Standard X.509 V3 Crl Extensions; Extensions For Crls - Netscape MANAGEMENT SYSTEM 6.01 - PLUG-IN Manual

Standard X.509 v3 CRL Extensions

Extensions:
Identifier: Revocation Reason - 2.5.29.21
Extensions:
Identifier: Revocation Reason - 2.5.29.21
...
Standard X.509 v3 CRL Extensions
In addition to certificate extensions, the X.509 v3 proposed standard defines
extensions to CRLs, which provide methods for associating additional attributes
with Internet CRLs. These are of two kinds: extensions to the CRL itself, and
extensions to individual certificate entries in the CRL.
•

Extensions for CRLs

• CRL Entry Extensions
Extensions for CRLs
The sections that follow describe the CRL extension types that are defined as part
of the Internet X.509 v3 Public Key Infrastructure proposed standard, as of
September 1998.
These are the CRL extensions described in the sections that follow:
• authorityKeyIdentifier (page 361)
• CRLNumber (page 361)
• deltaCRLIndicator (page 362)
• issuerAltName (page 363)
• issuingDistributionPoint (page 363)
360 Netscape Certificate Management System Plug-Ins Guide • May 2002
Critical: no
Reason: Key_Compromise
Serial Number: 0x10
Revocation Date: Thursday, December 17, 1998 2:37:24 AM
Critical: no
Reason: Affiliation_Changed
Serial Number: 0xA
Revocation Date: Wednesday, November 25, 1998 5:11:18 AM