11 : ISO : iso 2 32 : JOINT-ISO-CCITT : joint-iso-ccitt 4 5iso 2 : member-body : ISO Member Body 6 7joint-iso-ccitt 5 1 5 : selected-attribute-types : Selected Attribute Types 8 9selected-attribute-types 55 : clearance 10 11member-body 840 : ISO-US : ISO US Member Body 12ISO-US 10040 : X9-57 : X9.57 13X9-57 4 : X9cm : X9.57 CM ? 14 15!Cname dsa 16X9cm 1 : DSA : dsaEncryption 17X9cm 3 : DSA-SHA1 : dsaWithSHA1 18 19ISO-US 113533 7 66 10 : CAST5-CBC : cast5-cbc 20 : CAST5-ECB : cast5-ecb 21!Cname cast5-cfb64 22 : CAST5-CFB : cast5-cfb 23!Cname cast5-ofb64 24 : CAST5-OFB : cast5-ofb 25!Cname pbeWithMD5AndCast5-CBC 26ISO-US 113533 7 66 12 : : pbeWithMD5AndCast5CBC 27 28ISO-US 113549 : rsadsi : RSA Data Security, Inc. 29 30rsadsi 1 : pkcs : RSA Data Security, Inc. PKCS 31 32pkcs 1 : pkcs1 33pkcs1 1 : : rsaEncryption 34pkcs1 2 : RSA-MD2 : md2WithRSAEncryption 35pkcs1 3 : RSA-MD4 : md4WithRSAEncryption 36pkcs1 4 : RSA-MD5 : md5WithRSAEncryption 37pkcs1 5 : RSA-SHA1 : sha1WithRSAEncryption 38 39pkcs 3 : pkcs3 40pkcs3 1 : : dhKeyAgreement 41 42pkcs 5 : pkcs5 43pkcs5 1 : PBE-MD2-DES : pbeWithMD2AndDES-CBC 44pkcs5 3 : PBE-MD5-DES : pbeWithMD5AndDES-CBC 45pkcs5 4 : PBE-MD2-RC2-64 : pbeWithMD2AndRC2-CBC 46pkcs5 6 : PBE-MD5-RC2-64 : pbeWithMD5AndRC2-CBC 47pkcs5 10 : PBE-SHA1-DES : pbeWithSHA1AndDES-CBC 48pkcs5 11 : PBE-SHA1-RC2-64 : pbeWithSHA1AndRC2-CBC 49!Cname id_pbkdf2 50pkcs5 12 : : PBKDF2 51!Cname pbes2 52pkcs5 13 : : PBES2 53!Cname pbmac1 54pkcs5 14 : : PBMAC1 55 56pkcs 7 : pkcs7 57pkcs7 1 : : pkcs7-data 58!Cname pkcs7-signed 59pkcs7 2 : : pkcs7-signedData 60!Cname pkcs7-enveloped 61pkcs7 3 : : pkcs7-envelopedData 62!Cname pkcs7-signedAndEnveloped 63pkcs7 4 : : pkcs7-signedAndEnvelopedData 64!Cname pkcs7-digest 65pkcs7 5 : : pkcs7-digestData 66!Cname pkcs7-encrypted 67pkcs7 6 : : pkcs7-encryptedData 68 69pkcs 9 : pkcs9 70!module pkcs9 71pkcs9 1 : Email : emailAddress 72pkcs9 2 : : unstructuredName 73pkcs9 3 : : contentType 74pkcs9 4 : : messageDigest 75pkcs9 5 : : signingTime 76pkcs9 6 : : countersignature 77pkcs9 7 : : challengePassword 78pkcs9 8 : : unstructuredAddress 79!Cname extCertAttributes 80pkcs9 9 : : extendedCertificateAttributes 81!global 82 83!Cname ext-req 84pkcs9 14 : extReq : Extension Request 85 86!Cname SMIMECapabilities 87pkcs9 15 : SMIME-CAPS : S/MIME Capabilities 88 89# S/MIME 90!Cname SMIME 91pkcs9 16 : SMIME : S/MIME 92SMIME 0 : id-smime-mod 93SMIME 1 : id-smime-ct 94SMIME 2 : id-smime-aa 95SMIME 3 : id-smime-alg 96SMIME 4 : id-smime-cd 97SMIME 5 : id-smime-spq 98SMIME 6 : id-smime-cti 99 100# S/MIME Modules 101id-smime-mod 1 : id-smime-mod-cms 102id-smime-mod 2 : id-smime-mod-ess 103id-smime-mod 3 : id-smime-mod-oid 104id-smime-mod 4 : id-smime-mod-msg-v3 105id-smime-mod 5 : id-smime-mod-ets-eSignature-88 106id-smime-mod 6 : id-smime-mod-ets-eSignature-97 