7299
INFORMATIONAL
Object Identifier Registry for the PKIX Working Group
Authors: R. Housley
Date: July 2014
Working Group: NON WORKING GROUP
Stream: IETF
Updated by:
RFC 9158
Abstract
When the Public-Key Infrastructure using X.509 (PKIX) Working Group was chartered, an object identifier arc was allocated by IANA for use by that working group. This document describes the object identifiers that were assigned in that arc, returns control of that arc to IANA, and establishes IANA allocation policies for any future assignments within that arc.
RFC 7299
INFORMATIONAL
Updated by: 9158
Internet Engineering Task Force (IETF) R. Housley
Request for Comments: 7299 Vigil Security
Category: Informational July 2014
ISSN: 2070-1721
<span class="h1">Object Identifier Registry for the PKIX Working Group</span>
Abstract
When the Public-Key Infrastructure using X.509 (PKIX) Working Group
was chartered, an object identifier arc was allocated by IANA for use
by that working group. This document describes the object
identifiers that were assigned in that arc, returns control of that
arc to IANA, and establishes IANA allocation policies for any future
assignments within that arc.
Status of This Memo
This document is not an Internet Standards Track specification; it is
published for informational purposes.
This document is a product of the Internet Engineering Task Force
(IETF). It represents the consensus of the IETF community. It has
received public review and has been approved for publication by the
Internet Engineering Steering Group (IESG). Not all documents
approved by the IESG are a candidate for any level of Internet
Standard; see <a href="./rfc5741#section-2">Section 2 of RFC 5741</a>.
Information about the current status of this document, any errata,
and how to provide feedback on it may be obtained at
<a href="https://www.rfc-editor.org/info/rfc7299">http://www.rfc-editor.org/info/rfc7299</a>.
Copyright Notice
Copyright (c) 2014 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to <a href="https://www.rfc-editor.org/bcp/bcp78">BCP 78</a> and the IETF Trust's Legal
Provisions Relating to IETF Documents
(<a href="http://trustee.ietf.org/license-info">http://trustee.ietf.org/license-info</a>) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
<span class="grey">Housley Informational [Page 1]</span><span id="page-2" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
Table of Contents
<a href="#section-1">1</a>. Introduction ....................................................<a href="#page-3">3</a>
<a href="#section-2">2</a>. Subordinate Object Identifier Arcs ..............................<a href="#page-3">3</a>
<a href="#section-3">3</a>. IANA Considerations .............................................<a href="#page-6">6</a>
<a href="#section-3.1">3.1</a>. Update to "SMI Security for Mechanism Codes" Registry ......<a href="#page-6">6</a>
<a href="#section-3.2">3.2</a>. "SMI Security for PKIX" Registry ...........................<a href="#page-6">6</a>
<a href="#section-3.3">3.3</a>. "SMI Security for PKIX Module Identifier" Registry .........<a href="#page-7">7</a>
<a href="#section-3.4">3.4</a>. "SMI Security for PKIX Certificate Extension" Registry .....<a href="#page-9">9</a>
<a href="#section-3.5">3.5</a>. "SMI Security for PKIX Policy Qualifier" Registry .........<a href="#page-10">10</a>
<a href="#section-3.6">3.6</a>. "SMI Security for PKIX Extended Key Purpose" Registry .....<a href="#page-10">10</a>
<a href="#section-3.7">3.7</a>. "SMI Security for PKIX CMP Information Types" Registry ....<a href="#page-11">11</a>
<a href="#section-3.8">3.8</a>. "SMI Security for PKIX CRMF Registration" Registry ........<a href="#page-12">12</a>
3.9. "SMI Security for PKIX CRMF Registration Controls"
Registry ..................................................<a href="#page-12">12</a>
3.10. "SMI Security for PKIX CRMF Registration
Information" Registry ....................................<a href="#page-12">12</a>
<a href="#section-3.11">3.11</a>. "SMI Security for PKIX Algorithms" Registry ..............<a href="#page-13">13</a>
<a href="#section-3.12">3.12</a>. "SMI Security for PKIX CMC Controls" Registry ............<a href="#page-13">13</a>
3.13. "SMI Security for PKIX CMC GLA Requests and
Responses" Registry ......................................<a href="#page-14">14</a>
<a href="#section-3.14">3.14</a>. "SMI Security for PKIX Other Name Forms" Registry ........<a href="#page-15">15</a>
3.15. "SMI Security for PKIX Personal Data Attributes"
Registry .................................................<a href="#page-15">15</a>
3.16. "SMI Security for PKIX Attribute Certificate
Attributes" Registry .....................................<a href="#page-16">16</a>
3.17. "SMI Security for PKIX Qualified Certificate
Statements" Registry .....................................<a href="#page-16">16</a>
<a href="#section-3.18">3.18</a>. "SMI Security for PKIX CMC Content Types" Registry .......<a href="#page-16">16</a>
3.19. "SMI Security for PKIX OIDs Used Only for
Testing" Registry ........................................<a href="#page-17">17</a>
<a href="#section-3.20">3.20</a>. "SMI Security for PKIX Certificate Policies" Registry ....<a href="#page-17">17</a>
<a href="#section-3.21">3.21</a>. "SMI Security for PKIX CMC Error Types" Registry .........<a href="#page-17">17</a>
3.22. "SMI Security for PKIX Revocation Information
Types" Registry ..........................................<a href="#page-18">18</a>
<a href="#section-3.23">3.23</a>. "SMI Security for PKIX SCVP Check Types" Registry ........<a href="#page-18">18</a>
<a href="#section-3.24">3.24</a>. "SMI Security for PKIX SCVP Want Back Types" Registry ....<a href="#page-19">19</a>
3.25. "SMI Security for PKIX SCVP Validation Policies
and Algorithms" Registry .................................<a href="#page-20">20</a>
3.26. "SMI Security for PKIX SCVP Name Validation
Policy Errors" Registry ..................................<a href="#page-20">20</a>
3.27. "SMI Security for PKIX SCVP Basic Validation
Policy Errors" Registry ..................................<a href="#page-21">21</a>
3.28. "SMI Security for PKIX SCVP Distinguished Name
Validation Policy Errors" Registry .......................<a href="#page-21">21</a>
3.29. "SMI Security for PKIX Other Logotype
Identifiers" Registry ....................................<a href="#page-22">22</a>
<span class="grey">Housley Informational [Page 2]</span><span id="page-3" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
3.30. "SMI Security for PKIX Proxy Certificate Policy
Languages" Registry ......................................<a href="#page-22">22</a>
<a href="#section-3.31">3.31</a>. "SMI Security for PKIX Proxy Matching Rules" Registry ....<a href="#page-22">22</a>
3.32. "SMI Security for PKIX Subject Key Identifier
Semantics" Registry ......................................<a href="#page-23">23</a>
<a href="#section-3.33">3.33</a>. "SMI Security for PKIX Access Descriptor" Registry .......<a href="#page-23">23</a>
3.34. "SMI Security for PKIX Online Certificate Status
Protocol (OCSP)" Registry ................................<a href="#page-24">24</a>
<a href="#section-4">4</a>. Security Considerations ........................................<a href="#page-24">24</a>
<a href="#section-5">5</a>. References .....................................................<a href="#page-25">25</a>
<a href="#section-5.1">5.1</a>. Normative References ......................................<a href="#page-25">25</a>
<a href="#section-5.2">5.2</a>. Informative References ....................................<a href="#page-25">25</a>
Acknowledgements ..................................................<a href="#page-30">30</a>
<span class="h2"><a class="selflink" id="section-1" href="#section-1">1</a>. Introduction</span>
When the Public-Key Infrastructure using X.509 (PKIX) Working Group
was chartered, an object identifier arc was allocated by IANA for use
by that working group. These object identifiers are primarily used
with Abstract Syntax Notation One (ASN.1) [<a href="#ref-ASN1-88" title=""Specification of Abstract Syntax Notation One (ASN.1)"">ASN1-88</a>] [<a href="#ref-ASN1-97" title=""Abstract Syntax Notation One (ASN.1): Specification of basic notation"">ASN1-97</a>]
[<a href="#ref-ASN1-08" title=""Abstract Syntax Notation One (ASN.1): Specification of basic notation"">ASN1-08</a>]. The ASN.1 specifications continue to evolve, but object
identifiers can be used with any and all versions of ASN.1.
The PKIX object identifier arc is:
id-pkix OBJECT IDENTIFIER ::= { iso(1) identified-organization(3)
dod(6) internet(1) security(5) mechanisms(5) pkix(7) }
This document describes the object identifiers that were assigned in
the PKIX arc, returns control of the PKIX arc to IANA, and
establishes IANA allocation policies for any future assignments
within the PKIX arc.
<span class="h2"><a class="selflink" id="section-2" href="#section-2">2</a>. Subordinate Object Identifier Arcs</span>
Twenty-five subordinate object identifier arcs were used, numbered
from 0 to 23 and 48. In addition, there are seven subordinate arcs.
