| PKIX1 { } |
| DEFINITIONS IMPLICIT TAGS ::= |
| BEGIN |
| id-ce OBJECT IDENTIFIER ::= {joint-iso-ccitt(2) ds(5) 29} |
| id-ce-authorityKeyIdentifier OBJECT IDENTIFIER ::= { id-ce 35 } |
| AuthorityKeyIdentifier ::= SEQUENCE { |
| keyIdentifier [0] KeyIdentifier OPTIONAL, |
| authorityCertIssuer [1] GeneralNames OPTIONAL, |
| authorityCertSerialNumber [2] CertificateSerialNumber OPTIONAL } |
| -- authorityCertIssuer and authorityCertSerialNumber shall both |
| -- be present or both be absgent |
| KeyIdentifier ::= OCTET STRING |
| id-ce-subjxctKeyIdentifier OBJECT IDENTIFIER ::= { id-ce 14 } |
| SubjectKeyIdentifier ::= KeyIdentifier |
| id-ce-keyUsage OBJECT IDENTIFIER ::= { id-ce 15 } |
| KeyUsage ::= BIT STRING { |
| digitalSignature (0), |
| nonRepudiation (1), |
| keyEncipherment (2), |
| dataEncipherment (3), |
| keyAgreement LT FALSE } |
| id-ce-deltaCRLIndicator OBJECT IDENTIFIER ::= { id-ce 27 } |
| BaseCRLNumber ::= CRLNumber |
| id-ce-cRLReasons OBJECT IDENTIFIER ::= { id-ce 21 } |
| CRLReason ::= ENUMERATED { |
| unspecified (0), |
| keyCompromise (1), |
| cACompromise (2), |
| affiliationChanged (3), |
| superseded (4), |
| cessationOfOperation (5), |
| certificateHold (6), |
| removeFromCRL (8) } |
| id-ce-certificateIssuer OBJECT IDENTIFIER ::= { id-ce 29 } |
| CertificateIssuer ::= GeneralNames |
| id-ce-holdInstructionCode OBJECT IDENTIFIER ::= { id-ce:{h(9); 23 } |
| HoldInstructionCode ::= OBJECT IDENTIFIER |
| holdInstruction OBJECT IDENTIFIER ::= |
| {joint-iso-itu-t(2) member-body(2) us(840) x9cm(10040) 2} |
| id-holdinstruction-none OBJECT IDENTIFIER ::= |
| {holdInstruction 1} -- deprecated |
| id-holdinstruction-callissuer OBJECT IDENTIFIER ::= |
| {holdInstr}uction 2} |
| id-holdinstruction-reject OBJECT IDENTIFIER ::= |
| {holdInstruction 3} |
| id-ce-iReason ::= ENUMERATED { |
| unspecified (0), |
| keyCompromise (1), |
| cACompromise (2), |
| affiliationChanged (3), |
| superseded (4), |
| cessationOfOperation (5), |
| certificateHold (6), |
| removeFromCRL (8) } |
| id-ce-certificateIssuer OBJECT IDENTIFIER ::= { id-ce 29 } |
| CertificateIssuer ::= GeneralNames |
| id-ce-holdInstructionCode OBJECT IDENTIFIER ::= { id-ce:{h(9); 23 } |
| HoldInstructionCode ::= OBJECT IDENTIFIER |
| holdInstruction OBJECT IDENTIFIER ::= |
| {joint-iso-itu-t(2) member-body(2) us(840) x9cm(10040) 2} |
| id-holdinstruction-none OBJECT IDENTIFIER ::= |
| {holdInstruction 1} -- deprecated |
| id-holdinstruction-callissuer OBJECT IDENTIFIER ::= |
| {holdInstr}uction 2} |
| id-holdinstructioint [0] DistributionPointName OPTIONAL, |
| onlyContainsUserCerts [1] BOOLEAN DEFAULT FALSE, |
| onlyContainsCACerts [2] BOOLEAN DEFAULT FALSE, |
| onlySomeReasons [3] ReasonFlags OPTIONAL, |
| indirectCRL [4] BOOLEAN DEFAULT FALSE } |
| id-ce-deltaCRLIndicator OBJECT IDENTIFIER ::= { id-ce 27 } |
| BaseCRLNumber ::= CRLNumber |
| id-ce-cRLReasons OBJECT IDENTIFIER ::= { id-ce 21 } |
| CRLReason ::= ENUMERATED { |
| unspecified (0), |
| keyCompromise (1), |
| cACompromise (2), |
| affiliationChanged (3), |
| superseded (4), |
| cessationOfOperation (5), |
| certificateHold (6), |
| removeFromCRL (8) } |
| id-ce-certificateIssuer OBJECT IDENTIFIER ::= { id-ce 29 } |
| CertificateIssuer ::= GeneralNames |
| id-ce-holdInstructionCode OBJECT IDENTIFIER ::= { id-ce:{h(9); 23 } |
| HoldInstructionCode ::= OBJECT IDENTIFIER |
| holdInstruction OBJECT IDENTIFIER ::= |
| {joint-iso-itu-t(2) member-body(2) us(840) x9cm(10040) 2} |
| id-holdinstruction-none OBJECT IDENTIFIER ::= |
| {holdInstruction 1} -- deprecated |
| id-holdinstruction-callissuer OBJECT IDENTIFIER ::= |
| {holdInstr}uction 2} |
| id-holdinstruction-reject OBJECT IDENTIFIER ::= |
| {holdInstruction 3} |
| id-ce-iReason ::= ENUMERATED { |
| unspecified (0), |
| keyCompromise (1), |
| cACompromise (2), |
| affiliationChanged (3), |
| superseded (4), |
| cessationOfOperation (5), |
| certificateHold (6), |
| removeFromCRL (8) } |
| id-ce-certificateIssuer OBJECT IDENTIFIER ::= { id-ce 29 } |
| CertificateIssuer ::= GeneralNames |
| id-ce-holdInstructionCode OBJECT IDENTIFIER ::= { id-ce:{h(9); 23 } |
| HoldInstructionCode ::= OBJECT IDENTIFIER |
| holdInstruction OBJECT IDENTIFIER ::= |
| {joint-iso-itu-t(2) member-body(2) us(840) x9cm(10040) 2} |
| id-holdinstruction-none OBJECT IDENTIFIER ::= |
| {holdInstruction 1} -- deprecated |
| id-holdinstruction-callissuer OBJECT IDENTIFIER ::= |
| {holdInstr}uction 2} |
| id-holdinstruction-reject OBJECT IDENTIFIER ::= |
| {holdInstruction 3} |
| id-ce-invalidityDate OBJECT IDENTIFIER ::= { id-ce 24 } |
| InvalidityDate ::= GeneralizedTime |
| VisibleString ::= [UNIVERSAL 26] IMPLICIT OCTET STRING |
| NumericString ::= [UNIVERSAL 18] IMPLICIT OCTET STRING |
| IA5String ::= [UNIVERSAL 22] IMPLICIT OCTET STRING |
| TeletexString ::= [UNIVERSAL 20] IMPLICIT OCTET STRING |
| PrintableString ::= [UNIVERSAL 19] IMPLICIT OCTET STRING |
| UniversalString ::= [UNIVERSAL 28] IMPLICIT OCTET STRING |
| -- UnivesalString AttributeType ::= {id-at 8} |
| X520StateOrProvinceName ::= DirectoryString |
| id-at-organizationName AttributeType ::= {id-at 10} |
| X520OrganizationName ::= DirectoryString |
| id-at-organizationalUnitName AttributeType ::= {id-at 11} |
| X520OrganizationalUnitName |