107id-smime-mod 7 : id-smime-mod-ets-eSigPolicy-88 108id-smime-mod 8 : id-smime-mod-ets-eSigPolicy-97 109 110# S/MIME Content Types 111id-smime-ct 1 : id-smime-ct-receipt 112id-smime-ct 2 : id-smime-ct-authData 113id-smime-ct 3 : id-smime-ct-publishCert 114id-smime-ct 4 : id-smime-ct-TSTInfo 115id-smime-ct 5 : id-smime-ct-TDTInfo 116id-smime-ct 6 : id-smime-ct-contentInfo 117id-smime-ct 7 : id-smime-ct-DVCSRequestData 118id-smime-ct 8 : id-smime-ct-DVCSResponseData 119 120# S/MIME Attributes 121id-smime-aa 1 : id-smime-aa-receiptRequest 122id-smime-aa 2 : id-smime-aa-securityLabel 123id-smime-aa 3 : id-smime-aa-mlExpandHistory 124id-smime-aa 4 : id-smime-aa-contentHint 125id-smime-aa 5 : id-smime-aa-msgSigDigest 126# obsolete 127id-smime-aa 6 : id-smime-aa-encapContentType 128id-smime-aa 7 : id-smime-aa-contentIdentifier 129# obsolete 130id-smime-aa 8 : id-smime-aa-macValue 131id-smime-aa 9 : id-smime-aa-equivalentLabels 132id-smime-aa 10 : id-smime-aa-contentReference 133id-smime-aa 11 : id-smime-aa-encrypKeyPref 134id-smime-aa 12 : id-smime-aa-signingCertificate 135id-smime-aa 13 : id-smime-aa-smimeEncryptCerts 136id-smime-aa 14 : id-smime-aa-timeStampToken 137id-smime-aa 15 : id-smime-aa-ets-sigPolicyId 138id-smime-aa 16 : id-smime-aa-ets-commitmentType 139id-smime-aa 17 : id-smime-aa-ets-signerLocation 140id-smime-aa 18 : id-smime-aa-ets-signerAttr 141id-smime-aa 19 : id-smime-aa-ets-otherSigCert 142id-smime-aa 20 : id-smime-aa-ets-contentTimestamp 143id-smime-aa 21 : id-smime-aa-ets-CertificateRefs 144id-smime-aa 22 : id-smime-aa-ets-RevocationRefs 145id-smime-aa 23 : id-smime-aa-ets-certValues 146id-smime-aa 24 : id-smime-aa-ets-revocationValues 147id-smime-aa 25 : id-smime-aa-ets-escTimeStamp 148id-smime-aa 26 : id-smime-aa-ets-certCRLTimestamp 149id-smime-aa 27 : id-smime-aa-ets-archiveTimeStamp 150id-smime-aa 28 : id-smime-aa-signatureType 151id-smime-aa 29 : id-smime-aa-dvcs-dvc 152 153# S/MIME Algorithm Identifiers 154# obsolete 155id-smime-alg 1 : id-smime-alg-ESDHwith3DES 156# obsolete 157id-smime-alg 2 : id-smime-alg-ESDHwithRC2 158# obsolete 159id-smime-alg 3 : id-smime-alg-3DESwrap 160# obsolete 161id-smime-alg 4 : id-smime-alg-RC2wrap 162id-smime-alg 5 : id-smime-alg-ESDH 163id-smime-alg 6 : id-smime-alg-CMS3DESwrap 164id-smime-alg 7 : id-smime-alg-CMSRC2wrap 165 166# S/MIME Certificate Distribution 167id-smime-cd 1 : id-smime-cd-ldap 168 169# S/MIME Signature Policy Qualifier 170id-smime-spq 1 : id-smime-spq-ets-sqt-uri 171id-smime-spq 2 : id-smime-spq-ets-sqt-unotice 172 173# S/MIME Commitment Type Identifier 174id-smime-cti 1 : id-smime-cti-ets-proofOfOrigin 175id-smime-cti 2 : id-smime-cti-ets-proofOfReceipt 176id-smime-cti 3 : id-smime-cti-ets-proofOfDelivery 177id-smime-cti 4 : id-smime-cti-ets-proofOfSender 178id-smime-cti 5 : id-smime-cti-ets-proofOfApproval 179id-smime-cti 6 : id-smime-cti-ets-proofOfCreation 180 181pkcs9 20 : : friendlyName 182pkcs9 21 : : localKeyID 183!Alias certTypes pkcs9 22 184certTypes 1 : : x509Certificate 185certTypes 2 : : sdsiCertificate 186!Alias crlTypes pkcs9 23 187crlTypes 1 : : x509Crl 188 189!Alias pkcs12 pkcs 12 190!Alias pkcs12-pbeids pkcs12 1 191 192!Cname pbe-WithSHA1And128BitRC4 193pkcs12-pbeids 1 : PBE-SHA1-RC4-128 : pbeWithSHA1And128BitRC4 194!Cname pbe-WithSHA1And40BitRC4 195pkcs12-pbeids 2 : PBE-SHA1-RC4-40 : pbeWithSHA1And40BitRC4 196!Cname pbe-WithSHA1And3_Key_TripleDES-CBC 197pkcs12-pbeids 3 : PBE-SHA1-3DES : pbeWithSHA1And3-KeyTripleDES-CBC 198!Cname pbe-WithSHA1And2_Key_TripleDES-CBC 199pkcs12-pbeids 4 : PBE-SHA1-2DES : pbeWithSHA1And2-KeyTripleDES-CBC 200!Cname pbe-WithSHA1And128BitRC2-CBC 201pkcs12-pbeids 5 : PBE-SHA1-RC2-128 : pbeWithSHA1And128BitRC2-CBC 202!Cname pbe-WithSHA1And40BitRC2-CBC 203pkcs12-pbeids 6 : PBE-SHA1-RC2-40 : pbeWithSHA1And40BitRC2-CBC 204 205!Alias pkcs12-Version1 pkcs12 10 206!Alias pkcs12-BagIds pkcs12-Version1 1 207pkcs12-BagIds 1 : : keyBag 208pkcs12-BagIds 2 : : pkcs8ShroudedKeyBag 209pkcs12-BagIds 3 : : certBag 210pkcs12-BagIds 4 : : crlBag 211pkcs12-BagIds 5 : : secretBag 212pkcs12-BagIds 6 : : safeContentsBag 213 214rsadsi 2 2 : MD2 : md2 215rsadsi 2 4 : MD4 : md4 216rsadsi 2 5 : MD5 : md5 217 : MD5-SHA1 : md5-sha1 218rsadsi 2 7 : : hmacWithSHA1 219rsadsi 3 2 : RC2-CBC : rc2-cbc 220 : RC2-ECB : rc2-ecb 221!Cname rc2-cfb64 222 : RC2-CFB : rc2-cfb 223!Cname rc2-ofb64 224 : RC2-OFB : rc2-ofb 225 : RC2-40-CBC : rc2-40-cbc 226 : RC2-64-CBC : rc2-64-cbc 227rsadsi 3 4 : RC4 : rc4 228 : RC4-40 : rc4-40 229rsadsi 3 7 : DES-EDE3-CBC : des-ede3-cbc 230rsadsi 3 8 : RC5-CBC : rc5-cbc 231 : RC5-ECB : rc5-ecb 232!Cname rc5-cfb64 233 : RC5-CFB : rc5-cfb 234!Cname rc5-ofb64 235 : RC5-OFB : rc5-ofb 236 237!Cname ms-ext-req 2381 3 6 1 4 1 311 2 1 14 : msExtReq : Microsoft Extension Request 239!Cname ms-code-ind 2401 3 6 1 4 1 311 2 1 21 : msCodeInd : Microsoft Individual Code Signing 241!Cname ms-code-com 2421 3 6 1 4 1 311 2 1 22 : msCodeCom : Microsoft Commercial Code Signing 243!Cname ms-ctl-sign 2441 3 6 1 4 1 311 10 3 1 : msCTLSign : Microsoft Trust List Signing 245!Cname ms-sgc 2461 3 6 1 4 1 311 10 3 3 : msSGC : Microsoft Server Gated Crypto 247!Cname ms-efs 2481 3 6 1 4 1 311 10 3 4 : msEFS : Microsoft Encrypted File System 249 2501 3 6 1 4 1 188 7 1 1 2 : IDEA-CBC : idea-cbc 251 : IDEA-ECB : idea-ecb 252!Cname idea-cfb64 253 : IDEA-CFB : idea-cfb 254!Cname idea-ofb64 255 : IDEA-OFB : idea-ofb 256 2571 3 6 1 4 1 3029 1 2 : BF-CBC : bf-cbc 258 : BF-ECB : bf-ecb 259!Cname bf-cfb64 260 : BF-CFB : bf-cfb 261!Cname bf-ofb64 262 : BF-OFB : bf-ofb 263 264!Cname id-pkix 2651 3 6 1 5 5 7 : PKIX 266 267# PKIX Arcs 268id-pkix 0 : id-pkix-mod 269id-pkix 1 : id-pe 270id-pkix 2 : id-qt 271id-pkix 3 : id-kp 272id-pkix 4 : id-it 273id-pkix 5 : id-pkip 274id-pkix 6 : id-alg 275id-pkix 7 : id-cmc 276id-pkix 8 : id-on 277id-pkix 9 : id-pda 278id-pkix 10 : id-aca 279id-pkix 11 : id-qcs 280id-pkix 12 : id-cct 281id-pkix 48 : id-ad 282 283# PKIX Modules 284id-pkix-mod 1 : id-pkix1-explicit-88 285id-pkix-mod 2 : id-pkix1-implicit-88 286id-pkix-mod 3 : id-pkix1-explicit-93 287id-pkix-mod 4 : id-pkix1-implicit-93 288id-pkix-mod 5 : id-mod-crmf 289id-pkix-mod 6 : id-mod-cmc 290id-pkix-mod 7 : id-mod-kea-profile-88 291id-pkix-mod 8 : id-mod-kea-profile-93 292id-pkix-mod 9 : id-mod-cmp 293id-pkix-mod 10 : id-mod-qualified-cert-88 294id-pkix-mod 11 : id-mod-qualified-cert-93 295id-pkix-mod 12 : id-mod-attribute-cert 296id-pkix-mod 13 : id-mod-timestamp-protocol 297id-pkix-mod 14 : id-mod-ocsp 298id-pkix-mod 15 : id-mod-dvcs 299id-pkix-mod 16 : id-mod-cmp2000 300 301# PKIX Private Extensions 302!Cname info-access 303id-pe 1 : authorityInfoAccess : Authority Information Access 304id-pe 2 : biometricInfo : Biometric Info 305id-pe 3 : qcStatements 306id-pe 4 : ac-auditEntity 307id-pe 5 : ac-targeting 308id-pe 6 : aaControls 309id-pe 7 : sbqp-ipAddrBlock 310id-pe 8 : sbqp-autonomousSysNum 311id-pe 9 : sbqp-routerIdentifier 312id-pe 10 : ac-proxying 313!Cname sinfo-access 314id-pe 11 : subjectInfoAccess : Subject Information Access 315 316# PKIX policyQualifiers for Internet policy qualifiers 317id-qt 1 : id-qt-cps : Policy Qualifier CPS 318id-qt 2 : id-qt-unotice : Policy Qualifier User Notice 319id-qt 3 : textNotice 320 321# PKIX key purpose identifiers 322!Cname server-auth 323id-kp 1 : serverAuth : TLS Web Server Authentication 324!Cname client-auth 325id-kp 2 : clientAuth : TLS Web Client Authentication 326!Cname code-sign 327id-kp 3 : codeSigning : Code Signing 328!Cname email-protect 329id-kp 4 : emailProtection : E-mail Protection 330id-kp 5 : ipsecEndSystem : IPSec End System 331id-kp 6 : ipsecTunnel : IPSec Tunnel 332id-kp 7 : ipsecUser : IPSec User 333!Cname time-stamp 334id-kp 8 : timeStamping : Time Stamping 335# From OCSP spec RFC2560 336!Cname OCSP-sign 337id-kp 9 : OCSPSigning : OCSP Signing 338id-kp 10 : DVCS : dvcs 339 340# CMP information types 341id-it 1 : id-it-caProtEncCert 342id-it 2 : id-it-signKeyPairTypes 343id-it 3 : id-it-encKeyPairTypes 344id-it 4 : id-it-preferredSymmAlg 345id-it 5 : id-it-caKeyUpdateInfo 346id-it 6 : id-it-currentCRL 347id-it 7 : id-it-unsupportedOIDs 348# obsolete 349id-it 8 : id-it-subscriptionRequest 350# obsolete 351id-it 9 : id-it-subscriptionResponse 352id-it 10 : id-it-keyPairParamReq 353id-it 11 : id-it-keyPairParamRep 354id-it 12 : id-it-revPassphrase 355id-it 13 : id-it-implicitConfirm 356id-it 14 : id-it-confirmWaitTime 357id-it 15 : id-it-origPKIMessage 358 