They were assigned as follows:
-- Module identifiers
id-mod OBJECT IDENTIFIER ::= { id-pkix 0 }
-- PKIX certificate extensions
id-pe OBJECT IDENTIFIER ::= { id-pkix 1 }
-- Policy qualifier types
id-qt OBJECT IDENTIFIER ::= { id-pkix 2 }
<span class="grey">Housley Informational [Page 3]</span><span id="page-4" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
-- Extended key purpose identifiers
id-kp OBJECT IDENTIFIER ::= { id-pkix 3 }
-- CMP information types
id-it OBJECT IDENTIFIER ::= { id-pkix 4 }
-- CRMF registration
id-pkip OBJECT IDENTIFIER ::= { id-pkix 5 }
-- CRMF registration controls
id-regCtrl OBJECT IDENTIFIER ::= { id-pkix 5 1 }
-- CRMF registration information
id-regInfo OBJECT IDENTIFIER ::= { id-pkix 5 2 }
-- Algorithms
id-alg OBJECT IDENTIFIER ::= { id-pkix 6 }
-- CMC controls
id-cmc OBJECT IDENTIFIER ::= { id-pkix 7 }
-- CMC GLA Requests and Responses
id-cmc-glaRR OBJECT IDENTIFIER ::= { id-pkix 7 99 }
-- Other name forms
id-on OBJECT IDENTIFIER ::= { id-pkix 8 }
-- Personal data attribute
id-pda OBJECT IDENTIFIER ::= { id-pkix 9 }
-- Attribute certificate attributes
id-aca OBJECT IDENTIFIER ::= { id-pkix 10 }
-- Qualified certificate statements
id-qcs OBJECT IDENTIFIER ::= { id-pkix 11 }
-- CMC content types
id-cct OBJECT IDENTIFIER ::= { id-pkix 12 }
-- OIDs for TESTING ONLY
id-TEST OBJECT IDENTIFIER ::= { id-pkix 13 }
-- Certificate policies
id-cp OBJECT IDENTIFIER ::= { id-pkix 14 }
-- CMC error types
id-cet OBJECT IDENTIFIER ::= { id-pkix 15 }
<span class="grey">Housley Informational [Page 4]</span><span id="page-5" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
-- Revocation information types
id-ri OBJECT IDENTIFIER ::= { id-pkix 16 }
-- SCVP check type
id-sct OBJECT IDENTIFIER ::= { id-pkix 17 }
-- SCVP want back types
id-swb OBJECT IDENTIFIER ::= { id-pkix 18 }
-- SCVP validation policies
id-svp OBJECT IDENTIFIER ::= { id-pkix 19 }
-- SCVP name validation policy errors
id-nvae OBJECT IDENTIFIER ::= { id-pkix 19 2 }
-- SCVP basic validation policy errors
id-bvae OBJECT IDENTIFIER ::= { id-pkix 19 3 }
-- SCVP distinguished name validation policy errors
id-dnvae OBJECT IDENTIFIER ::= { id-pkix 19 4 }
-- Other logotype identifiers
id-logo OBJECT IDENTIFIER ::= { id-pkix 20 }
-- Proxy certificate policy languages
id-ppl OBJECT IDENTIFIER ::= { id-pkix 21 }
-- Matching rules
id-mr OBJECT IDENTIFIER ::= { id-pkix 22 }
-- Subject key identifier semantics
id-skis OBJECT IDENTIFIER ::= { id-pkix 23 }
-- Access descriptors
id-ad OBJECT IDENTIFIER ::= { id-pkix 48 }
-- Online Certificate Status Protocol
id-pkix-ocsp OBJECT IDENTIFIER ::= { id-pkix 48 1 }
The values assigned in each of these subordinate object identifier
arcs are discussed in the next section.
<span class="grey">Housley Informational [Page 5]</span><span id="page-6" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h2"><a class="selflink" id="section-3" href="#section-3">3</a>. IANA Considerations</span>
IANA has updated one registry table and created 33 additional tables.
Updates to the new tables are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>]. The expert is
expected to ensure that any new values are strongly related to the
work that was done by the PKIX Working Group. That is, additional
object identifiers are to be related to X.509 certificates, X.509
attribute certificates, X.509 certificate revocation lists (CRLs), or
protocols associated with them. Object identifiers for other
purposes should not be assigned in this arc.
<span class="h3"><a class="selflink" id="section-3.1" href="#section-3.1">3.1</a>. Update to "SMI Security for Mechanism Codes" Registry</span>
The reference for the Public Key Infrastructure using X.509 (PKIX)
entry (decimal value 7) has been updated to point to this document.
<span class="h3"><a class="selflink" id="section-3.2" href="#section-3.2">3.2</a>. "SMI Security for PKIX" Registry</span>
Within the SMI-numbers registry, a "PKIX (1.3.6.1.5.5.7)" table with
three columns has been added:
Decimal Description References
------- -------------------------------------- ----------
0 Module identifiers [<a href="./rfc7299">RFC7299</a>]
1 PKIX certificate extensions [<a href="./rfc7299">RFC7299</a>]
2 Policy qualifier types [<a href="./rfc7299">RFC7299</a>]
3 Extended key purpose identifiers [<a href="./rfc7299">RFC7299</a>]
4 CMP information types [<a href="./rfc7299">RFC7299</a>]
5 CRMF registration [<a href="./rfc7299">RFC7299</a>]
6 Algorithms [<a href="./rfc7299">RFC7299</a>]
7 CMC controls [<a href="./rfc7299">RFC7299</a>]
8 Other name forms [<a href="./rfc7299">RFC7299</a>]
9 Personal data attribute [<a href="./rfc7299">RFC7299</a>]
10 Attribute certificate attributes [<a href="./rfc7299">RFC7299</a>]
11 Qualified certificate statements [<a href="./rfc7299">RFC7299</a>]
12 CMC content types [<a href="./rfc7299">RFC7299</a>]
13 OIDs for TESTING ONLY [<a href="./rfc7299">RFC7299</a>]
14 Certificate policies [<a href="./rfc7299">RFC7299</a>]
15 CMC error types [<a href="./rfc7299">RFC7299</a>]
16 Revocation information types [<a href="./rfc7299">RFC7299</a>]
17 SCVP check type [<a href="./rfc7299">RFC7299</a>]
18 SCVP want back types [<a href="./rfc7299">RFC7299</a>]
19 SCVP validation policies [<a href="./rfc7299">RFC7299</a>]
20 Other logotype identifiers [<a href="./rfc7299">RFC7299</a>]
<span class="grey">Housley Informational [Page 6]</span><span id="page-7" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
21 Proxy certificate policy languages [<a href="./rfc7299">RFC7299</a>]
22 Matching rules [<a href="./rfc7299">RFC7299</a>]
23 Subject key identifier semantics [<a href="./rfc7299">RFC7299</a>]
48 Access descriptors [<a href="./rfc7299">RFC7299</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.3" href="#section-3.3">3.3</a>. "SMI Security for PKIX Module Identifier" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Module
Identifier (1.3.6.1.5.5.7.0)" table with three columns has been
added:
Decimal Description References
------- ------------------------------- ---------------------
1 id-pkix1-explicit-88 [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
2 id-pkix1-implicit-88 [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
3 id-pkix1-explicit-93 [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
4 id-pkix1-implicit-93 [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
5 id-mod-crmf [<a href="./rfc2511" title=""Internet X.509 Certificate Request Message Format"">RFC2511</a>]
6 id-mod-cmc [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
7 id-mod-kea-profile-88 [<a href="./rfc2528" title=""Internet X.509 Public Key Infrastructure Representation of Key Exchange Algorithm (KEA) Keys in Internet X.509 Public Key Infrastructure Certificates"">RFC2528</a>]
8 id-mod-kea-profile-93 [<a href="./rfc2528" title=""Internet X.509 Public Key Infrastructure Representation of Key Exchange Algorithm (KEA) Keys in Internet X.509 Public Key Infrastructure Certificates"">RFC2528</a>]
9 id-mod-cmp [<a href="./rfc2510" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocols"">RFC2510</a>]
10 id-mod-qualified-cert-88 [<a href="./rfc3039" title=""Internet X.509 Public Key Infrastructure Qualified Certificates Profile"">RFC3039</a>]
11 id-mod-qualified-cert-93 [<a href="./rfc3039" title=""Internet X.509 Public Key Infrastructure Qualified Certificates Profile"">RFC3039</a>]
12 id-mod-attribute-cert [<a href="./rfc3281" title=""An Internet Attribute Certificate Profile for Authorization"">RFC3281</a>]
13 id-mod-tsp [<a href="./rfc3161" title=""Internet X.509 Public Key Infrastructure Time-Stamp Protocol (TSP)"">RFC3161</a>]
14 id-mod-ocsp [<a href="./rfc3029" title=""Internet X.509 Public Key Infrastructure Data Validation and Certification Server Protocols"">RFC3029</a>]
15 id-mod-dvcs [<a href="./rfc3029" title=""Internet X.509 Public Key Infrastructure Data Validation and Certification Server Protocols"">RFC3029</a>]
16 id-mod-cmp2000 [<a href="./rfc4210" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)"">RFC4210</a>]
17 id-mod-pkix1-algorithms [<a href="./rfc3279" title=""Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile"">RFC3279</a>]
18 id-mod-pkix1-explicit [<a href="./rfc3280" title=""Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile"">RFC3280</a>]
19 id-mod-pkix1-implicit [<a href="./rfc3280" title=""Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile"">RFC3280</a>]
20 id-mod-user-group Reserved and Obsolete
21 id-mod-scvp [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
22 id-mod-logotype [<a href="./rfc3709" title=""Internet X.509 Public Key Infrastructure: Logotypes in X.509 Certificates"">RFC3709</a>]
23 id-mod-cmc2002 [<a href="./rfc5272" title=""Certificate Management over CMS (CMC)"">RFC5272</a>]
24 id-mod-wlan-extns [<a href="./rfc3770" title=""Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN)"">RFC3770</a>]
25 id-mod-proxy-cert-extns [<a href="./rfc3820" title=""Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile"">RFC3820</a>]
26 id-mod-ac-policies [<a href="./rfc4476" title=""Attribute Certificate (AC) Policies Extension"">RFC4476</a>]
27 id-mod-warranty-extn [<a href="./rfc4059" title=""Internet X.509 Public Key Infrastructure Warranty Certificate Extension"">RFC4059</a>]
28 id-mod-perm-id-88 [<a href="./rfc4043" title=""Internet X.509 Public Key Infrastructure Permanent Identifier"">RFC4043</a>]
29 id-mod-perm-id-93 [<a href="./rfc4043" title=""Internet X.509 Public Key Infrastructure Permanent Identifier"">RFC4043</a>]
30 id-mod-ip-addr-and-as-ident [<a href="./rfc3779" title=""X.509 Extensions for IP Addresses and AS Identifiers"">RFC3779</a>]
31 id-mod-qualified-cert [<a href="./rfc3739" title=""Internet X.509 Public Key Infrastructure: Qualified Certificates Profile"">RFC3739</a>]
32 id-mod-crmf2003 Reserved and Obsolete
<span class="grey">Housley Informational [Page 7]</span><span id="page-8" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
33 id-mod-pkix1-rsa-pkalgs [<a href="./rfc4055" title=""Additional Algorithms and Identifiers for RSA Cryptography for use in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile"">RFC4055</a>]
