xref: /freebsd/crypto/openssl/crypto/objects/objects.txt (revision 1b6c76a2fe091c74f08427e6c870851025a9cf67)
11			: ISO			: iso
2
3iso 2			: member-body		: ISO Member Body
4
5member-body 840		: ISO-US		: ISO US Member Body
6ISO-US 10040		: X9-57			: X9.57
7X9-57 4			: X9cm			: X9.57 CM ?
8
9!Cname dsa
10X9cm 1			: DSA			: dsaEncryption
11X9cm 3			: DSA-SHA1		: dsaWithSHA1
12
13ISO-US 113533 7 66 10	: CAST5-CBC		: cast5-cbc
14			: CAST5-ECB		: cast5-ecb
15!Cname cast5-cfb64
16			: CAST5-CFB		: cast5-cfb
17!Cname cast5-ofb64
18			: CAST5-OFB		: cast5-ofb
19!Cname pbeWithMD5AndCast5-CBC
20ISO-US 113533 7 66 12	:			: pbeWithMD5AndCast5CBC
21
22ISO-US 113549		: rsadsi		: RSA Data Security, Inc.
23
24rsadsi 1		: pkcs			: RSA Data Security, Inc. PKCS
25
26pkcs 1			: pkcs1
27pkcs1 1			:			: rsaEncryption
28pkcs1 2			: RSA-MD2		: md2WithRSAEncryption
29pkcs1 4			: RSA-MD5		: md5WithRSAEncryption
30pkcs1 5			: RSA-SHA1		: sha1WithRSAEncryption
31
32pkcs 3			: pkcs3
33pkcs3 1			:			: dhKeyAgreement
34
35pkcs 5			: pkcs5
36pkcs5 1			: PBE-MD2-DES		: pbeWithMD2AndDES-CBC
37pkcs5 3			: PBE-MD5-DES		: pbeWithMD5AndDES-CBC
38pkcs5 4			: PBE-MD2-RC2-64	: pbeWithMD2AndRC2-CBC
39pkcs5 6			: PBE-MD5-RC2-64	: pbeWithMD5AndRC2-CBC
40pkcs5 10		: PBE-SHA1-DES		: pbeWithSHA1AndDES-CBC
41pkcs5 11		: PBE-SHA1-RC2-64	: pbeWithSHA1AndRC2-CBC
42!Cname id_pbkdf2
43pkcs5 12		:			: PBKDF2
44!Cname pbes2
45pkcs5 13		:			: PBES2
46!Cname pbmac1
47pkcs5 14		:			: PBMAC1
48
49pkcs 7			: pkcs7
50pkcs7 1			:			: pkcs7-data
51!Cname pkcs7-signed
52pkcs7 2			:			: pkcs7-signedData
53!Cname pkcs7-enveloped
54pkcs7 3			:			: pkcs7-envelopedData
55!Cname pkcs7-signedAndEnveloped
56pkcs7 4			:			: pkcs7-signedAndEnvelopedData
57!Cname pkcs7-digest
58pkcs7 5			:			: pkcs7-digestData
59!Cname pkcs7-encrypted
60pkcs7 6			:			: pkcs7-encryptedData
61
62pkcs 9			: pkcs9
63!module pkcs9
64pkcs9 1			: Email			: emailAddress
65pkcs9 2			:			: unstructuredName
66pkcs9 3			:			: contentType
67pkcs9 4			:			: messageDigest
68pkcs9 5			:			: signingTime
69pkcs9 6			:			: countersignature
70pkcs9 7			:			: challengePassword
71pkcs9 8			:			: unstructuredAddress
72!Cname extCertAttributes
73pkcs9 9			:			: extendedCertificateAttributes
74!global
75
76!Cname ext-req
77pkcs9 14		: extReq		: Extension Request
78
79!Cname SMIMECapabilities
80pkcs9 15		: SMIME-CAPS		: S/MIME Capabilities
81
82# S/MIME
83!Cname SMIME
84pkcs9 16		: SMIME			: S/MIME
85SMIME 0			: id-smime-mod
86SMIME 1			: id-smime-ct
87SMIME 2			: id-smime-aa
88SMIME 3			: id-smime-alg
89SMIME 4			: id-smime-cd
90SMIME 5			: id-smime-spq
91SMIME 6			: id-smime-cti
92
93# S/MIME Modules
94id-smime-mod 1		: id-smime-mod-cms
95id-smime-mod 2		: id-smime-mod-ess
96id-smime-mod 3		: id-smime-mod-oid
97id-smime-mod 4		: id-smime-mod-msg-v3
98id-smime-mod 5		: id-smime-mod-ets-eSignature-88
