OID reference
1.3.6.1.5.5.7.1.24
Declares TLS features that a server presenting this certificate is expected to support.
Editorial summary based on RFC 7633 section 4.
Identification
{1 3 6 1 5 5 7 1 24}
Practical context
These statements apply to the indicated protocol and document; other contexts can have different requirements.
Certificate extension · TLS Feature · RFC 7633 §4 · Download source
Value: Features: a SEQUENCE OF INTEGER values identifying TLS extensions.
A common use is to advertise status_request for OCSP stapling, often called must-staple. RFC 7633 also permits other features and describes processing for both server and CA certificates.
Available source records contain 1 distinct definition; some records may not include a definition.
id-pe-tlsfeature OBJECT IDENTIFIER ::= { id-pe 24 }
Meaning
Identical descriptions are grouped. Different wording and device-specific notes are retained.
Description 1
TLS Features
Description 2
id-pe-tlsfeature
Evidence
Matching descriptions are grouped; open a group to compare definitions and supporting files.
Status in source: unspecified.
Names: id-pe-tlsfeature
{
"wire_encoding": {
"hex": "06 08 2b 06 01 05 05 07 01 18",
"form": "DER OBJECT IDENTIFIER or AlgorithmIdentifier",
"numeric_oid_verified": true
},
"protocol_mapping": {
"der": "06 08 2B 06 01 05 05 07 01 18",
"ext": "TLSFeatures",
"value": "38",
"registry": "c509-extensions"
}
}Status in source: unspecified.
{
"value": "24",
"description": "id-pe-tlsfeature"
}Status in source: unspecified.
Names: id-pe-tlsfeature
{
"smi_kind": "OBJECT IDENTIFIER",
"definition": [
"id-pe-tlsfeature",
"OBJECT",
"IDENTIFIER",
"::=",
"{",
"id-pe",
"24",
"}"
]
}Module: TLS-Feature-Module-2015
See published definition above
{'PKIX1Explicit-2009': ['id-pe'], 'PKIX-CommonTypes-2009': ['EXTENSION']}Registration
| OID | Name | Direct children | Descendants | Description |
|---|---|---|---|---|
| 1.3.6.1.5.5.7.1.1 | authorityInfoAccess, id-pe-authorityInfoAccess, ext-AuthorityInfoAccess | 0 | 0 | Certificate Authority Information Access |
| 1.3.6.1.5.5.7.1.2 | biometricInfo, id-pe-biometricInfo | 0 | 0 | biometricInfo x.509v3 certificate extension from RFC 3039 & RFC 3739 |
| 1.3.6.1.5.5.7.1.3 | qcStatements, id-pe-qcStatements | 0 | 0 | qcStatements x.509v3 certificate extension |
| 1.3.6.1.5.5.7.1.4 | auditIdentity, id-pe-ac-auditIdentity, ext-auditIdentity | 0 | 0 | PKIX private extension acAuditIdentity |
| 1.3.6.1.5.5.7.1.5 | 5 | 0 | 0 | PKIX private extension acTargeting |
| 1.3.6.1.5.5.7.1.6 | aaControls, id-pe-aaControls, ext-aaControls | 0 | 0 | AA Controls. During AC validation a relying party has to answer the question: is this AC issuer trusted to issue ACs containin… |
| 1.3.6.1.5.5.7.1.7 | 7, id-pe-ipAddrBlocks, id-pe-ipAddrBlock | 2 | 2 | PKIX private extension sbgp-ipAddrBlock |
| 1.3.6.1.5.5.7.1.8 | 8, id-pe-autonomousSysIds | 0 | 0 | PKIX private extension sbgp-autonomousSysNum |
| 1.3.6.1.5.5.7.1.9 | 9 | 0 | 0 | PKIX private extension sbgp-routerIdentifier |
| 1.3.6.1.5.5.7.1.10 | proxying, id-pe-ac-proxying, ext-ac-proxying | 0 | 0 | PKIX private extension acProxying |
| 1.3.6.1.5.5.7.1.11 | subjectInfoAccess, id-pe-subjectInfoAccess, ext-SubjectInfoAccessSyntax | 0 | 0 | PKIX private extension |
| 1.3.6.1.5.5.7.1.12 | id-pe-logotype, ext-logotype | 0 | 0 | |
| 1.3.6.1.5.5.7.1.13 | id-pe-wlanSSID | 0 | 0 | Wireless Local Area Network (LAN) Service Set IDentifier (SSID) |
| 1.3.6.1.5.5.7.1.14 | id-pe-proxyCertInfo | 0 | 0 | |
| 1.3.6.1.5.5.7.1.15 | 15, id-pe-acPolicies | 0 | 0 | id-pe-ac-policies |
| 1.3.6.1.5.5.7.1.16 | 16, id-pe-warranty-extn, id-pe-warranty | 0 | 0 | |
| 1.3.6.1.5.5.7.1.17 | 17 | 0 | 0 | id-pe-sim: obsolete |
| 1.3.6.1.5.5.7.1.18 | 18, id-pe-cmsContentConstraints | 0 | 0 | |
| 1.3.6.1.5.5.7.1.19 | 19, id-pe-otherCerts | 0 | 0 | |
| 1.3.6.1.5.5.7.1.20 | 20, id-pe-wrappedApexContinKey | 0 | 0 | |
| 1.3.6.1.5.5.7.1.21 | id-pe-clearanceConstraints, id-pe-authorityClearanceConstraints | 0 | 0 | |
| 1.3.6.1.5.5.7.1.22 | 22 | 0 | 0 | |
| 1.3.6.1.5.5.7.1.23 | nsa, id-pe-nsa | 0 | 0 | No Secrecy Afforded (NSA) Certificate Extension |
| 1.3.6.1.5.5.7.1.25 | securityInfo, id-pe-mud-url | 0 | 0 | ITU-T X.509v3 certificate private extension with security information. |
| 1.3.6.1.5.5.7.1.26 | id-pe-TNAuthList | 0 | 0 | |
| 1.3.6.1.5.5.7.1.27 | id-pe-JWTClaimConstraints | 0 | 0 | |
| 1.3.6.1.5.5.7.1.28 | id-pe-ipAddrBlocks-v2 | 0 | 0 | |
| 1.3.6.1.5.5.7.1.29 | id-pe-autonomousSysIds-v2, id-pe-autonomousSysIds | 0 | 0 | |
| 1.3.6.1.5.5.7.1.30 | id-pe-mudsigner | 0 | 0 | |
| 1.3.6.1.5.5.7.1.31 | id-pe-acmeIdentifier | 0 | 0 | |
| 1.3.6.1.5.5.7.1.32 | id-pe-masa-url, ext-MASAURL | 0 | 0 | |
| 1.3.6.1.5.5.7.1.33 | id-pe-eJWTClaimConstraints, ext-eJWTClaimConstraints | 0 | 0 | |
| 1.3.6.1.5.5.7.1.34 | id-pe-nftype, ext-NFType | 0 | 0 | |
| 1.3.6.1.5.5.7.1.35 | id-pe-cmw, ext-CMW | 0 | 0 | |
| 1.3.6.1.5.5.7.1.36 | id-pe-relatedCert, ext-relatedCertificate | 0 | 0 | |
| 1.3.6.1.5.5.7.1.37 | 37 | 0 | 0 | |
| 1.3.6.1.5.5.7.1.38 | 38 | 0 | 0 |