Authoritykeyidentifier; Crlnumber - Netscape MANAGEMENT SYSTEM 6.0 - PLUG-IN Manual

authorityKeyIdentifier

OID
2.5.29.35
Reference
http://www.ietf.org/rfc/rfc2459.txt
Discussion
The Authority Key Identifier extension for a CRL identifies the public key
corresponding to the private key used to sign the CRL. For details, see the
discussion under certificate extensions at authorityKeyIdentifier.
CMS Version Support
Refer to "AuthorityKeyIdentifier Rule" on page 281.
• CMS 4.1: Not supported
• CMS 4.2: Supported
• CMS 4.2-SP2: Supported
• CMS 4.5: Supported
• CMS 6.0: Supported

CRLNumber

OID
2.5.29.20
Reference
http://www.ietf.org/rfc/rfc2459.txt
Criticality
This extension must not be critical.
Discussion
The CRL Number extension specifies a sequential number for each CRL issued by a
CA. It allows users to easily determine when a particular CRL supersedes another
CRL.
PKIX requires that all CRLs have this extension.
Standard X.509 v3 CRL Extensions
5.2.1
5.2.3
Appendix C Certificate and CRL Extensions 361