34 id-mod-cert-bundle [<a href="./rfc4306" title=""Internet Key Exchange (IKEv2) Protocol"">RFC4306</a>]
35 id-mod-qualified-cert-97 [<a href="./rfc3739" title=""Internet X.509 Public Key Infrastructure: Qualified Certificates Profile"">RFC3739</a>]
36 id-mod-crmf2005 [<a href="./rfc4210" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)"">RFC4210</a>]
37 id-mod-wlan-extns2005 [<a href="./rfc4334" title=""Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN)"">RFC4334</a>]
38 id-mod-sim2005 [<a href="./rfc4683" title=""Internet X.509 Public Key Infrastructure Subject Identification Method (SIM)"">RFC4683</a>]
39 id-mod-dns-srv-name-88 [<a href="./rfc4985" title=""Internet X.509 Public Key Infrastructure Subject Alternative Name for Expression of Service Name"">RFC4985</a>]
40 id-mod-dns-srv-name-93 [<a href="./rfc4985" title=""Internet X.509 Public Key Infrastructure Subject Alternative Name for Expression of Service Name"">RFC4985</a>]
41 id-mod-cmsContentConstr-88 [<a href="./rfc6010" title=""Cryptographic Message Syntax (CMS) Content Constraints Extension"">RFC6010</a>]
42 id-mod-cmsContentConstr-93 [<a href="./rfc6010" title=""Cryptographic Message Syntax (CMS) Content Constraints Extension"">RFC6010</a>]
43 id-mod-pkixCommon Reserved and Obsolete
44 id-mod-pkixOtherCerts [<a href="./rfc5697" title=""Other Certificates Extension"">RFC5697</a>]
45 id-mod-pkix1-algorithms2008 [<a href="./rfc5480" title=""Elliptic Curve Cryptography Subject Public Key Information"">RFC5480</a>]
46 id-mod-clearanceConstraints [<a href="./rfc5913" title=""Clearance Attribute and Authority Clearance Constraints Certificate Extension"">RFC5913</a>]
47 id-mod-attribute-cert-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
48 id-mod-ocsp-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
49 id-mod-v1AttrCert-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
50 id-mod-cmp2000-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
51 id-mod-pkix1-explicit-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
52 id-mod-scvp-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
53 id-mod-cmc2002-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
54 id-mod-pkix1-rsa-pkalgs-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
55 id-mod-crmf2005-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
56 id-mod-pkix1-algorithms2008-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
57 id-mod-pkixCommon-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
58 id-mod-algorithmInformation-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
59 id-mod-pkix1-implicit-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
60 id-mod-pkix1-x400address-02 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
61 id-mod-attribute-cert-v2 [<a href="./rfc5755" title=""An Internet Attribute Certificate Profile for Authorization"">RFC5755</a>]
62 id-mod-sip-domain-extns2007 [<a href="./rfc5924" title=""Extended Key Usage (EKU) for Session Initiation Protocol (SIP) X.509 Certificates"">RFC5924</a>]
63 id-mod-cms-otherRIs-2009-88 [<a href="./rfc5940" title=""Additional Cryptographic Message Syntax (CMS) Revocation Information Choices"">RFC5940</a>]
64 id-mod-cms-otherRIs-2009-93 [<a href="./rfc5940" title=""Additional Cryptographic Message Syntax (CMS) Revocation Information Choices"">RFC5940</a>]
65 id-mod-ecprivatekey [<a href="./rfc5915" title=""Elliptic Curve Private Key Structure"">RFC5915</a>]
66 id-mod-ocsp-agility-2009-93 [<a href="./rfc6277" title=""Online Certificate Status Protocol Algorithm Agility"">RFC6277</a>]
67 id-mod-ocsp-agility-2009-88 [<a href="./rfc6277" title=""Online Certificate Status Protocol Algorithm Agility"">RFC6277</a>]
68 id-mod-logotype-certimage [<a href="./rfc6170" title=""Internet X.509 Public Key Infrastructure -- Certificate Image"">RFC6170</a>]
69 id-mod-pkcs10-2009 [<a href="./rfc5912" title=""New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)"">RFC5912</a>]
70 id-mod-dns-resource-record [<a href="#ref-Abley" title=""DNSSEC Trust Anchor Publication for the Root Zone"">Abley</a>]
71 id-mod-send-cert-extns [<a href="./rfc6494" title=""Certificate Profile and Certificate Management for SEcure Neighbor Discovery (SEND)"">RFC6494</a>]
72 id-mod-ip-addr-and-as-ident-2 [<a href="./rfc6268" title=""Additional New ASN.1 Modules for the Cryptographic Message Syntax (CMS) and the Public Key Infrastructure Using X.509 (PKIX)"">RFC6268</a>]
73 id-mod-wlan-extns-2 [<a href="./rfc6268" title=""Additional New ASN.1 Modules for the Cryptographic Message Syntax (CMS) and the Public Key Infrastructure Using X.509 (PKIX)"">RFC6268</a>]
74 id-mod-hmac [<a href="./rfc6268" title=""Additional New ASN.1 Modules for the Cryptographic Message Syntax (CMS) and the Public Key Infrastructure Using X.509 (PKIX)"">RFC6268</a>]
75 id-mod-enrollMsgSyntax-2011-88 [<a href="./rfc6402" title=""Certificate Management over CMS (CMC) Updates"">RFC6402</a>] [<a href="#ref-Err3860" title="RFC 6402">Err3860</a>]
76 id-mod-enrollMsgSyntax-2011-08 [<a href="./rfc6402" title=""Certificate Management over CMS (CMC) Updates"">RFC6402</a>]
77 id-mod-pubKeySMIMECaps-88 [<a href="./rfc6664" title=""S/MIME Capabilities for Public Key Definitions"">RFC6664</a>]
78 id-mod-pubKeySMIMECaps-08 [<a href="./rfc6664" title=""S/MIME Capabilities for Public Key Definitions"">RFC6664</a>]
79 id-mod-dhSign-2012-88 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
80 id-mod-dhSign-2012-08 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
<span class="grey">Housley Informational [Page 8]</span><span id="page-9" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
81 id-mod-ocsp-2013-88 [<a href="./rfc6960" title=""X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP"">RFC6960</a>]
82 id-mod-ocsp-2013-08 [<a href="./rfc6960" title=""X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP"">RFC6960</a>]
83 id-mod-TEST-certPolicies [<a href="./rfc7229" title=""Object Identifiers for Test Certificate Policies"">RFC7229</a>]
84 id-mod-bgpsec-eku [<a href="#ref-BGPSEC" title=""A Profile for BGPSEC Router Certificates, Certificate Revocation Lists, and Certification Requests"">BGPSEC</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.4" href="#section-3.4">3.4</a>. "SMI Security for PKIX Certificate Extension" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX
Certificate Extension (1.3.6.1.5.5.7.1)" table with three columns has
been added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-pe-authorityInfoAccess [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
2 id-pe-biometricInfo [<a href="./rfc3039" title=""Internet X.509 Public Key Infrastructure Qualified Certificates Profile"">RFC3039</a>]
3 id-pe-qcStatements [<a href="./rfc3039" title=""Internet X.509 Public Key Infrastructure Qualified Certificates Profile"">RFC3039</a>]
4 id-pe-ac-auditIdentity [<a href="./rfc3281" title=""An Internet Attribute Certificate Profile for Authorization"">RFC3281</a>]
5 id-pe-ac-targeting Reserved and Obsolete
6 id-pe-aaControls [<a href="./rfc3281" title=""An Internet Attribute Certificate Profile for Authorization"">RFC3281</a>]
7 id-pe-ipAddrBlocks [<a href="./rfc3779" title=""X.509 Extensions for IP Addresses and AS Identifiers"">RFC3779</a>]
8 id-pe-autonomousSysIds [<a href="./rfc3779" title=""X.509 Extensions for IP Addresses and AS Identifiers"">RFC3779</a>]
9 id-pe-sbgp-routerIdentifier Reserved and Obsolete
10 id-pe-ac-proxying [<a href="./rfc3281" title=""An Internet Attribute Certificate Profile for Authorization"">RFC3281</a>]
11 id-pe-subjectInfoAccess [<a href="./rfc3280" title=""Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile"">RFC3280</a>]
12 id-pe-logotype [<a href="./rfc3709" title=""Internet X.509 Public Key Infrastructure: Logotypes in X.509 Certificates"">RFC3709</a>]
13 id-pe-wlanSSID [<a href="./rfc4334" title=""Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN)"">RFC4334</a>]
14 id-pe-proxyCertInfo [<a href="./rfc3820" title=""Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile"">RFC3820</a>]
15 id-pe-acPolicies [<a href="./rfc4476" title=""Attribute Certificate (AC) Policies Extension"">RFC4476</a>]
16 id-pe-warranty [<a href="./rfc4059" title=""Internet X.509 Public Key Infrastructure Warranty Certificate Extension"">RFC4059</a>]
17 id-pe-sim Reserved and Obsolete
18 id-pe-cmsContentConstraints [<a href="./rfc6010" title=""Cryptographic Message Syntax (CMS) Content Constraints Extension"">RFC6010</a>]
19 id-pe-otherCerts [<a href="./rfc5697" title=""Other Certificates Extension"">RFC5697</a>]
20 id-pe-wrappedApexContinKey [<a href="./rfc5934" title=""Trust Anchor Management Protocol (TAMP)"">RFC5934</a>]
21 id-pe-clearanceConstraints [<a href="./rfc5913" title=""Clearance Attribute and Authority Clearance Constraints Certificate Extension"">RFC5913</a>]
22 id-pe-skiSemantics Reserved and Obsolete
23 id-pe-nsa [<a href="./rfc7169" title=""The NSA (No Secrecy Afforded) Certificate Extension"">RFC7169</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="grey">Housley Informational [Page 9]</span><span id="page-10" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h3"><a class="selflink" id="section-3.5" href="#section-3.5">3.5</a>. "SMI Security for PKIX Policy Qualifier" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Policy
Qualifier Identifiers (1.3.6.1.5.5.7.2)" table with three columns has
been added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-qt-cps [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
2 id-qt-unotice [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
3 id-qt-textNotice Reserved and Obsolete
4 id-qt-acps [<a href="./rfc4476" title=""Attribute Certificate (AC) Policies Extension"">RFC4476</a>]
5 id-qt-acunotice [<a href="./rfc4476" title=""Attribute Certificate (AC) Policies Extension"">RFC4476</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.6" href="#section-3.6">3.6</a>. "SMI Security for PKIX Extended Key Purpose" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Extended
Key Purpose Identifiers (1.3.6.1.5.5.7.3)" table with three columns
