Table of Contents
Advertisement
Standard X.509 v3 CRL Extensions
•
deltaCRLIndicator (page 363)
•
issuerAltName (page 363)
•
issuingDistributionPoint (page 364)
authorityKeyIdentifier
OID
2.5.29.35
Reference
http://www.ietf.org/rfc/rfc2459.txt
Discussion
The Authority Key Identifier extension for a CRL identifies the public key
corresponding to the private key used to sign the CRL. For details, see the
discussion under certificate extensions at authorityKeyIdentifier.
CMS Version Support
Refer to "AuthorityKeyIdentifier Rule" on page 283.
•
CMS 4.1: Not supported
•
CMS 4.2: Supported
•
CMS 4.2-SP2: Supported
CRLNumber
OID
2.5.29.20
Reference
http://www.ietf.org/rfc/rfc2459.txt
Criticality
This extension must not be critical.
Discussion
The CRL Number extension specifies a sequential number for each CRL issued by a
CA. It allows users to easily determine when a particular CRL supersedes another
CRL.
PKIX requires that all CRLs have this extension.
362
Netscape Certificate Management System Plug-ins Guide • October 2001
5.2.1
5.2.3
Advertisement
Table of Contents
