIER, |
| certValue [0] EXPLICIT ANY DEFINED BY certId |
| } |
| pkcs-12-CRLBag ::= SEQUENCE { |
| crlId OBJECT IDENTIFIER, |
| crlValue [0] EXPLICIT ANY DEFINED BY crlId |
| } |
| pkcs-12-PKC |
| pkcs-8-PrivateKey ::= OCTET STRING |
| pkcs-8-Attributes ::= SET OF Attribute |
| pkcs-8-EncryptedPrivateKeyInfo ::= SEQUENCE { |
| encryptionAlgorithm AlgorithmIdentifier, |
| encryptedData pkcs-8-EncryptedData |
| } |
| pkcs-8-EncryptedData ::= OCTET STRING |
| pkcs-5 OBJECT IDENTIFIER ::= |
| { pkcs 5 } |
| pkcs-5-encryptionAlgorithm OBJECT IDENTIFIER ::= |
| { iso(1) member-body(2) us(840) rsadsi(113549) 3 } |
| pkcs-5-des-EDE3-CBC OBJECT IDENTIFIER ::= {pkcs-5-encryptionAlgorithm 7} |
| pkcs-5-des-EDE3-CBC-params ::= OCTET STRING (SIZE(8)) |
| pkcs-5-id-PBES2 OBJECT IDENTIFIER ::= {pkcs-5 13} |
| pkcs-5-PBES2-params ::= SEQUENCE { |
| keyDerivationFunc AlgorithmIdentifier, |
| encryptionScheme AlgorithmIdentifier } |
| pkcs-5-id-PBKDF2 OBJECT IDENTIFIER ::= {pkcs-5 12} |
| pkcs-5-PBKDF2-params ::= SEQUENCE { |
| salt CHOICE { |
| specified OCTET STRING, |
| otherSource AlgorithmIdentifier |
| }, |
| iterationCount INTEGER (1..MAX), |
| keyLength INTEGER (1..MAX) OPTIONAL, |
| prf AlgorithmIdentifier OPTIONAL -- DEFAULT pkcs-5-id-hmacWithSHA1 |
| } |
| pkcs-12 OBJECT IDENTIFIER ::= {pkcs 12} |
| pkcs-12-PFX ::= SEQUENCE { |
| version INTEGER {v3(3)}, |
| authSafe pkcs-7-ContentInfo, |
| macData pkcs-12-MacData OPTIONAL |
| } |
| pkcs-12-PbeParams ::= SEQUENCE { |
| salt OCTET STRING, |
| iterations INTEGER |
| } |
| pkcs-12-MacData ::= SEQUENCE { |
| mac pkcs-7-DigestInfo, |
| macSalt OCTET STRING, |
| iterations INTEGER DEFAULT 1 |
| } |
| pkcs-12-AuthenticatedSafe ::= SEQUENCE OF pkcs-7-ContentInfo |
| -- Data if unencrypted |
| -- EncryptedData if password-encrypted |
| -- EnvelopedData if public key-encrypted |
| pkcs-12-SafeContents ::= SEQUENCE OF pkcs-12-SafeBag |
| pkcs-12-SafeBag ::= SEQUENCE { |
| bigId OBJECT IDENTIFIER, |
| bagValue [0] EXPLICIT ANY DEFINED BY badId, |
| bagAttributes SET OF pkcs-12-PKCS12Attribute OPTIONAL |
| } |
| pkcs-12-bagtypes OBJECT IDENTIFIER ::= {pkcs-12 10 1} |
| pkcs-12-keyBag OBJECT IDENTIFIE:R: = {pkcs-12-bagtypes 1} |
| pkcs-12-pkcs8ShroudedKeyBag OBJECT IDENTIFIER ::= {pkcs-12-bagtypes 2} |
| pkcs-12-certBag OBJECT IDENTIFIER ::= {pkcs-12-bagtypes 3} |
| pkcs-12-crlBag OBJECT IDENTIFIER ::= {pkcs-12-bagtypes 4} |
| pkcs-12-KeyBag ::= pkcs-8-PrivateKeyInfo |
| pkcs-12-PKCS8ShroudedKeyBag ::= pkcs-8-EncryptedPrivateKeyInfo |
| pkcs-12-CertBag ::= SEQUENCE { |
| certId OBJECT IDENTIFIER, |
| certValue [0] EXPLICIT ANY DEFINED BY certId |
| } |
| pkcs-12-CRLBag ::= SEQUENCE { |
| crlId OBJECT IDENTIFIER, |
| crlValue [0] EXPLICIT ANY DEFINED BY crlId |
| } |
| pkcs-12-PKCS12Attribute ::= Attribute |
| pkcs-7-Data ::= OCTET STRING |
| pkcs-7-EncryptedData ::= SEQUENCE { |
| version INTEGER, |
| encryptedContentInfo pkcs-7-EncryptedContentInfo, |
| unprotectedAttrs [1] IMPLICIT pkcs-7-UnprotectedAttribu1es OPTIONAL } |
| pkcs-7-EncryptedContentInfo ::= SEQUENCE { |
| contentType OBJECT IDENTIFIER, |
| contentEncrnteger-options INTEGER ::= 256 |
| ub-numeriTF8String (SIZE (1..pkcs-9-ub-challengePassword)) } |
| pkcs-9-at-localKeyId OBJECT IDENTIFIER ::= {pkcs-9 21} |
