Table of Contents
Advertisement
Standard X.509 v3 Certificate Extensions
Discussion
This extension, which is for CA certificates only, constrains path validation in two
ways. It can be used to prohibit policy mapping or to require that each certificate in
a path contain an acceptable policy identifier.
PKIX requires that, if present, this extension must never consist of a null sequence.
At least one of the two available fields must be present.
CMS Version Support
Refer to "PolicyConstraintsExt Plug-in Module" on page 222.
•
CMS 4.1: Not supported
•
CMS 4.2: Supported
•
CMS 4.2-SP2: Supported
Netscape Recommendations
Netscape products do not currently examine this extension.
Microsoft Recommendations
Microsoft products do not currently examine this extension.
policyMappings
OID
2.5.29.33
References
http://www.ietf.org/rfc/rfc2459.txt
Criticality
This extension must be noncritical.
Discussion
The Policy Mappings extension is used in CA certificates only. It lists one or more
pairs of OIDs used to indicate that the corresponding policies of one CA are
equivalent to policies of another CA. It may be useful in the context of
cross-certification.
This extension may be supported by CAs and/or applications.
CMS Version Support
Refer to "PolicyMappingsExt Plug-in Module" on page 225.
354
Netscape Certificate Management System Plug-ins Guide • October 2001
4.2.1.6
Advertisement
Table of Contents