99id-smime-mod 6		: id-smime-mod-ets-eSignature-97
100id-smime-mod 7		: id-smime-mod-ets-eSigPolicy-88
101id-smime-mod 8		: id-smime-mod-ets-eSigPolicy-97
102
103# S/MIME Content Types
104id-smime-ct 1		: id-smime-ct-receipt
105id-smime-ct 2		: id-smime-ct-authData
106id-smime-ct 3		: id-smime-ct-publishCert
107id-smime-ct 4		: id-smime-ct-TSTInfo
108id-smime-ct 5		: id-smime-ct-TDTInfo
109id-smime-ct 6		: id-smime-ct-contentInfo
110id-smime-ct 7		: id-smime-ct-DVCSRequestData
111id-smime-ct 8		: id-smime-ct-DVCSResponseData
112
113# S/MIME Attributes
114id-smime-aa 1		: id-smime-aa-receiptRequest
115id-smime-aa 2		: id-smime-aa-securityLabel
116id-smime-aa 3		: id-smime-aa-mlExpandHistory
117id-smime-aa 4		: id-smime-aa-contentHint
118id-smime-aa 5		: id-smime-aa-msgSigDigest
119# obsolete
120id-smime-aa 6		: id-smime-aa-encapContentType
121id-smime-aa 7		: id-smime-aa-contentIdentifier
122# obsolete
123id-smime-aa 8		: id-smime-aa-macValue
124id-smime-aa 9		: id-smime-aa-equivalentLabels
125id-smime-aa 10		: id-smime-aa-contentReference
126id-smime-aa 11		: id-smime-aa-encrypKeyPref
127id-smime-aa 12		: id-smime-aa-signingCertificate
128id-smime-aa 13		: id-smime-aa-smimeEncryptCerts
129id-smime-aa 14		: id-smime-aa-timeStampToken
130id-smime-aa 15		: id-smime-aa-ets-sigPolicyId
131id-smime-aa 16		: id-smime-aa-ets-commitmentType
132id-smime-aa 17		: id-smime-aa-ets-signerLocation
133id-smime-aa 18		: id-smime-aa-ets-signerAttr
134id-smime-aa 19		: id-smime-aa-ets-otherSigCert
135id-smime-aa 20		: id-smime-aa-ets-contentTimestamp
136id-smime-aa 21		: id-smime-aa-ets-CertificateRefs
137id-smime-aa 22		: id-smime-aa-ets-RevocationRefs
138id-smime-aa 23		: id-smime-aa-ets-certValues
139id-smime-aa 24		: id-smime-aa-ets-revocationValues
140id-smime-aa 25		: id-smime-aa-ets-escTimeStamp
141id-smime-aa 26		: id-smime-aa-ets-certCRLTimestamp
142id-smime-aa 27		: id-smime-aa-ets-archiveTimeStamp
143id-smime-aa 28		: id-smime-aa-signatureType
144id-smime-aa 29		: id-smime-aa-dvcs-dvc
145
146# S/MIME Algorithm Identifiers
147# obsolete
148id-smime-alg 1		: id-smime-alg-ESDHwith3DES
149# obsolete
150id-smime-alg 2		: id-smime-alg-ESDHwithRC2
151# obsolete
152id-smime-alg 3		: id-smime-alg-3DESwrap
153# obsolete
154id-smime-alg 4		: id-smime-alg-RC2wrap
155id-smime-alg 5		: id-smime-alg-ESDH
156id-smime-alg 6		: id-smime-alg-CMS3DESwrap
157id-smime-alg 7		: id-smime-alg-CMSRC2wrap
158
159# S/MIME Certificate Distribution
160id-smime-cd 1		: id-smime-cd-ldap
161
162# S/MIME Signature Policy Qualifier
163id-smime-spq 1		: id-smime-spq-ets-sqt-uri
164id-smime-spq 2		: id-smime-spq-ets-sqt-unotice
165
166# S/MIME Commitment Type Identifier
167id-smime-cti 1		: id-smime-cti-ets-proofOfOrigin
168id-smime-cti 2		: id-smime-cti-ets-proofOfReceipt
169id-smime-cti 3		: id-smime-cti-ets-proofOfDelivery