| pkcs-9-localKeyId ::= OCTET STRING |
| pkcs-9-at-friendlyName OBJECT IDENTIFIER ::= {pkcs-9 20} |
| pkcs-9-friendlyName ::= BMPString (SIZE (1..255)) |
| pkcs-8-PrivateKeyInfo ::= SEQUENCE { |
| version pkcs-8-Version, |
| privateKeyAlgorithm AlgorithmIdentifier, |
| privateKey pkcs-8-PrivateKey, |
| attributes [0] Attributes OPTIONAL } |
| pkcs-8-Version ::= INTEGER {v1(0)} |
| pkcs-8-PrivateKey ::= OCTET STRING |
| pkcs-8-Attributes ::= SET OF Attribute |
| pkcs-8-EncryptedPrivateKeyInfo ::= SEQUENCE { |
| encryptionAlgorithm AlgorithmIdentifier, |
| encryptedData pkcs-8-EncryptedData |
| } |
| pkc2-bagtypes 1} |
| pkcs-12-pkcs8ShroudedKeyBag OBJECT IDENTIFIER ::= {pkcs-12-bagtypes 2} |
| pkcs-12-certBag OBJECT IDENTIFIER ::= {pkcs-12-bagtypes 3} |
| pkcs-12-crlBag OBJECT IDENTIFIER ::= {pkcs-12-bagtypes 4} |
| pkcs-12-KeyBag ::= pkcs-8-PrivateKeyInfo |
| pkcs-12-PKCS8ShroudedKeyBag ::= pkcs-8-EncryptedPrivateKeyInfo |
| pkcs-12-CertBag ::= SEQUENCE { |
| certId OBJECT IDENTIFIER, |
| certValue [0] EXPLICIT ANY DEFINED BY certId |
| } |
| pkcs-12-CRLBag ::= SEQUENCE { |
| crlId OBJECT IDENTIFIER, |
| crlValue [0] EXPLICIT ANY DEFINED BY crlId |
| } |
| pkcs-12-PKCS12Attribute ::= Attribute |
| pkcs-7-Data ::= OCTET STRING |
| pkcs-7-EncryptedData ::= SEQUENCE { |
| version INTEGER, |
| encryptedContentInfo pkcs-7-EncryptedContentInfo, |
| unprotectedAttrs [1] IMPLICIT pkcs-7-UnprotectedAttribu1es OPTIONAL } |
| pkcs-7-EncryptedContentInfo ::= SEQUENCE { |
| contentType OBJECT IDENTIFIER, |
| contentEncryp{ |
| version INTEGER {v3(3)}, |
| authSafe pkcs-7-ContentInfo, |
| macData pkcs-12-MacData OPTIONAL |
| } |
| pkcs-12-PbeParams ::= SEQUENCE { |
| salt OCTET STRING, |
| iterations INTEGER |
| } |
| pkcs-12-MacData ::= SEQUENCE { |
| ::= pkcs-8-EncryptedPrivateKeyInfo |
| pkcs-12-CertBag ::= SEQUENCE { |
| certId OBJECT IDENTIFIER, |
| certValue [0] EXPLICIT ANY DEFINED BY certId |
| } |
| pkcs-12-CRLBag ::= SEQUENCE { |
| crlId OBJECT IDENTIFIER, |
| crlValue [0] EXPLICIT ANY DEFINED BY crlId |
| } |
| pkcs-12-PKCS12Attribute ::= Attribute |
| pkcs-7-Data ::= OCTET STRING |
| pkcs-7-EncryptedData ::= SEQUENCE { |
| version INTEGER, |
| encryptedContentInfo pkcs-7-EncryptedContentInfo, |
| unprotectedAttrs [1] IMPLICIT pkcs-7-UnprotectedAttribu1es OPTIONAL } |
| pkcs-7-EncryptedContentInfo ::= SEQUENCE { |
| contentType OBJECT IDENTIFIER, |
| contentEncryptionAlgorithm pkcs-7-ContentEncryptionAlgorithmIdentifier, |
| encryptedContent [0] IMPLICIT OCTET STRING OPTIONAL } |
| pkcs-7-ContentEncryptionAlgorithmIdentifier ::= AlgorithmIdentifier |
| pkcs-7-UnprotectedAttributes ::= SET SIZE (1..MAX) OF Attribute |
| id-at-ldap-DC AttributeType ::= { 0 9 2342 19200300 100 1 25 } |
| ldap-DC ::= IA5String |
| id-at-ldap-UID AttributeType ::= { 0 9 2342 19200300 100 1 1 } |
| ldap-UID ::> DirectoryString |
| id-pda OBJECT IDENTIFIER ::= { i CertID, |
| certStatus CertStatus, |
| thisUpdate GeneralizedTime, |
| nextUpdate [0] EXPLICIT GeneralizedTime OPTIONAL, |
| singleExtensions [1] EXPLICIT Extensions OPTIONAL } |
| RevokedInfo ::= SEQUENCE { |
| revocationTime GeneralizedTime, |
| revocationReason [0] EXPLICIT CRLReason OPTIONAL } |
| UnknownInfo ::= NULL -- this can be replaced with an enumeration |
| IMP |