has been added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-kp-serverAuth [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
2 id-kp-clientAuth [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
3 id-kp-codeSigning [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
4 id-kp-emailProtection [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
5 id-kp-ipsecEndSystem Reserved and Obsolete
6 id-kp-ipsecTunnel Reserved and Obsolete
7 id-kp-ipsecUser Reserved and Obsolete
8 id-kp-timeStamping [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
9 id-kp-OCSPSigning [<a href="./rfc2560" title=""X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP"">RFC2560</a>]
10 id-kp-dvcs [<a href="./rfc3029" title=""Internet X.509 Public Key Infrastructure Data Validation and Certification Server Protocols"">RFC3029</a>]
11 id-kp-sbgpCertAAServerAuth Reserved and Obsolete
12 id-kp-scvp-responder Reserved and Obsolete
13 id-kp-eapOverPPP [<a href="./rfc4334" title=""Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN)"">RFC4334</a>]
14 id-kp-eapOverLAN [<a href="./rfc4334" title=""Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN)"">RFC4334</a>]
15 id-kp-scvpServer [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
16 id-kp-scvpClient [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
17 id-kp-ipsecIKE [<a href="./rfc4945" title=""The Internet IP Security PKI Profile of IKEv1/ISAKMP, IKEv2, and PKIX"">RFC4945</a>]
18 id-kp-capwapAC [<a href="./rfc5415" title=""Control And Provisioning of Wireless Access Points (CAPWAP) Protocol Specification"">RFC5415</a>]
19 id-kp-capwapWTP [<a href="./rfc5415" title=""Control And Provisioning of Wireless Access Points (CAPWAP) Protocol Specification"">RFC5415</a>]
20 id-kp-sipDomain [<a href="./rfc5924" title=""Extended Key Usage (EKU) for Session Initiation Protocol (SIP) X.509 Certificates"">RFC5924</a>]
21 id-kp-secureShellClient [<a href="./rfc6187" title=""X.509v3 Certificates for Secure Shell Authentication"">RFC6187</a>]
22 id-kp-secureShellServer [<a href="./rfc6187" title=""X.509v3 Certificates for Secure Shell Authentication"">RFC6187</a>]
23 id-kp-sendRouter [<a href="./rfc6494" title=""Certificate Profile and Certificate Management for SEcure Neighbor Discovery (SEND)"">RFC6494</a>]
<span class="grey">Housley Informational [Page 10]</span><span id="page-11" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
24 id-kp-sendProxiedRouter [<a href="./rfc6494" title=""Certificate Profile and Certificate Management for SEcure Neighbor Discovery (SEND)"">RFC6494</a>]
25 id-kp-sendOwner [<a href="./rfc6494" title=""Certificate Profile and Certificate Management for SEcure Neighbor Discovery (SEND)"">RFC6494</a>]
26 id-kp-sendProxiedOwner [<a href="./rfc6494" title=""Certificate Profile and Certificate Management for SEcure Neighbor Discovery (SEND)"">RFC6494</a>]
27 id-kp-cmcCA [<a href="./rfc6402" title=""Certificate Management over CMS (CMC) Updates"">RFC6402</a>]
28 id-kp-cmcRA [<a href="./rfc6402" title=""Certificate Management over CMS (CMC) Updates"">RFC6402</a>]
29 id-kp-cmcArchive [<a href="./rfc6402" title=""Certificate Management over CMS (CMC) Updates"">RFC6402</a>]
30 id-kp-bgpsec-router [<a href="#ref-BGPSEC" title=""A Profile for BGPSEC Router Certificates, Certificate Revocation Lists, and Certification Requests"">BGPSEC</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.7" href="#section-3.7">3.7</a>. "SMI Security for PKIX CMP Information Types" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX CMP
Information Types (1.3.6.1.5.5.7.4)" table with three columns has
been added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-it-caProtEncCert [<a href="./rfc2510" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocols"">RFC2510</a>]
2 id-it-signKeyPairTypes [<a href="./rfc2510" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocols"">RFC2510</a>]
3 id-it-encKeyPairTypes [<a href="./rfc2510" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocols"">RFC2510</a>]
4 id-it-preferredSymmAlg [<a href="./rfc2510" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocols"">RFC2510</a>]
5 id-it-caKeyUpdateInfo [<a href="./rfc2510" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocols"">RFC2510</a>]
6 id-it-currentCRL [<a href="./rfc2510" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocols"">RFC2510</a>]
7 id-it-unsupportedOIDs [<a href="./rfc4210" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)"">RFC4210</a>]
8 id-it-subscriptionRequest Reserved and Obsolete
9 id-it-subscriptionResponse Reserved and Obsolete
10 id-it-keyPairParamReq [<a href="./rfc4210" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)"">RFC4210</a>]
11 id-it-keyPairParamRep [<a href="./rfc4210" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)"">RFC4210</a>]
12 id-it-revPassphrase [<a href="./rfc4210" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)"">RFC4210</a>]
13 id-it-implicitConfirm [<a href="./rfc4210" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)"">RFC4210</a>]
14 id-it-confirmWaitTime [<a href="./rfc4210" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)"">RFC4210</a>]
15 id-it-origPKIMessage [<a href="./rfc4210" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)"">RFC4210</a>]
16 id-it-suppLangTags [<a href="./rfc4210" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)"">RFC4210</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="grey">Housley Informational [Page 11]</span><span id="page-12" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h3"><a class="selflink" id="section-3.8" href="#section-3.8">3.8</a>. "SMI Security for PKIX CRMF Registration" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX CRMF
Registration (1.3.6.1.5.5.7.5)" table with three columns has been
added:
Decimal Description References
------- ------------------------------ ----------
1 id-regCtrl [<a href="./rfc2511" title=""Internet X.509 Certificate Request Message Format"">RFC2511</a>]
2 id-regInfo [<a href="./rfc2511" title=""Internet X.509 Certificate Request Message Format"">RFC2511</a>]
3 id-regEPEPSI [<a href="./rfc4683" title=""Internet X.509 Public Key Infrastructure Subject Identification Method (SIM)"">RFC4683</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.9" href="#section-3.9">3.9</a>. "SMI Security for PKIX CRMF Registration Controls" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX CRMF
Registration Controls (1.3.6.1.5.5.7.5.1)" table with three columns
has been added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-regCtrl-regToken [<a href="./rfc2511" title=""Internet X.509 Certificate Request Message Format"">RFC2511</a>]
2 id-regCtrl-authenticator [<a href="./rfc2511" title=""Internet X.509 Certificate Request Message Format"">RFC2511</a>]
3 id-regCtrl-pkiPublicationInfo [<a href="./rfc2511" title=""Internet X.509 Certificate Request Message Format"">RFC2511</a>]
4 id-regCtrl-pkiArchiveOptions [<a href="./rfc2511" title=""Internet X.509 Certificate Request Message Format"">RFC2511</a>]
5 id-regCtrl-oldCertID [<a href="./rfc2511" title=""Internet X.509 Certificate Request Message Format"">RFC2511</a>]
6 id-regCtrl-protocolEncrKey [<a href="./rfc2511" title=""Internet X.509 Certificate Request Message Format"">RFC2511</a>]
7 id-regCtrl-altCertTemplate [<a href="./rfc4210" title=""Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)"">RFC4210</a>]
8 id-regCtrl-wtlsTemplate Reserved and Obsolete
9 id-regCtrl-regTokenUTF8 Reserved and Obsolete
10 id-regCtrl-authenticatorUTF8 Reserved and Obsolete
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.10" href="#section-3.10">3.10</a>. "SMI Security for PKIX CRMF Registration Information" Registry</span>
Within the SMI-numbers registry, add an "SMI Security for PKIX CRMF
Registration Information (1.3.6.1.5.5.7.5.2)" table with three
columns:
Decimal Description References
------- ------------------------------ ----------
1 id-regInfo-utf8Pairs [<a href="./rfc2511" title=""Internet X.509 Certificate Request Message Format"">RFC2511</a>]
2 id-regInfo-certReq [<a href="./rfc2511" title=""Internet X.509 Certificate Request Message Format"">RFC2511</a>]
<span class="grey">Housley Informational [Page 12]</span><span id="page-13" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.11" href="#section-3.11">3.11</a>. "SMI Security for PKIX Algorithms" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Algorithms
(1.3.6.1.5.5.7.6)" table with three columns has been added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-alg-des40 Reserved and Obsolete
2 id-alg-noSignature [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
3 id-alg-dh-sig-hmac-sha1 [<a href="./rfc2875" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC2875</a>]
4 id-alg-dhPop-sha1 [<a href="./rfc2875" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC2875</a>]
5 id-alg-dhPop-sha224 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
6 id-alg-dhPop-sha256 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
7 id-alg-dhPop-sha384 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
8 id-alg-dhPop-sha512 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
15 id-alg-dhPop-static-sha224-hmac-sha224 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
16 id-alg-dhPop-static-sha256-hmac-sha256 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
17 id-alg-dhPop-static-sha384-hmac-sha384 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
18 id-alg-dhPop-static-sha512-hmac-sha512 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
25 id-alg-ecdhPop-static-sha224-hmac-sha224 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
26 id-alg-ecdhPop-static-sha256-hmac-sha256 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
27 id-alg-ecdhPop-static-sha384-hmac-sha384 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
28 id-alg-ecdhPop-static-sha512-hmac-sha512 [<a href="./rfc6955" title=""Diffie-Hellman Proof-of-Possession Algorithms"">RFC6955</a>]
Note: id-alg-dhPop-sha1 is also known as id-alg-dh-pop.
Note: id-alg-dh-sig-hmac-sha1 is also known as
id-alg-dhPop-static-sha1-hmac-sha1 and
id-dhPop-static-hmac-sha1.