359# CRMF registration 360id-pkip 1 : id-regCtrl 361id-pkip 2 : id-regInfo 362 363# CRMF registration controls 364id-regCtrl 1 : id-regCtrl-regToken 365id-regCtrl 2 : id-regCtrl-authenticator 366id-regCtrl 3 : id-regCtrl-pkiPublicationInfo 367id-regCtrl 4 : id-regCtrl-pkiArchiveOptions 368id-regCtrl 5 : id-regCtrl-oldCertID 369id-regCtrl 6 : id-regCtrl-protocolEncrKey 370 371# CRMF registration information 372id-regInfo 1 : id-regInfo-utf8Pairs 373id-regInfo 2 : id-regInfo-certReq 374 375# algorithms 376id-alg 1 : id-alg-des40 377id-alg 2 : id-alg-noSignature 378id-alg 3 : id-alg-dh-sig-hmac-sha1 379id-alg 4 : id-alg-dh-pop 380 381# CMC controls 382id-cmc 1 : id-cmc-statusInfo 383id-cmc 2 : id-cmc-identification 384id-cmc 3 : id-cmc-identityProof 385id-cmc 4 : id-cmc-dataReturn 386id-cmc 5 : id-cmc-transactionId 387id-cmc 6 : id-cmc-senderNonce 388id-cmc 7 : id-cmc-recipientNonce 389id-cmc 8 : id-cmc-addExtensions 390id-cmc 9 : id-cmc-encryptedPOP 391id-cmc 10 : id-cmc-decryptedPOP 392id-cmc 11 : id-cmc-lraPOPWitness 393id-cmc 15 : id-cmc-getCert 394id-cmc 16 : id-cmc-getCRL 395id-cmc 17 : id-cmc-revokeRequest 396id-cmc 18 : id-cmc-regInfo 397id-cmc 19 : id-cmc-responseInfo 398id-cmc 21 : id-cmc-queryPending 399id-cmc 22 : id-cmc-popLinkRandom 400id-cmc 23 : id-cmc-popLinkWitness 401id-cmc 24 : id-cmc-confirmCertAcceptance 402 403# other names 404id-on 1 : id-on-personalData 405 406# personal data attributes 407id-pda 1 : id-pda-dateOfBirth 408id-pda 2 : id-pda-placeOfBirth 409id-pda 3 : id-pda-pseudonym 410id-pda 4 : id-pda-gender 411id-pda 5 : id-pda-countryOfCitizenship 412id-pda 6 : id-pda-countryOfResidence 413 414# attribute certificate attributes 415id-aca 1 : id-aca-authenticationInfo 416id-aca 2 : id-aca-accessIdentity 417id-aca 3 : id-aca-chargingIdentity 418id-aca 4 : id-aca-group 419# attention : the following seems to be obsolete, replace by 'role' 420id-aca 5 : id-aca-role 421id-aca 6 : id-aca-encAttrs 422 423# qualified certificate statements 424id-qcs 1 : id-qcs-pkixQCSyntax-v1 425 426# CMC content types 427id-cct 1 : id-cct-crs 428id-cct 2 : id-cct-PKIData 429id-cct 3 : id-cct-PKIResponse 430 431# access descriptors for authority info access extension 432!Cname ad-OCSP 433id-ad 1 : OCSP : OCSP 434!Cname ad-ca-issuers 435id-ad 2 : caIssuers : CA Issuers 436!Cname ad-timeStamping 437id-ad 3 : ad_timestamping : AD Time Stamping 438!Cname ad-dvcs 439id-ad 4 : AD_DVCS : ad dvcs 440 441 442!Alias id-pkix-OCSP ad-OCSP 443!module id-pkix-OCSP 444!Cname basic 445id-pkix-OCSP 1 : basicOCSPResponse : Basic OCSP Response 446id-pkix-OCSP 2 : Nonce : OCSP Nonce 447id-pkix-OCSP 3 : CrlID : OCSP CRL ID 448id-pkix-OCSP 4 : acceptableResponses : Acceptable OCSP Responses 449id-pkix-OCSP 5 : noCheck 450id-pkix-OCSP 6 : archiveCutoff : OCSP Archive Cutoff 451id-pkix-OCSP 