170id-smime-cti 4		: id-smime-cti-ets-proofOfSender
171id-smime-cti 5		: id-smime-cti-ets-proofOfApproval
172id-smime-cti 6		: id-smime-cti-ets-proofOfCreation
173
174pkcs9 20		:			: friendlyName
175pkcs9 21		:			: localKeyID
176!Alias certTypes pkcs9 22
177certTypes 1		:			: x509Certificate
178certTypes 2		:			: sdsiCertificate
179!Alias crlTypes pkcs9 23
180crlTypes 1		:			: x509Crl
181
182!Alias pkcs12 pkcs 12
183!Alias pkcs12-pbeids pkcs12 1
184
185!Cname pbe-WithSHA1And128BitRC4
186pkcs12-pbeids 1		: PBE-SHA1-RC4-128	: pbeWithSHA1And128BitRC4
187!Cname pbe-WithSHA1And40BitRC4
188pkcs12-pbeids 2		: PBE-SHA1-RC4-40	: pbeWithSHA1And40BitRC4
189!Cname pbe-WithSHA1And3_Key_TripleDES-CBC
190pkcs12-pbeids 3		: PBE-SHA1-3DES		: pbeWithSHA1And3-KeyTripleDES-CBC
191!Cname pbe-WithSHA1And2_Key_TripleDES-CBC
192pkcs12-pbeids 4		: PBE-SHA1-2DES		: pbeWithSHA1And2-KeyTripleDES-CBC
193!Cname pbe-WithSHA1And128BitRC2-CBC
194pkcs12-pbeids 5		: PBE-SHA1-RC2-128	: pbeWithSHA1And128BitRC2-CBC
195!Cname pbe-WithSHA1And40BitRC2-CBC
196pkcs12-pbeids 6		: PBE-SHA1-RC2-40	: pbeWithSHA1And40BitRC2-CBC
197
198!Alias pkcs12-Version1 pkcs12 10
199!Alias pkcs12-BagIds pkcs12-Version1 1
200pkcs12-BagIds 1		:			: keyBag
201pkcs12-BagIds 2		:			: pkcs8ShroudedKeyBag
202pkcs12-BagIds 3		:			: certBag
203pkcs12-BagIds 4		:			: crlBag
204pkcs12-BagIds 5		:			: secretBag
205pkcs12-BagIds 6		:			: safeContentsBag
206
207rsadsi 2 2		: MD2			: md2
208rsadsi 2 4		: MD4			: md4
209rsadsi 2 5		: MD5			: md5
210			: MD5-SHA1		: md5-sha1
211rsadsi 2 7		:			: hmacWithSHA1
212rsadsi 3 2		: RC2-CBC		: rc2-cbc
213			: RC2-ECB		: rc2-ecb
214!Cname rc2-cfb64
215			: RC2-CFB		: rc2-cfb
216!Cname rc2-ofb64
217			: RC2-OFB		: rc2-ofb
218			: RC2-40-CBC		: rc2-40-cbc
219			: RC2-64-CBC		: rc2-64-cbc
220rsadsi 3 4		: RC4			: rc4
221			: RC4-40		: rc4-40
222rsadsi 3 7		: DES-EDE3-CBC		: des-ede3-cbc
223rsadsi 3 8		: RC5-CBC		: rc5-cbc
224			: RC5-ECB		: rc5-ecb
225!Cname rc5-cfb64
226			: RC5-CFB		: rc5-cfb
227!Cname rc5-ofb64
228			: RC5-OFB		: rc5-ofb
229
230!Cname ms-ext-req
2311 3 6 1 4 1 311 2 1 14	: msExtReq		: Microsoft Extension Request
232!Cname ms-code-ind
2331 3 6 1 4 1 311 2 1 21	: msCodeInd		: Microsoft Individual Code Signing
234!Cname ms-code-com
2351 3 6 1 4 1 311 2 1 22	: msCodeCom		: Microsoft Commercial Code Signing
236!Cname ms-ctl-sign
2371 3 6 1 4 1 311 10 3 1	: msCTLSign		: Microsoft Trust List Signing
238!Cname ms-sgc
2391 3 6 1 4 1 311 10 3 3	: msSGC			: Microsoft Server Gated Crypto
240!Cname ms-efs
2411 3 6 1 4 1 311 10 3 4	: msEFS			: Microsoft Encrypted File System
242
2431 3 6 1 4 1 188 7 1 1 2	: IDEA-CBC		: idea-cbc
244			: IDEA-ECB		: idea-ecb
245!Cname idea-cfb64
246			: IDEA-CFB		: idea-cfb
247!Cname idea-ofb64
248			: IDEA-OFB		: idea-ofb
249
2501 3 6 1 4 1 3029 1 2	: BF-CBC		: bf-cbc
251			: BF-ECB		: bf-ecb