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.12" href="#section-3.12">3.12</a>. "SMI Security for PKIX CMC Controls" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX CMC
Controls (1.3.6.1.5.5.7.7)" table with three columns has been added:
Decimal Description References
------- ------------------------------ ----------
1 id-cmc-statusInfo [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
2 id-cmc-identification [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
3 id-cmc-identityProof [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
4 id-cmc-dataReturn [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
5 id-cmc-transactionId [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
<span class="grey">Housley Informational [Page 13]</span><span id="page-14" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
6 id-cmc-senderNonce [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
7 id-cmc-recipientNonce [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
8 id-cmc-addExtensions [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
9 id-cmc-encryptedPOP [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
10 id-cmc-decryptedPOP [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
11 id-cmc-lraPOPWitness [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
15 id-cmc-getCert [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
16 id-cmc-getCRL [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
17 id-cmc-revokeRequest [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
18 id-cmc-regInfo [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
19 id-cmc-responseInfo [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
21 id-cmc-queryPending [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
22 id-cmc-popLinkRandom [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
23 id-cmc-popLinkWitness [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
24 id-cmc-confirmCertAcceptance [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
25 id-cmc-statusInfoV2 [<a href="./rfc5272" title=""Certificate Management over CMS (CMC)"">RFC5272</a>]
26 id-cmc-trustedAnchors [<a href="./rfc5272" title=""Certificate Management over CMS (CMC)"">RFC5272</a>]
27 id-cmc-authData [<a href="./rfc5272" title=""Certificate Management over CMS (CMC)"">RFC5272</a>]
28 id-cmc-batchRequests [<a href="./rfc5272" title=""Certificate Management over CMS (CMC)"">RFC5272</a>]
29 id-cmc-batchResponses [<a href="./rfc5272" title=""Certificate Management over CMS (CMC)"">RFC5272</a>]
30 id-cmc-publishCert [<a href="./rfc5272" title=""Certificate Management over CMS (CMC)"">RFC5272</a>]
31 id-cmc-modCertTemplate [<a href="./rfc5272" title=""Certificate Management over CMS (CMC)"">RFC5272</a>]
32 id-cmc-controlProcessed [<a href="./rfc5272" title=""Certificate Management over CMS (CMC)"">RFC5272</a>]
33 id-cmc-popLinkWitnessV2 [<a href="./rfc5272" title=""Certificate Management over CMS (CMC)"">RFC5272</a>]
34 id-cmc-identityProofV2 [<a href="./rfc5272" title=""Certificate Management over CMS (CMC)"">RFC5272</a>]
35 id-cmc-raIdentityWitness [<a href="./rfc6402" title=""Certificate Management over CMS (CMC) Updates"">RFC6402</a>]
36 id-cmc-changeSubjectName [<a href="./rfc6402" title=""Certificate Management over CMS (CMC) Updates"">RFC6402</a>]
37 id-cmc-responseBody [<a href="./rfc6402" title=""Certificate Management over CMS (CMC) Updates"">RFC6402</a>]
99 id-cmc-glaRR [<a href="./rfc5275" title=""CMS Symmetric Key Management and Distribution"">RFC5275</a>]
Note: id-cmc-statusInfo is also known as id-cmc-cMCStatusInfo.
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.13" href="#section-3.13">3.13</a>. "SMI Security for PKIX CMC GLA Requests and Responses" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX CMC GLA
Requests and Responses (1.3.6.1.5.5.7.7.99)" table with three columns
has been added:
Decimal Description References
------- ------------------------------ ----------
1 id-cmc-gla-skdAlgRequest [<a href="./rfc5275" title=""CMS Symmetric Key Management and Distribution"">RFC5275</a>]
2 id-cmc-gla-skdAlgResponse [<a href="./rfc5275" title=""CMS Symmetric Key Management and Distribution"">RFC5275</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="grey">Housley Informational [Page 14]</span><span id="page-15" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h3"><a class="selflink" id="section-3.14" href="#section-3.14">3.14</a>. "SMI Security for PKIX Other Name Forms" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Other Name
Forms (1.3.6.1.5.5.7.8)" table with three columns has been added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-on-personalData Reserved and Obsolete
2 id-on-userGroup Reserved and Obsolete
3 id-on-permanentIdentifier [<a href="./rfc4043" title=""Internet X.509 Public Key Infrastructure Permanent Identifier"">RFC4043</a>]
4 id-on-hardwareModuleName [<a href="./rfc4108" title=""Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages"">RFC4108</a>]
5 id-on-xmppAddr [<a href="./rfc3920" title=""Extensible Messaging and Presence Protocol (XMPP): Core"">RFC3920</a>]
6 id-on-SIM [<a href="./rfc4683" title=""Internet X.509 Public Key Infrastructure Subject Identification Method (SIM)"">RFC4683</a>]
7 id-on-dnsSRV [<a href="./rfc4985" title=""Internet X.509 Public Key Infrastructure Subject Alternative Name for Expression of Service Name"">RFC4985</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.15" href="#section-3.15">3.15</a>. "SMI Security for PKIX Personal Data Attributes" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Personal
Data Attributes (1.3.6.1.5.5.7.9)" table with three columns has been
added:
Decimal Description References
------- ------------------------------ ----------
1 id-pda-dateOfBirth [<a href="./rfc3039" title=""Internet X.509 Public Key Infrastructure Qualified Certificates Profile"">RFC3039</a>]
2 id-pda-placeOfBirth [<a href="./rfc3039" title=""Internet X.509 Public Key Infrastructure Qualified Certificates Profile"">RFC3039</a>]
3 id-pda-gender [<a href="./rfc3039" title=""Internet X.509 Public Key Infrastructure Qualified Certificates Profile"">RFC3039</a>]
4 id-pda-countryOfCitizenship [<a href="./rfc3039" title=""Internet X.509 Public Key Infrastructure Qualified Certificates Profile"">RFC3039</a>]
5 id-pda-countryOfResidence [<a href="./rfc3039" title=""Internet X.509 Public Key Infrastructure Qualified Certificates Profile"">RFC3039</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="grey">Housley Informational [Page 15]</span><span id="page-16" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h3"><a class="selflink" id="section-3.16" href="#section-3.16">3.16</a>. "SMI Security for PKIX Attribute Certificate Attributes" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Attribute
Certificate Attributes (1.3.6.1.5.5.7.10)" table with three columns
has been added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-aca-authenticationInfo [<a href="./rfc3281" title=""An Internet Attribute Certificate Profile for Authorization"">RFC3281</a>]
2 id-aca-accessIdentity [<a href="./rfc3281" title=""An Internet Attribute Certificate Profile for Authorization"">RFC3281</a>]
3 id-aca-chargingIdentity [<a href="./rfc3281" title=""An Internet Attribute Certificate Profile for Authorization"">RFC3281</a>]
4 id-aca-group [<a href="./rfc3281" title=""An Internet Attribute Certificate Profile for Authorization"">RFC3281</a>]
5 id-aca-role Reserved and Obsolete
6 id-aca-encAttrs [<a href="./rfc3281" title=""An Internet Attribute Certificate Profile for Authorization"">RFC3281</a>]
7 id-aca-wlanSSID [<a href="./rfc4334" title=""Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN)"">RFC4334</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.17" href="#section-3.17">3.17</a>. "SMI Security for PKIX Qualified Certificate Statements" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Qualified
Certificate Statements (1.3.6.1.5.5.7.11)" table with three columns
has been added:
Decimal Description References
------- ------------------------------ ----------
1 id-qcs-pkixQCSyntax-v1 [<a href="./rfc3039" title=""Internet X.509 Public Key Infrastructure Qualified Certificates Profile"">RFC3039</a>]
2 id-qcs-pkixQCSyntax-v2 [<a href="./rfc3739" title=""Internet X.509 Public Key Infrastructure: Qualified Certificates Profile"">RFC3739</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.18" href="#section-3.18">3.18</a>. "SMI Security for PKIX CMC Content Types" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX CMC
Content Types (1.3.6.1.5.5.7.12)" table with three columns has been
added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-cct-crs Reserved and Obsolete
2 id-cct-PKIData [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
3 id-cct-PKIResponse [<a href="./rfc2797" title=""Certificate Management Messages over CMS"">RFC2797</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="grey">Housley Informational [Page 16]</span><span id="page-17" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h3"><a class="selflink" id="section-3.19" href="#section-3.19">3.19</a>. "SMI Security for PKIX OIDs Used Only for Testing" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX OIDs used
Only for Testing (1.3.6.1.5.5.7.13)" table with three columns has
been added:
Decimal Description References
------- ------------------------------ ----------
1 id-TEST-certPolicyOne [<a href="./rfc7229" title=""Object Identifiers for Test Certificate Policies"">RFC7229</a>]
2 id-TEST-certPolicyTwo [<a href="./rfc7229" title=""Object Identifiers for Test Certificate Policies"">RFC7229</a>]
3 id-TEST-certPolicyThree [<a href="./rfc7229" title=""Object Identifiers for Test Certificate Policies"">RFC7229</a>]
4 id-TEST-certPolicyFour [<a href="./rfc7229" title=""Object Identifiers for Test Certificate Policies"">RFC7229</a>]
5 id-TEST-certPolicyFive [<a href="./rfc7229" title=""Object Identifiers for Test Certificate Policies"">RFC7229</a>]
6 id-TEST-certPolicySix [<a href="./rfc7229" title=""Object Identifiers for Test Certificate Policies"">RFC7229</a>]
7 id-TEST-certPolicySeven [<a href="./rfc7229" title=""Object Identifiers for Test Certificate Policies"">RFC7229</a>]
8 id-TEST-certPolicyEight [<a href="./rfc7229" title=""Object Identifiers for Test Certificate Policies"">RFC7229</a>]
Note: The object identifiers in this table should not appear on the
public Internet. These object identifiers are ONLY for
TESTING.
