Reference record for OID 1.3.6.1.5.5.7.48.1.5


parent
1.3.6.1.5.5.7.48.1 (ocsp)
node code
5
node name
no-check
dot oid
1.3.6.1.5.5.7.48.1.5
asn1 oid
  • {iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) ad(48) ocsp(1) no-check(5)}
  • {iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) ad(48) ocsp(1) no-check(5)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) ad(48) ocsp(1) no-check(5)}
  • iri oid
  • /iso/identified-organization/dod/internet/security/mechanisms/pkix/ad/ocsp/no-check
  • /iso/org/dod/internet/security/mechanisms/pkix/ad/ocsp/no-check
  • /iso/iso-identified-organization/dod/internet/security/mechanisms/pkix/ad/ocsp/no-check
  • iri by oid_info
    /ISO/Identified-Organization/6/1/5/5/7/48/1/5

    Description by oid_info

    OCSP No Check Extension

    4.2.2.2.1 Revocation Checking of an Authorized Responder

    Since an Authorized OCSP responder provides status information for one or more CAs, OCSP clients need to know how to check that an authorized responder's certificate has not been revoked. CAs may choose to deal with this problem in one of three ways:
    - A CA may specify that an OCSP client can trust a responder for the lifetime of the responder's certificate. The CA does so by including the extension id-pkix-ocsp-nocheck. This SHOULD be a non-critical extension. The value of the extension should be NULL. CAs issuing such a certificate should realized that a compromise of the responder's key, is as serious as the compromise of a CA key used to sign CRLs, at least for the validity period of this certificate. CA's may choose to issue this type of certificate with a very short lifetime and renew it frequently.

    id-pkix-ocsp-nocheck OBJECT IDENTIFIER ::= {id-pkix-ocsp 5}
    View at oid-info.com

    Information by oid_info

    Defined in RFC 2560

    First Registration Authority (recovered by parent 1.3.6.1.5.5.7)

    IETF PKIX Working group

    Current Registration Authority (recovered by parent 1.3.6.1.5.5.7)

    Internet Assigned Numbers Authority (IANA)

    Brothers (7)

    OIDNameSub childrenSub Nodes TotalDescription
    1.3.6.1.5.5.7.48.1.1 basic-response 0 0 OCSP Basic Response
    1.3.6.1.5.5.7.48.1.2 nonce-extension 0 0 OCSP Nonce Extension

    From RFC 2560:
    4.4.1 Nonce

    The nonce cryptographically binds a request and a response to prevent replay …
    1.3.6.1.5.5.7.48.1.3 crl 0 0 Certificate Revocation List (CRL) reference
    1.3.6.1.5.5.7.48.1.4 response 0 0 Response types understood by an Online Certificate Status Protocol (OCSP) client
    1.3.6.1.5.5.7.48.1.6 archive-cutoff 0 0 OCSP Archive Cutoff Extension
    1.3.6.1.5.5.7.48.1.7 service-locator 0 0 OCSP Service Locator Extension
    1.3.6.1.5.5.7.48.1.8 id-pkix-ocsp-pref-sig-algs 0 0 Client indication of preferred signature algorithms