252!Cname bf-cfb64
253			: BF-CFB		: bf-cfb
254!Cname bf-ofb64
255			: BF-OFB		: bf-ofb
256
257!Cname id-pkix
2581 3 6 1 5 5 7		: PKIX
259
260# PKIX Arcs
261id-pkix 0		: id-pkix-mod
262id-pkix 1		: id-pe
263id-pkix 2		: id-qt
264id-pkix 3		: id-kp
265id-pkix 4		: id-it
266id-pkix 5		: id-pkip
267id-pkix 6		: id-alg
268id-pkix 7		: id-cmc
269id-pkix 8		: id-on
270id-pkix 9		: id-pda
271id-pkix 10		: id-aca
272id-pkix 11		: id-qcs
273id-pkix 12		: id-cct
274id-pkix 48		: id-ad
275
276# PKIX Modules
277id-pkix-mod 1		: id-pkix1-explicit-88
278id-pkix-mod 2		: id-pkix1-implicit-88
279id-pkix-mod 3		: id-pkix1-explicit-93
280id-pkix-mod 4		: id-pkix1-implicit-93
281id-pkix-mod 5		: id-mod-crmf
282id-pkix-mod 6		: id-mod-cmc
283id-pkix-mod 7		: id-mod-kea-profile-88
284id-pkix-mod 8		: id-mod-kea-profile-93
285id-pkix-mod 9		: id-mod-cmp
286id-pkix-mod 10		: id-mod-qualified-cert-88
287id-pkix-mod 11		: id-mod-qualified-cert-93
288id-pkix-mod 12		: id-mod-attribute-cert
289id-pkix-mod 13		: id-mod-timestamp-protocol
290id-pkix-mod 14		: id-mod-ocsp
291id-pkix-mod 15		: id-mod-dvcs
292id-pkix-mod 16		: id-mod-cmp2000
293
294# PKIX Private Extensions
295!Cname info-access
296id-pe 1			: authorityInfoAccess	: Authority Information Access
297id-pe 2			: biometricInfo		: Biometric Info
298id-pe 3			: qcStatements
299id-pe 4			: ac-auditEntity
300id-pe 5			: ac-targeting
301id-pe 6			: aaControls
302id-pe 7			: sbqp-ipAddrBlock
303id-pe 8			: sbqp-autonomousSysNum
304id-pe 9			: sbqp-routerIdentifier
305
306# PKIX policyQualifiers for Internet policy qualifiers
307id-qt 1			: id-qt-cps		: Policy Qualifier CPS
308id-qt 2			: id-qt-unotice		: Policy Qualifier User Notice
309id-qt 3			: textNotice
310
311# PKIX key purpose identifiers
312!Cname server-auth
313id-kp 1			: serverAuth		: TLS Web Server Authentication
314!Cname client-auth
315id-kp 2			: clientAuth		: TLS Web Client Authentication
316!Cname code-sign
317id-kp 3			: codeSigning		: Code Signing
318!Cname email-protect
319id-kp 4			: emailProtection	: E-mail Protection
320id-kp 5			: ipsecEndSystem	: IPSec End System
321id-kp 6			: ipsecTunnel		: IPSec Tunnel
322id-kp 7			: ipsecUser		: IPSec User
323!Cname time-stamp
324id-kp 8			: timeStamping		: Time Stamping
325# From OCSP spec RFC2560
326!Cname OCSP-sign
327id-kp 9			: OCSPSigning		: OCSP Signing
328id-kp 10		: DVCS			: dvcs
329
330# CMP information types
331id-it 1			: id-it-caProtEncCert
332id-it 2			: id-it-signKeyPairTypes
333id-it 3			: id-it-encKeyPairTypes
334id-it 4			: id-it-preferredSymmAlg
335id-it 5			: id-it-caKeyUpdateInfo
336id-it 6			: id-it-currentCRL
337id-it 7			: id-it-unsupportedOIDs
338# obsolete
339id-it 8			: id-it-subscriptionRequest
340# obsolete
341id-it 9			: id-it-subscriptionResponse
342id-it 10		: id-it-keyPairParamReq
343id-it 11		: id-it-keyPairParamRep