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.20" href="#section-3.20">3.20</a>. "SMI Security for PKIX Certificate Policies" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX
Certificate Policies (1.3.6.1.5.5.7.14)" table with three columns has
been added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-cp-sbgpCertificatePolicy Reserved and Obsolete
2 id-cp-ipAddr-asNumber [<a href="./rfc6484" title=""Certificate Policy (CP) for the Resource Public Key Infrastructure (RPKI)"">RFC6484</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.21" href="#section-3.21">3.21</a>. "SMI Security for PKIX CMC Error Types" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX CMC Error
Types (1.3.6.1.5.5.7.15)" table with three columns has been added:
Decimal Description References
------- ------------------------------ ----------
1 id-cet-skdFailInfo [<a href="./rfc5275" title=""CMS Symmetric Key Management and Distribution"">RFC5275</a>]
<span class="grey">Housley Informational [Page 17]</span><span id="page-18" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.22" href="#section-3.22">3.22</a>. "SMI Security for PKIX Revocation Information Types" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Revocation
Information Types (1.3.6.1.5.5.7.16)" table with three columns has
been added:
Decimal Description References
------- ------------------------------ ----------
1 id-ri-crl [<a href="./rfc5940" title=""Additional Cryptographic Message Syntax (CMS) Revocation Information Choices"">RFC5940</a>]
2 id-ri-ocsp-response [<a href="./rfc5940" title=""Additional Cryptographic Message Syntax (CMS) Revocation Information Choices"">RFC5940</a>]
3 id-ri-delta-crl [<a href="./rfc5940" title=""Additional Cryptographic Message Syntax (CMS) Revocation Information Choices"">RFC5940</a>]
4 id-ri-scvp [<a href="./rfc5940" title=""Additional Cryptographic Message Syntax (CMS) Revocation Information Choices"">RFC5940</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.23" href="#section-3.23">3.23</a>. "SMI Security for PKIX SCVP Check Types" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX SCVP Check
Types (1.3.6.1.5.5.7.17)" table with three columns has been added:
Decimal Description References
------- ------------------------------------------------ ----------
1 id-stc-build-pkc-path [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
2 id-stc-build-valid-pkc-path [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
3 id-stc-build-status-checked-pkc-path [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
4 id-stc-build-aa-path [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
5 id-stc-build-valid-aa-path [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
6 id-stc-build-status-checked-aa-path [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
7 id-stc-status-check-ac-and-build-status-checked-aa-path
[<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="grey">Housley Informational [Page 18]</span><span id="page-19" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h3"><a class="selflink" id="section-3.24" href="#section-3.24">3.24</a>. "SMI Security for PKIX SCVP Want Back Types" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX SCVP Want
Back Types (1.3.6.1.5.5.7.18)" table with three columns has been
added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-swb-pkc-best-cert-path [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
2 id-swb-pkc-revocation-info [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
3 id-swb-pkc-cert-status Reserved and Obsolete
4 id-swb-pkc-public-key-info [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
5 id-swb-aa-cert-path [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
6 id-swb-aa-revocation-info [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
7 id-swb-ac-revocation-info [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
8 id-swb-ac-cert-status Reserved and Obsolete
9 id-swb-relayed-responses [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
10 id-swb-pkc-cert [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
11 id-swb-ac-cert [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
12 id-swb-pkc-all-cert-paths [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
13 id-swb-pkc-ee-revocation-info [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
14 id-swb-pkc-CAs-revocation-info [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
15 id-swb-partial-cert-path [<a href="./rfc5276" title=""Using the Server-Based Certificate Validation Protocol (SCVP) to Convey Long-Term Evidence Records"">RFC5276</a>]
16 id-swb-ers-pkc-cert [<a href="./rfc5276" title=""Using the Server-Based Certificate Validation Protocol (SCVP) to Convey Long-Term Evidence Records"">RFC5276</a>]
17 id-swb-ers-best-cert-path [<a href="./rfc5276" title=""Using the Server-Based Certificate Validation Protocol (SCVP) to Convey Long-Term Evidence Records"">RFC5276</a>]
18 id-swb-ers-partial-cert-path [<a href="./rfc5276" title=""Using the Server-Based Certificate Validation Protocol (SCVP) to Convey Long-Term Evidence Records"">RFC5276</a>]
19 id-swb-ers-revocation-info [<a href="./rfc5276" title=""Using the Server-Based Certificate Validation Protocol (SCVP) to Convey Long-Term Evidence Records"">RFC5276</a>]
20 id-swb-ers-all [<a href="./rfc5276" title=""Using the Server-Based Certificate Validation Protocol (SCVP) to Convey Long-Term Evidence Records"">RFC5276</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="grey">Housley Informational [Page 19]</span><span id="page-20" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h3"><a class="selflink" id="section-3.25" href="#section-3.25">3.25</a>. "SMI Security for PKIX SCVP Validation Policies and Algorithms"</span>
<span class="h3"> Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX SCVP
Validation Policies and Algorithms (1.3.6.1.5.5.7.19)" table with
three columns has been added:
Decimal Description References
------- ------------------------------ ----------
1 id-svp-defaultValPolicy [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
2 id-svp-nameValAlg [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
3 id-svp-basicValAlg [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
4 id-svp-dnValAlg [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
Note: id-svp-nameValAlg is also known as id-nvae.
Note: id-svp-basicValAlg is also known as id-bvae.
Note: id-svp-dnValAlg is also known as id-dnvae and id-nva-dnCompAlg.
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.26" href="#section-3.26">3.26</a>. "SMI Security for PKIX SCVP Name Validation Policy Errors"</span>
<span class="h3"> Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX SCVP Name
Validation Policy Errors (1.3.6.1.5.5.7.19.2)" table with three
columns has been added:
Decimal Description References
------- ------------------------------ ----------
1 id-nvae-name-mismatch [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
2 id-nvae-no-name [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
3 id-nvae-unknown-alg [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
4 id-nvae-bad-name [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
5 id-nvae-bad-name-type [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
6 id-nvae-mixed-names [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="grey">Housley Informational [Page 20]</span><span id="page-21" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h3"><a class="selflink" id="section-3.27" href="#section-3.27">3.27</a>. "SMI Security for PKIX SCVP Basic Validation Policy Errors"</span>
<span class="h3"> Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX SCVP Basic
Validation Policy Errors (1.3.6.1.5.5.7.19.3)" table with three
columns has been added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-bvae-expired [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
2 id-bvae-not-yet-valid [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
3 id-bvae-wrongTrustAnchor [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
4 id-bvae-noValidCertPath [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
5 id-bvae-revoked [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
9 id-bvae-invalidKeyPurpose [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
10 id-bvae-invalidKeyUsage [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
11 id-bvae-invalidCertPolicy [<a href="./rfc5055" title=""Server-Based Certificate Validation Protocol (SCVP)"">RFC5055</a>]
12 id-bvae-invalidName Reserved and Obsolete
13 id-bvae-invalidEntity Reserved and Obsolete
14 id-bvae-invalidPathDepth Reserved and Obsolete
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.28" href="#section-3.28">3.28</a>. "SMI Security for PKIX SCVP Distinguished Name Validation Policy</span>
<span class="h3"> Errors" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX SCVP
Distinguished Name Validation Policy Errors (1.3.6.1.5.5.7.19.4)"
table with three columns has been added:
Decimal Description References
------- ------------------------------ ----------
Note: This table is currently empty.
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="grey">Housley Informational [Page 21]</span><span id="page-22" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h3"><a class="selflink" id="section-3.29" href="#section-3.29">3.29</a>. "SMI Security for PKIX Other Logotype Identifiers" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Other
Logotype Identifiers (1.3.6.1.5.5.7.20)" table with three columns has
been added:
Decimal Description References
------- ------------------------------ ----------
1 id-logo-loyalty [<a href="./rfc3709" title=""Internet X.509 Public Key Infrastructure: Logotypes in X.509 Certificates"">RFC3709</a>]
2 id-logo-background [<a href="./rfc3709" title=""Internet X.509 Public Key Infrastructure: Logotypes in X.509 Certificates"">RFC3709</a>]
3 id-logo-certImage [<a href="./rfc6170" title=""Internet X.509 Public Key Infrastructure -- Certificate Image"">RFC6170</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.30" href="#section-3.30">3.30</a>. "SMI Security for PKIX Proxy Certificate Policy Languages"</span>
<span class="h3"> Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Proxy
Certificate Policy Languages (1.3.6.1.5.5.7.21)" table with three
columns has been added:
Decimal Description References
------- ------------------------------ ----------
0 id-ppl-anyLanguage [<a href="./rfc3820" title=""Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile"">RFC3820</a>]
1 id-ppl-inheritAll [<a href="./rfc3820" title=""Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile"">RFC3820</a>]
2 id-ppl-independent [<a href="./rfc3820" title=""Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile"">RFC3820</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.31" href="#section-3.31">3.31</a>. "SMI Security for PKIX Proxy Matching Rules" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Proxy
Matching Rules (1.3.6.1.5.5.7.22)" table with three columns has been
added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-mr-pkix-alphanum-ids Reserved and Obsolete
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="grey">Housley Informational [Page 22]</span><span id="page-23" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h3"><a class="selflink" id="section-3.32" href="#section-3.32">3.32</a>. "SMI Security for PKIX Subject Key Identifier Semantics" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Subject
Key Identifier Semantics (1.3.6.1.5.5.7.23)" table with three columns
has been added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-skis-keyHash Reserved and Obsolete
2 id-skis-4BitKeyHash Reserved and Obsolete
3 id-skis-keyInfoHash Reserved and Obsolete
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h3"><a class="selflink" id="section-3.33" href="#section-3.33">3.33</a>. "SMI Security for PKIX Access Descriptor" Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Access
Descriptor (1.3.6.1.5.5.7.48)" table with three columns has been
added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-ad-ocsp [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
2 id-ad-caIssuers [<a href="./rfc2459" title=""Internet X.509 Public Key Infrastructure Certificate and CRL Profile"">RFC2459</a>]
3 id-ad-timestamping [<a href="./rfc3161" title=""Internet X.509 Public Key Infrastructure Time-Stamp Protocol (TSP)"">RFC3161</a>]
4 id-ad-dvcs [<a href="./rfc3029" title=""Internet X.509 Public Key Infrastructure Data Validation and Certification Server Protocols"">RFC3029</a>]
5 id-ad-caRepository [<a href="./rfc3280" title=""Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile"">RFC3280</a>]
6 id-ad-http-certs [<a href="./rfc4387" title=""Internet X.509 Public Key Infrastructure Operational Protocols: Certificate Store Access via HTTP"">RFC4387</a>]
7 id-ad-http-crls [<a href="./rfc4387" title=""Internet X.509 Public Key Infrastructure Operational Protocols: Certificate Store Access via HTTP"">RFC4387</a>]
8 id-ad-xkms Reserved and Obsolete
9 id-ad-signedObjectRepository Reserved and Obsolete
10 id-ad-rpkiManifest [<a href="./rfc6487" title=""A Profile for X.509 PKIX Resource Certificates"">RFC6487</a>]
11 id-ad-signedObject [<a href="./rfc6487" title=""A Profile for X.509 PKIX Resource Certificates"">RFC6487</a>]
12 id-ad-cmc [<a href="./rfc6402" title=""Certificate Management over CMS (CMC) Updates"">RFC6402</a>]
Note: id-ad-ocsp is also known as id-pkix-ocsp.
