Standard X.509 V3 Certificate Extensions - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Standard X.509 v3 Certificate Extensions

Standard X.509 v3 Certificate Extensions
This section summarizes the extension types that are defined as part of the Internet
X.509 Version 3 standard, as of September 1998, and indicates which types are
recommended by the PKIX working group.
This section summarizes important information about each certificate. For
complete details, see both the X.509 v3 standard (available from the ITU) and the
Internet X.509 Public Key Infrastructure - Certificate and CRL Profile (RFC 2459),
available at . The descriptions of
http://www.ietf.org/rfc/rfc2459.txt
extensions reference the RFC and section number of the standard draft that
discusses the extension; the object identifier (OID) for each extensions is also
provided.
See the Netscape or Microsoft web sites for recommended and supported usage of
extension in these clients. For other clients, see their web sites for information.
Each extension in a certificate can be designated as critical or noncritical. A
certificate-using system, such as browser software, must reject the certificate if it
encounters a critical extension it does not recognize; however, a noncritical
extension can be ignored if it is not recognized.
CMS (CMS) version support is listed for each extension. "Supported" means that
the indicated version of CMS ships with built-in support for the extension via a
policy plug-in. "Not supported" means that the indicated version of CMS does not
ship a policy plug-in for the extension (although the extension can be used if a
custom plug-in is written).
authorityInfoAccess
OID
1.3.6.1.5.5.7.1.1
Criticality
This extension must be noncritical.
Discussion
The Authority Information Access extension indicates how and where to access
information about the issuer of the certificate. The extension contains an
and an field. The specifies (by an
accessMethod accessLocation accessMethod
OID) the type and format of information about the issuer found at the
.
accessLocation
Appendix G Certificate and CRL Extensions 723