344id-it 12		: id-it-revPassphrase
345id-it 13		: id-it-implicitConfirm
346id-it 14		: id-it-confirmWaitTime
347id-it 15		: id-it-origPKIMessage
348
349# CRMF registration
350id-pkip 1		: id-regCtrl
351id-pkip 2		: id-regInfo
352
353# CRMF registration controls
354id-regCtrl 1		: id-regCtrl-regToken
355id-regCtrl 2		: id-regCtrl-authenticator
356id-regCtrl 3		: id-regCtrl-pkiPublicationInfo
357id-regCtrl 4		: id-regCtrl-pkiArchiveOptions
358id-regCtrl 5		: id-regCtrl-oldCertID
359id-regCtrl 6		: id-regCtrl-protocolEncrKey
360
361# CRMF registration information
362id-regInfo 1		: id-regInfo-utf8Pairs
363id-regInfo 2		: id-regInfo-certReq
364
365# algorithms
366id-alg 1		: id-alg-des40
367id-alg 2		: id-alg-noSignature
368id-alg 3		: id-alg-dh-sig-hmac-sha1
369id-alg 4		: id-alg-dh-pop
370
371# CMC controls
372id-cmc 1		: id-cmc-statusInfo
373id-cmc 2		: id-cmc-identification
374id-cmc 3		: id-cmc-identityProof
375id-cmc 4		: id-cmc-dataReturn
376id-cmc 5		: id-cmc-transactionId
377id-cmc 6		: id-cmc-senderNonce
378id-cmc 7		: id-cmc-recipientNonce
379id-cmc 8		: id-cmc-addExtensions
380id-cmc 9		: id-cmc-encryptedPOP
381id-cmc 10		: id-cmc-decryptedPOP
382id-cmc 11		: id-cmc-lraPOPWitness
383id-cmc 15		: id-cmc-getCert
384id-cmc 16		: id-cmc-getCRL
385id-cmc 17		: id-cmc-revokeRequest
386id-cmc 18		: id-cmc-regInfo
387id-cmc 19		: id-cmc-responseInfo
388id-cmc 21		: id-cmc-queryPending
389id-cmc 22		: id-cmc-popLinkRandom
390id-cmc 23		: id-cmc-popLinkWitness
391id-cmc 24		: id-cmc-confirmCertAcceptance
392
393# other names
394id-on 1			: id-on-personalData
395
396# personal data attributes
397id-pda 1		: id-pda-dateOfBirth
398id-pda 2		: id-pda-placeOfBirth
399id-pda 3		: id-pda-pseudonym
400id-pda 4		: id-pda-gender
401id-pda 5		: id-pda-countryOfCitizenship
402id-pda 6		: id-pda-countryOfResidence
403
404# attribute certificate attributes
405id-aca 1		: id-aca-authenticationInfo
406id-aca 2		: id-aca-accessIdentity
407id-aca 3		: id-aca-chargingIdentity
408id-aca 4		: id-aca-group
409id-aca 5		: id-aca-role
410
411# qualified certificate statements
412id-qcs 1		: id-qcs-pkixQCSyntax-v1
413
414# CMC content types
415id-cct 1		: id-cct-crs
416id-cct 2		: id-cct-PKIData
417id-cct 3		: id-cct-PKIResponse
418
419# access descriptors for authority info access extension
420!Cname ad-OCSP
421id-ad 1			: OCSP			: OCSP
422!Cname ad-ca-issuers
423id-ad 2			: caIssuers		: CA Issuers
424!Cname ad-timeStamping
425id-ad 3			: ad_timestamping	: AD Time Stamping
426!Cname ad-dvcs
427id-ad 4			: AD_DVCS		: ad dvcs
428
429
430!Alias id-pkix-OCSP ad-OCSP
431!module id-pkix-OCSP
432!Cname basic
433id-pkix-OCSP 1		: basicOCSPResponse	: Basic OCSP Response
434id-pkix-OCSP 2		: Nonce			: OCSP Nonce
435id-pkix-OCSP 3		: CrlID			: OCSP CRL ID
436id-pkix-OCSP 4		: acceptableResponses	: Acceptable OCSP Responses