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="grey">Housley Informational [Page 23]</span><span id="page-24" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h3"><a class="selflink" id="section-3.34" href="#section-3.34">3.34</a>. "SMI Security for PKIX Online Certificate Status Protocol (OCSP)"</span>
<span class="h3"> Registry</span>
Within the SMI-numbers registry, an "SMI Security for PKIX Online
Certificate Status Protocol (OCSP) (1.3.6.1.5.5.7.48.1)" table with
three columns has been added:
Decimal Description References
------- ------------------------------ ----------
1 id-pkix-ocsp-basic [<a href="./rfc2560" title=""X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP"">RFC2560</a>]
2 id-pkix-ocsp-nonce [<a href="./rfc2560" title=""X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP"">RFC2560</a>]
3 id-pkix-ocsp-crl [<a href="./rfc2560" title=""X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP"">RFC2560</a>]
4 id-pkix-ocsp-response [<a href="./rfc2560" title=""X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP"">RFC2560</a>]
5 id-pkix-ocsp-nocheck [<a href="./rfc2560" title=""X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP"">RFC2560</a>]
6 id-pkix-ocsp-archive-cutoff [<a href="./rfc2560" title=""X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP"">RFC2560</a>]
7 id-pkix-ocsp-service-locator [<a href="./rfc2560" title=""X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP"">RFC2560</a>]
8 id-pkix-ocsp-pref-sig-algs [<a href="./rfc6277" title=""Online Certificate Status Protocol Algorithm Agility"">RFC6277</a>]
9 id-pkix-ocsp-extended-revoke [<a href="./rfc6960" title=""X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP"">RFC6960</a>]
Future updates to this table are to be made according to the
Specification Required policy as defined in [<a href="./rfc5226" title="">RFC5226</a>].
<span class="h2"><a class="selflink" id="section-4" href="#section-4">4</a>. Security Considerations</span>
This document populates an IANA registry, and it raises no new
security considerations. The protocols that specify these values
include the security considerations associated with their usage.
The id-pe-nsa certificate extension should not appear in any
certificate that is used on the public Internet.
<span class="grey">Housley Informational [Page 24]</span><span id="page-25" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
<span class="h2"><a class="selflink" id="section-5" href="#section-5">5</a>. References</span>
<span class="h3"><a class="selflink" id="section-5.1" href="#section-5.1">5.1</a>. Normative References</span>
[<a id="ref-ASN1-08">ASN1-08</a>] International Telecommunication Union, "Abstract Syntax
Notation One (ASN.1): Specification of basic notation",
ITU-T Recommendation X.680, November 2008.
[<a id="ref-ASN1-88">ASN1-88</a>] International Telephone and Telegraph Consultative
Committee, "Specification of Abstract Syntax Notation One
(ASN.1)", CCITT Recommendation X.208, 1988.
[<a id="ref-ASN1-97">ASN1-97</a>] International Telecommunication Union, "Abstract Syntax
Notation One (ASN.1): Specification of basic notation",
ITU-T Recommendation X.680, 1997.
[<a id="ref-RFC5226">RFC5226</a>] Narten, T. and H. Alvestrand, "Guidelines for Writing an
IANA Considerations Section in RFCs", <a href="https://www.rfc-editor.org/bcp/bcp26">BCP 26</a>, <a href="./rfc5226">RFC 5226</a>,
May 2008.
<span class="h3"><a class="selflink" id="section-5.2" href="#section-5.2">5.2</a>. Informative References</span>
[<a id="ref-Err3860">Err3860</a>] RFC Errata, Errata ID 3860, <a href="./rfc6402">RFC 6402</a>,
<<a href="https://www.rfc-editor.org/">http://www.rfc-editor.org/</a>>.
[<a id="ref-Abley">Abley</a>] Abley, J., Schlyter, J., and G. Bailey, "DNSSEC Trust
Anchor Publication for the Root Zone", Work in Progress,
June 2014.
[<a id="ref-BGPSEC">BGPSEC</a>] Reynolds, M., Turner, S., and S. Kent, "A Profile for
BGPSEC Router Certificates, Certificate Revocation Lists,
and Certification Requests", Work in Progress, March 2014.
[<a id="ref-RFC2459">RFC2459</a>] Housley, R., Ford, W., Polk, W., and D. Solo, "Internet
X.509 Public Key Infrastructure Certificate and CRL
Profile", <a href="./rfc2459">RFC 2459</a>, January 1999.
[<a id="ref-RFC2510">RFC2510</a>] Adams, C. and S. Farrell, "Internet X.509 Public Key
Infrastructure Certificate Management Protocols",
<a href="./rfc2510">RFC 2510</a>, March 1999.
[<a id="ref-RFC2511">RFC2511</a>] Myers, M., Adams, C., Solo, D., and D. Kemp, "Internet
X.509 Certificate Request Message Format", <a href="./rfc2511">RFC 2511</a>,
March 1999.
<span class="grey">Housley Informational [Page 25]</span><span id="page-26" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
[<a id="ref-RFC2528">RFC2528</a>] Housley, R. and W. Polk, "Internet X.509 Public Key
Infrastructure Representation of Key Exchange Algorithm
(KEA) Keys in Internet X.509 Public Key Infrastructure
Certificates", <a href="./rfc2528">RFC 2528</a>, March 1999.
[<a id="ref-RFC2560">RFC2560</a>] Myers, M., Ankney, R., Malpani, A., Galperin, S., and C.
Adams, "X.509 Internet Public Key Infrastructure Online
Certificate Status Protocol - OCSP", <a href="./rfc2560">RFC 2560</a>, June 1999.
[<a id="ref-RFC2797">RFC2797</a>] Myers, M., Liu, X., Schaad, J., and J. Weinstein,
"Certificate Management Messages over CMS", <a href="./rfc2797">RFC 2797</a>,
April 2000.
[<a id="ref-RFC2875">RFC2875</a>] Prafullchandra, H. and J. Schaad, "Diffie-Hellman
Proof-of-Possession Algorithms", <a href="./rfc2875">RFC 2875</a>, July 2000.
[<a id="ref-RFC3029">RFC3029</a>] Adams, C., Sylvester, P., Zolotarev, M., and R.
Zuccherato, "Internet X.509 Public Key Infrastructure Data
Validation and Certification Server Protocols", <a href="./rfc3029">RFC 3029</a>,
February 2001.
[<a id="ref-RFC3039">RFC3039</a>] Santesson, S., Polk, W., Barzin, P., and M. Nystrom,
"Internet X.509 Public Key Infrastructure Qualified
Certificates Profile", <a href="./rfc3039">RFC 3039</a>, January 2001.
[<a id="ref-RFC3161">RFC3161</a>] Adams, C., Cain, P., Pinkas, D., and R. Zuccherato,
"Internet X.509 Public Key Infrastructure Time-Stamp
Protocol (TSP)", <a href="./rfc3161">RFC 3161</a>, August 2001.
[<a id="ref-RFC3279">RFC3279</a>] Bassham, L., Polk, W., and R. Housley, "Algorithms and
Identifiers for the Internet X.509 Public Key
Infrastructure Certificate and Certificate Revocation List
(CRL) Profile", <a href="./rfc3279">RFC 3279</a>, April 2002.
[<a id="ref-RFC3280">RFC3280</a>] Housley, R., Polk, W., Ford, W., and D. Solo, "Internet
X.509 Public Key Infrastructure Certificate and
Certificate Revocation List (CRL) Profile", <a href="./rfc3280">RFC 3280</a>,
April 2002.
[<a id="ref-RFC3281">RFC3281</a>] Farrell, S. and R. Housley, "An Internet Attribute
Certificate Profile for Authorization", <a href="./rfc3281">RFC 3281</a>,
April 2002.
[<a id="ref-RFC3709">RFC3709</a>] Santesson, S., Housley, R., and T. Freeman, "Internet
X.509 Public Key Infrastructure: Logotypes in X.509
Certificates", <a href="./rfc3709">RFC 3709</a>, February 2004.
<span class="grey">Housley Informational [Page 26]</span><span id="page-27" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
[<a id="ref-RFC3739">RFC3739</a>] Santesson, S., Nystrom, M., and T. Polk, "Internet X.509
Public Key Infrastructure: Qualified Certificates
Profile", <a href="./rfc3739">RFC 3739</a>, March 2004.
[<a id="ref-RFC3770">RFC3770</a>] Housley, R. and T. Moore, "Certificate Extensions and
Attributes Supporting Authentication in Point-to-Point
Protocol (PPP) and Wireless Local Area Networks (WLAN)",
<a href="./rfc3770">RFC 3770</a>, May 2004.
[<a id="ref-RFC3779">RFC3779</a>] Lynn, C., Kent, S., and K. Seo, "X.509 Extensions for IP
Addresses and AS Identifiers", <a href="./rfc3779">RFC 3779</a>, June 2004.
[<a id="ref-RFC3820">RFC3820</a>] Tuecke, S., Welch, V., Engert, D., Pearlman, L., and M.
Thompson, "Internet X.509 Public Key Infrastructure (PKI)
Proxy Certificate Profile", <a href="./rfc3820">RFC 3820</a>, June 2004.
[<a id="ref-RFC3920">RFC3920</a>] Saint-Andre, P., Ed., "Extensible Messaging and Presence
Protocol (XMPP): Core", <a href="./rfc3920">RFC 3920</a>, October 2004.
[<a id="ref-RFC4043">RFC4043</a>] Pinkas, D. and T. Gindin, "Internet X.509 Public Key
Infrastructure Permanent Identifier", <a href="./rfc4043">RFC 4043</a>, May 2005.