7 : serviceLocator : OCSP Service Locator 452id-pkix-OCSP 8 : extendedStatus : Extended OCSP Status 453id-pkix-OCSP 9 : valid 454id-pkix-OCSP 10 : path 455id-pkix-OCSP 11 : trustRoot : Trust Root 456!global 457 4581 3 14 3 2 : algorithm : algorithm 459algorithm 3 : RSA-NP-MD5 : md5WithRSA 460algorithm 6 : DES-ECB : des-ecb 461algorithm 7 : DES-CBC : des-cbc 462!Cname des-ofb64 463algorithm 8 : DES-OFB : des-ofb 464!Cname des-cfb64 465algorithm 9 : DES-CFB : des-cfb 466algorithm 11 : rsaSignature 467!Cname dsa-2 468algorithm 12 : DSA-old : dsaEncryption-old 469algorithm 13 : DSA-SHA : dsaWithSHA 470algorithm 15 : RSA-SHA : shaWithRSAEncryption 471algorithm 17 : DES-EDE : des-ede 472 : DES-EDE3 : des-ede3 473 : DES-EDE-CBC : des-ede-cbc 474!Cname des-ede-cfb64 475 : DES-EDE-CFB : des-ede-cfb 476!Cname des-ede3-cfb64 477 : DES-EDE3-CFB : des-ede3-cfb 478!Cname des-ede-ofb64 479 : DES-EDE-OFB : des-ede-ofb 480!Cname des-ede3-ofb64 481 : DES-EDE3-OFB : des-ede3-ofb 482 : DESX-CBC : desx-cbc 483algorithm 18 : SHA : sha 484algorithm 26 : SHA1 : sha1 485!Cname dsaWithSHA1-2 486algorithm 27 : DSA-SHA1-old : dsaWithSHA1-old 487algorithm 29 : RSA-SHA1-2 : sha1WithRSA 488 4891 3 36 3 2 1 : RIPEMD160 : ripemd160 4901 3 36 3 3 1 2 : RSA-RIPEMD160 : ripemd160WithRSA 491 492!Cname sxnet 4931 3 101 1 4 1 : SXNetID : Strong Extranet ID 494 4952 5 : X500 : directory services (X.500) 496 497X500 4 : X509 498X509 3 : CN : commonName 499X509 4 : S : surname 500X509 5 : SN : serialNumber 501X509 6 : C : countryName 502X509 7 : L : localityName 503X509 8 : ST : stateOrProvinceName 504X509 10 : O : organizationName 505X509 11 : OU : organizationalUnitName 506X509 12 : T : title 507X509 13 : D : description 508X509 41 : name : name 509X509 42 : G : givenName 510X509 43 : I : initials 511X509 45 : : uniqueIdentifier 512X509 46 : dnQualifier : dnQualifier 513X509 72 : role : role 514 515X500 8 : X500algorithms : directory services - algorithms 516X500algorithms 1 1 : RSA : rsa 517X500algorithms 3 100 : RSA-MDC2 : mdc2WithRSA 518X500algorithms 3 101 : MDC2 : mdc2 519 520X500 29 : id-ce 521!Cname subject-key-identifier 522id-ce 14 : subjectKeyIdentifier : X509v3 Subject Key Identifier 523!Cname key-usage 524id-ce 15 : keyUsage : X509v3 Key Usage 525!Cname private-key-usage-period 526id-ce 16 : privateKeyUsagePeriod : X509v3 Private Key Usage Period 527!Cname subject-alt-name 528id-ce 17 : subjectAltName : X509v3 Subject Alternative Name 529!Cname issuer-alt-name 530id-ce 18 : issuerAltName : X509v3 Issuer Alternative Name 531!Cname basic-constraints 532id-ce 19 : basicConstraints : X509v3 Basic Constraints 533!Cname crl-number 534id-ce 20 : crlNumber : X509v3 CRL Number 535!Cname crl-reason 536id-ce 21 : CRLReason : X509v3 CRL Reason Code 537!Cname invalidity-date 538id-ce 24 : invalidityDate : Invalidity Date 539!Cname delta-crl 540id-ce 27 : deltaCRL : X509v3 Delta CRL Indicator 541!Cname crl-distribution-points 542id-ce 31 : crlDistributionPoints : X509v3 CRL Distribution Points 543!Cname certificate-policies 544id-ce 32 : certificatePolicies : X509v3 Certificate Policies 545!Cname authority-key-identifier 546id-ce 35 : authorityKeyIdentifier : X509v3 Authority Key Identifier 547!Cname policy-constraints 548id-ce 36 : policyConstraints : X509v3 Policy Constraints 549!Cname ext-key-usage 550id-ce 37 : extendedKeyUsage : X509v3 Extended Key Usage 551!Cname target-information 552id-ce 55 : targetInformation : X509v3 AC Targeting 553!Cname no-rev-avail 554id-ce 56 : noRevAvail : X509v3 No Revocation Available 555 556!Cname netscape 5572 16 840 1 113730 : Netscape : Netscape Communications Corp. 558!Cname netscape-cert-extension 559netscape 1 : nsCertExt : Netscape Certificate Extension 560!Cname netscape-data-type 561netscape 2 : nsDataType : Netscape Data Type 562!Cname netscape-cert-type 563netscape-cert-extension 1 : nsCertType : Netscape Cert Type 564!Cname netscape-base-url 565netscape-cert-extension 2 : nsBaseUrl : Netscape Base Url 566!Cname netscape-revocation-url 567netscape-cert-extension 3 : nsRevocationUrl : Netscape Revocation Url 568!Cname netscape-ca-revocation-url 569netscape-cert-extension 4 : nsCaRevocationUrl : Netscape CA Revocation Url 570!Cname netscape-renewal-url 571netscape-cert-extension 7 : nsRenewalUrl : Netscape Renewal Url 572!Cname netscape-ca-policy-url 573netscape-cert-extension 8 : nsCaPolicyUrl : Netscape CA Policy Url 574!Cname netscape-ssl-server-name 575netscape-cert-extension 12 : nsSslServerName : Netscape SSL Server Name 576!Cname netscape-comment 577netscape-cert-extension 13 : nsComment : Netscape Comment 578!Cname netscape-cert-sequence 579netscape-data-type 5 : nsCertSequence : Netscape Certificate Sequence 580!Cname ns-sgc 581netscape 4 1 : nsSGC : Netscape Server Gated Crypto 582 583# iso(1) 584iso 3 : ORG : org 585org 6 : DOD : dod 586dod 1 : IANA : iana 587!Alias internet iana 588 589internet 1 : directory : Directory 590internet 2 : mgmt : Management 591internet 3 : experimental : Experimental 592internet 4 : private : Private 593internet 5 : security : Security 594internet 6 : snmpv2 : SNMPv2 595internet 7 : mail : Mail 596 597private 1 : enterprises : Enterprises 598 599# RFC 2247 600enterprises 1466 344 : dcobject : dcObject 601 602# Stray OIDs we don't know the full name of each step for 603# RFC 2247 6040 9 2342 19200300 100 1 25 : DC : domainComponent 6050 9 2342 19200300 100 4 13 : domain : Domain 606 607# What the hell are these OIDs, really? 608!Cname rle-compression 6091 1 1 1 666 1 : RLE : run length compression 610!Cname zlib-compression 6111 1 1 1 666 2 : ZLIB : zlib compression 612 613