437id-pkix-OCSP 5		: noCheck
438id-pkix-OCSP 6		: archiveCutoff		: OCSP Archive Cutoff
439id-pkix-OCSP 7		: serviceLocator	: OCSP Service Locator
440id-pkix-OCSP 8		: extendedStatus	: Extended OCSP Status
441id-pkix-OCSP 9		: valid
442id-pkix-OCSP 10		: path
443id-pkix-OCSP 11		: trustRoot		: Trust Root
444!global
445
4461 3 14 3 2		: algorithm		: algorithm
447algorithm 3		: RSA-NP-MD5		: md5WithRSA
448algorithm 6		: DES-ECB		: des-ecb
449algorithm 7		: DES-CBC		: des-cbc
450!Cname des-ofb64
451algorithm 8		: DES-OFB		: des-ofb
452!Cname des-cfb64
453algorithm 9		: DES-CFB		: des-cfb
454algorithm 11		: rsaSignature
455!Cname dsa-2
456algorithm 12		: DSA-old		: dsaEncryption-old
457algorithm 13		: DSA-SHA		: dsaWithSHA
458algorithm 15		: RSA-SHA		: shaWithRSAEncryption
459algorithm 17		: DES-EDE		: des-ede
460			: DES-EDE3		: des-ede3
461			: DES-EDE-CBC		: des-ede-cbc
462!Cname des-ede-cfb64
463			: DES-EDE-CFB		: des-ede-cfb
464!Cname des-ede3-cfb64
465			: DES-EDE3-CFB		: des-ede3-cfb
466!Cname des-ede-ofb64
467			: DES-EDE-OFB		: des-ede-ofb
468!Cname des-ede3-ofb64
469			: DES-EDE3-OFB		: des-ede3-ofb
470			: DESX-CBC		: desx-cbc
471algorithm 18		: SHA			: sha
472algorithm 26		: SHA1			: sha1
473!Cname dsaWithSHA1-2
474algorithm 27		: DSA-SHA1-old		: dsaWithSHA1-old
475algorithm 29		: RSA-SHA1-2		: sha1WithRSA
476
4771 3 36 3 2 1		: RIPEMD160		: ripemd160
4781 3 36 3 3 1 2		: RSA-RIPEMD160		: ripemd160WithRSA
479
480!Cname sxnet
4811 3 101 1 4 1		: SXNetID		: Strong Extranet ID
482
4832 5			: X500			: directory services (X.500)
484
485X500 4			: X509
486X509 3			: CN			: commonName
487X509 4			: S			: surname
488X509 5			: SN			: serialNumber
489X509 6			: C			: countryName
490X509 7			: L			: localityName
491X509 8			: ST			: stateOrProvinceName
492X509 10			: O			: organizationName
493X509 11			: OU			: organizationalUnitName
494X509 12			: T			: title
495X509 13			: D			: description
496X509 41			: name			: name
497X509 42			: G			: givenName
498X509 43			: I			: initials
499X509 45			: UID			: uniqueIdentifier
500X509 46			: dnQualifier		: dnQualifier
501
502X500 8			: X500algorithms	: directory services - algorithms
503X500algorithms 1 1	: RSA			: rsa
504X500algorithms 3 100	: RSA-MDC2		: mdc2WithRSA
505X500algorithms 3 101	: MDC2			: mdc2
506
507X500 29			: id-ce
508!Cname subject-key-identifier
509id-ce 14		: subjectKeyIdentifier	: X509v3 Subject Key Identifier
510!Cname key-usage
511id-ce 15		: keyUsage		: X509v3 Key Usage
512!Cname private-key-usage-period
513id-ce 16		: privateKeyUsagePeriod	: X509v3 Private Key Usage Period
514!Cname subject-alt-name
515id-ce 17		: subjectAltName	: X509v3 Subject Alternative Name
516!Cname issuer-alt-name
517id-ce 18		: issuerAltName		: X509v3 Issuer Alternative Name
518!Cname basic-constraints
519id-ce 19		: basicConstraints	: X509v3 Basic Constraints