[<a id="ref-RFC4055">RFC4055</a>] Schaad, J., Kaliski, B., and R. Housley, "Additional
Algorithms and Identifiers for RSA Cryptography for use in
the Internet X.509 Public Key Infrastructure Certificate
and Certificate Revocation List (CRL) Profile", <a href="./rfc4055">RFC 4055</a>,
June 2005.
[<a id="ref-RFC4059">RFC4059</a>] Linsenbardt, D., Pontius, S., and A. Sturgeon, "Internet
X.509 Public Key Infrastructure Warranty Certificate
Extension", <a href="./rfc4059">RFC 4059</a>, May 2005.
[<a id="ref-RFC4108">RFC4108</a>] Housley, R., "Using Cryptographic Message Syntax (CMS) to
Protect Firmware Packages", <a href="./rfc4108">RFC 4108</a>, August 2005.
[<a id="ref-RFC4210">RFC4210</a>] Adams, C., Farrell, S., Kause, T., and T. Mononen,
"Internet X.509 Public Key Infrastructure Certificate
Management Protocol (CMP)", <a href="./rfc4210">RFC 4210</a>, September 2005.
[<a id="ref-RFC4306">RFC4306</a>] Kaufman, C., Ed., "Internet Key Exchange (IKEv2)
Protocol", <a href="./rfc4306">RFC 4306</a>, December 2005.
[<a id="ref-RFC4334">RFC4334</a>] Housley, R. and T. Moore, "Certificate Extensions and
Attributes Supporting Authentication in Point-to-Point
Protocol (PPP) and Wireless Local Area Networks (WLAN)",
<a href="./rfc4334">RFC 4334</a>, February 2006.
<span class="grey">Housley Informational [Page 27]</span><span id="page-28" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
[<a id="ref-RFC4387">RFC4387</a>] Gutmann, P., Ed., "Internet X.509 Public Key
Infrastructure Operational Protocols: Certificate Store
Access via HTTP", <a href="./rfc4387">RFC 4387</a>, February 2006.
[<a id="ref-RFC4476">RFC4476</a>] Francis, C. and D. Pinkas, "Attribute Certificate (AC)
Policies Extension", <a href="./rfc4476">RFC 4476</a>, May 2006.
[<a id="ref-RFC4683">RFC4683</a>] Park, J., Lee, J., . Lee, H., Park, S., and T. Polk,
"Internet X.509 Public Key Infrastructure Subject
Identification Method (SIM)", <a href="./rfc4683">RFC 4683</a>, October 2006.
[<a id="ref-RFC4945">RFC4945</a>] Korver, B., "The Internet IP Security PKI Profile of
IKEv1/ISAKMP, IKEv2, and PKIX", <a href="./rfc4945">RFC 4945</a>, August 2007.
[<a id="ref-RFC4985">RFC4985</a>] Santesson, S., "Internet X.509 Public Key Infrastructure
Subject Alternative Name for Expression of Service Name",
<a href="./rfc4985">RFC 4985</a>, August 2007.
[<a id="ref-RFC5055">RFC5055</a>] Freeman, T., Housley, R., Malpani, A., Cooper, D., and W.
Polk, "Server-Based Certificate Validation Protocol
(SCVP)", <a href="./rfc5055">RFC 5055</a>, December 2007.
[<a id="ref-RFC5272">RFC5272</a>] Schaad, J. and M. Myers, "Certificate Management over CMS
(CMC)", <a href="./rfc5272">RFC 5272</a>, June 2008.
[<a id="ref-RFC5275">RFC5275</a>] Turner, S., "CMS Symmetric Key Management and
Distribution", <a href="./rfc5275">RFC 5275</a>, June 2008.
[<a id="ref-RFC5276">RFC5276</a>] Wallace, C., "Using the Server-Based Certificate
Validation Protocol (SCVP) to Convey Long-Term Evidence
Records", <a href="./rfc5276">RFC 5276</a>, August 2008.
[<a id="ref-RFC5415">RFC5415</a>] Calhoun, P., Ed., Montemurro, M., Ed., and D. Stanley,
Ed., "Control And Provisioning of Wireless Access Points
(CAPWAP) Protocol Specification", <a href="./rfc5415">RFC 5415</a>, March 2009.
[<a id="ref-RFC5480">RFC5480</a>] Turner, S., Brown, D., Yiu, K., Housley, R., and T. Polk,
"Elliptic Curve Cryptography Subject Public Key
Information", <a href="./rfc5480">RFC 5480</a>, March 2009.
[<a id="ref-RFC5697">RFC5697</a>] Farrell, S., "Other Certificates Extension", <a href="./rfc5697">RFC 5697</a>,
November 2009.
[<a id="ref-RFC5755">RFC5755</a>] Farrell, S., Housley, R., and S. Turner, "An Internet
Attribute Certificate Profile for Authorization",
<a href="./rfc5755">RFC 5755</a>, January 2010.
<span class="grey">Housley Informational [Page 28]</span><span id="page-29" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
[<a id="ref-RFC5912">RFC5912</a>] Hoffman, P. and J. Schaad, "New ASN.1 Modules for the
Public Key Infrastructure Using X.509 (PKIX)", <a href="./rfc5912">RFC 5912</a>,
June 2010.
[<a id="ref-RFC5913">RFC5913</a>] Turner, S. and S. Chokhani, "Clearance Attribute and
Authority Clearance Constraints Certificate Extension",
<a href="./rfc5913">RFC 5913</a>, June 2010.
[<a id="ref-RFC5915">RFC5915</a>] Turner, S. and D. Brown, "Elliptic Curve Private Key
Structure", <a href="./rfc5915">RFC 5915</a>, June 2010.
[<a id="ref-RFC5924">RFC5924</a>] Lawrence, S. and V. Gurbani, "Extended Key Usage (EKU) for
Session Initiation Protocol (SIP) X.509 Certificates",
<a href="./rfc5924">RFC 5924</a>, June 2010.
[<a id="ref-RFC5934">RFC5934</a>] Housley, R., Ashmore, S., and C. Wallace, "Trust Anchor
Management Protocol (TAMP)", <a href="./rfc5934">RFC 5934</a>, August 2010.
[<a id="ref-RFC5940">RFC5940</a>] Turner, S. and R. Housley, "Additional Cryptographic
Message Syntax (CMS) Revocation Information Choices",
<a href="./rfc5940">RFC 5940</a>, August 2010.
[<a id="ref-RFC6010">RFC6010</a>] Housley, R., Ashmore, S., and C. Wallace, "Cryptographic
Message Syntax (CMS) Content Constraints Extension",
<a href="./rfc6010">RFC 6010</a>, September 2010.
[<a id="ref-RFC6170">RFC6170</a>] Santesson, S., Housley, R., Bajaj, S., and L. Rosenthol,
"Internet X.509 Public Key Infrastructure -- Certificate
Image", <a href="./rfc6170">RFC 6170</a>, May 2011.
[<a id="ref-RFC6187">RFC6187</a>] Igoe, K. and D. Stebila, "X.509v3 Certificates for Secure
Shell Authentication", <a href="./rfc6187">RFC 6187</a>, March 2011.
[<a id="ref-RFC6268">RFC6268</a>] Schaad, J. and S. Turner, "Additional New ASN.1 Modules
for the Cryptographic Message Syntax (CMS) and the Public
Key Infrastructure Using X.509 (PKIX)", <a href="./rfc6268">RFC 6268</a>,
July 2011.
[<a id="ref-RFC6277">RFC6277</a>] Santesson, S. and P. Hallam-Baker, "Online Certificate
Status Protocol Algorithm Agility", <a href="./rfc6277">RFC 6277</a>, June 2011.
[<a id="ref-RFC6402">RFC6402</a>] Schaad, J., "Certificate Management over CMS (CMC)
Updates", <a href="./rfc6402">RFC 6402</a>, November 2011.
[<a id="ref-RFC6484">RFC6484</a>] Kent, S., Kong, D., Seo, K., and R. Watro, "Certificate
Policy (CP) for the Resource Public Key Infrastructure
(RPKI)", <a href="https://www.rfc-editor.org/bcp/bcp173">BCP 173</a>, <a href="./rfc6484">RFC 6484</a>, February 2012.
<span class="grey">Housley Informational [Page 29]</span><span id="page-30" ></span>
<span class="grey"><a href="./rfc7299">RFC 7299</a> PKIX OID Registry July 2014</span>
[<a id="ref-RFC6487">RFC6487</a>] Huston, G., Michaelson, G., and R. Loomans, "A Profile for
X.509 PKIX Resource Certificates", <a href="./rfc6487">RFC 6487</a>,
February 2012.
[<a id="ref-RFC6494">RFC6494</a>] Gagliano, R., Krishnan, S., and A. Kukec, "Certificate
Profile and Certificate Management for SEcure Neighbor
Discovery (SEND)", <a href="./rfc6494">RFC 6494</a>, February 2012.
[<a id="ref-RFC6664">RFC6664</a>] Schaad, J., "S/MIME Capabilities for Public Key
Definitions", <a href="./rfc6664">RFC 6664</a>, July 2012.
[<a id="ref-RFC6955">RFC6955</a>] Schaad, J. and H. Prafullchandra, "Diffie-Hellman
Proof-of-Possession Algorithms", <a href="./rfc6955">RFC 6955</a>, May 2013.
[<a id="ref-RFC6960">RFC6960</a>] Santesson, S., Myers, M., Ankney, R., Malpani, A.,
Galperin, S., and C. Adams, "X.509 Internet Public Key
Infrastructure Online Certificate Status Protocol - OCSP",
<a href="./rfc6960">RFC 6960</a>, June 2013.
[<a id="ref-RFC7169">RFC7169</a>] Turner, S., "The NSA (No Secrecy Afforded) Certificate
Extension", <a href="./rfc7169">RFC 7169</a>, April 1 2014.
[<a id="ref-RFC7229">RFC7229</a>] Housley, R., "Object Identifiers for Test Certificate
Policies", <a href="./rfc7229">RFC 7229</a>, May 2014.
Acknowledgements
Many thanks to Lynne Bartholomew, David Cooper, Jim Schaad, and Sean
Turner for their careful review and comments.
Author's Address
Russ Housley
918 Spring Knoll Drive
Herndon, VA 20170
USA
EMail: [email protected]
Housley Informational [Page 30]
Annotations
Select text to annotate