520!Cname crl-number
521id-ce 20		: crlNumber		: X509v3 CRL Number
522!Cname crl-reason
523id-ce 21		: CRLReason		: X509v3 CRL Reason Code
524!Cname invalidity-date
525id-ce 24		: invalidityDate	: Invalidity Date
526!Cname delta-crl
527id-ce 27		: deltaCRL		: X509v3 Delta CRL Indicator
528!Cname crl-distribution-points
529id-ce 31		: crlDistributionPoints	: X509v3 CRL Distribution Points
530!Cname certificate-policies
531id-ce 32		: certificatePolicies	: X509v3 Certificate Policies
532!Cname authority-key-identifier
533id-ce 35		: authorityKeyIdentifier : X509v3 Authority Key Identifier
534!Cname ext-key-usage
535id-ce 37		: extendedKeyUsage	: X509v3 Extended Key Usage
536
537!Cname netscape
5382 16 840 1 113730	: Netscape		: Netscape Communications Corp.
539!Cname netscape-cert-extension
540netscape 1		: nsCertExt		: Netscape Certificate Extension
541!Cname netscape-data-type
542netscape 2		: nsDataType		: Netscape Data Type
543!Cname netscape-cert-type
544netscape-cert-extension 1 : nsCertType		: Netscape Cert Type
545!Cname netscape-base-url
546netscape-cert-extension 2 : nsBaseUrl		: Netscape Base Url
547!Cname netscape-revocation-url
548netscape-cert-extension 3 : nsRevocationUrl	: Netscape Revocation Url
549!Cname netscape-ca-revocation-url
550netscape-cert-extension 4 : nsCaRevocationUrl	: Netscape CA Revocation Url
551!Cname netscape-renewal-url
552netscape-cert-extension 7 : nsRenewalUrl	: Netscape Renewal Url
553!Cname netscape-ca-policy-url
554netscape-cert-extension 8 : nsCaPolicyUrl	: Netscape CA Policy Url
555!Cname netscape-ssl-server-name
556netscape-cert-extension 12 : nsSslServerName	: Netscape SSL Server Name
557!Cname netscape-comment
558netscape-cert-extension 13 : nsComment		: Netscape Comment
559!Cname netscape-cert-sequence
560netscape-data-type 5	: nsCertSequence	: Netscape Certificate Sequence
561!Cname ns-sgc
562netscape 4 1		: nsSGC			: Netscape Server Gated Crypto
563
564# iso(1)
565iso 3			: ORG			: org
566org 6			: DOD			: dod
567dod 1			: IANA			: iana
568!Alias internet iana
569
570internet 1		: directory		: Directory
571internet 2		: mgmt			: Management
572internet 3		: experimental		: Experimental
573internet 4		: private		: Private
574internet 5		: security		: Security
575internet 6		: snmpv2		: SNMPv2
576internet 7		: mail			: Mail
577
578private 1		: enterprises		: Enterprises
579
580# RFC 2247
581enterprises 1466 344	: dcobject		: dcObject
582
583# Stray OIDs we don't know the full name of each step for
584# RFC 2247
5850 9 2342 19200300 100 1 25 : DC			: domainComponent
5860 9 2342 19200300 100 4 13 : domain		: Domain
587
588# What the hell are these OIDs, really?
589!Cname rle-compression
5901 1 1 1 666 1		: RLE			: run length compression
591!Cname zlib-compression
5921 1 1 1 666 2		: ZLIB			: zlib compression
593
594