OID reference

id-ce-protRestrict

2.5.29.71

Identification

Identifier and names

Parent
2.5.29 (certificateExtension, id-ce)
Node code
71
Node names
  • id-ce-protRestrict
  • protRestrict
Category
X.509 extension
Declared ASN.1 value type
ProtRestriction (source)
Numeric OID
2.5.29.71
URN notation
urn:oid:2.5.29.71
ASN.1, OID-IRI and named path variants
ASN.1 notation

{2 5 29 71}

  • {joint-iso-itu-t(2) ds(5) certificateExtension(29) id-ce-protRestrict(71)}
  • {joint-iso-itu-t(2) ds(5) certificateExtension(29) protRestrict(71)}
  • {joint-iso-itu-t(2) ds(5) id-ce(29) id-ce-protRestrict(71)}
  • {joint-iso-itu-t(2) ds(5) id-ce(29) protRestrict(71)}
  • {joint-iso-ccitt(2) ds(5) certificateExtension(29) id-ce-protRestrict(71)}
  • {joint-iso-ccitt(2) ds(5) certificateExtension(29) protRestrict(71)}
  • {joint-iso-ccitt(2) ds(5) id-ce(29) id-ce-protRestrict(71)}
  • {joint-iso-ccitt(2) ds(5) id-ce(29) protRestrict(71)}
OID-IRI notation
  • /2/5/29/71
  • /Joint-ISO-ITU-T/5/29/71
Named path variants
  • /joint-iso-itu-t/ds/certificateExtension/id-ce-protRestrict
  • /joint-iso-itu-t/ds/certificateExtension/protRestrict
  • /joint-iso-itu-t/ds/id-ce/id-ce-protRestrict
  • /joint-iso-itu-t/ds/id-ce/protRestrict
  • /joint-iso-ccitt/ds/certificateExtension/id-ce-protRestrict
  • /joint-iso-ccitt/ds/certificateExtension/protRestrict
  • /joint-iso-ccitt/ds/id-ce/id-ce-protRestrict
  • /joint-iso-ccitt/ds/id-ce/protRestrict

Available source records contain 2 distinct definitions; some records may not include a definition.

Show 2 published definitions

id-ce-protRestrict · unspecified

id-ce-protRestrict                       OBJECT IDENTIFIER ::= {id-ce 71}

protRestrict · unspecified

protRestrict EXTENSION ::= {
  SYNTAX        ProtRestriction  
  IDENTIFIED BY id-ce-protRestrict }

Evidence

Source records

2 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Definitions without a descriptionITU official formal descriptions2 records · 2 sources
id-ce-protRestrict · unspecifiedITU official formal descriptions1 source

Status in source: unspecified.

Names: id-ce-protRestrict

Technical details
{
  "smi_kind": "OBJECT IDENTIFIER",
  "definition": [
    "id-ce-protRestrict",
    "OBJECT",
    "IDENTIFIER",
    "::=",
    "{",
    "id-ce",
    "71",
    "}"
  ]
}
protRestrict · unspecifiedITU official formal descriptions1 source

Status in source: unspecified.

Names: protRestrict

Technical details
{
  "smi_kind": "ASN.1 information object",
  "definition": [
    "protRestrict",
    "EXTENSION",
    "::=",
    "{",
    "SYNTAX",
    "ProtRestriction",
    "IDENTIFIED",
    "BY",
    "id-ce-protRestrict",
    "}"
  ]
}
  • ITU official formal descriptions · Official record

    Module: CertificateExtensions

    See published definition above

    Module imports
    {'UsefulDefinitions': ['id-at', 'id-ce', 'id-ldx', 'id-mr', 'ATTRIBUTE', 'Attribute', 'MATCHING-RULE', 'Name', 'RelativeDistinguishedName', 'SYNTAX-NAME', 'UnboundedDirectoryString'], 'AuthenticationFramework': ['AvlSerialNumber', 'CertificateSerialNumber', 'CertificateList', 'AlgorithmIdentifier', 'EXTENSION', 'Time', 'PolicyID', 'SupportedAlgorithms'], 'PkiPmiExternalDataTypes': ['ORAddress']}
    ASN.1 class source excerpt
    EXTENSION ::= CLASS {
  &id           OBJECT IDENTIFIER UNIQUE,
  &ExtnType }
WITH SYNTAX {
  SYNTAX        &ExtnType
  IDENTIFIED BY &id }

-- other PKI certificate constructs

Registration

Registration authorities

First Registration Authority (inferred from ancestor 2.5)

Hoyt Kesterson & R. Exner

Current Registration Authority (inferred from ancestor 2)

ITU-T SG 17 & ISO/IEC JTC 1/SC 6

Direct children (2)

OIDNameDirect childrenDescendantsDescription
2.5.29.71.1 a-protRestrict, id-ce-a-protRestrict00
2.5.29.71.2 id-asx-protRestrict00

Siblings (74)

OIDNameDirect childrenDescendantsDescription
2.5.29.1 authorityKeyIdentifier00 X.509 old Authority Key Identifier

Deprecated, use {2 5 29 35} instead
2.5.29.2 keyAttributes00 Obsolete
2.5.29.3 certificatePolicies00 Certificate policies (obsolete but can be found in some VeriSign-issued certificates)
2.5.29.4 keyUsageRestriction00 Obsolete
2.5.29.5 policyMapping00 Obsolete
2.5.29.6 subtreesConstraint00 Obsolete
2.5.29.7 subjectAltName00 Obsolete
2.5.29.8 issuerAltName00 Obsolete
2.5.29.9 subjectDirectoryAttributes, id-ce-subjectDirectoryAttributes, ext-SubjectDirectoryAttributes22 Subject directory attributes certificate extension
2.5.29.10 basicConstraints00 X.509 id-ce (deprecated)
2.5.29.11 1100 Obsolete
2.5.29.12 1200 Obsolete
2.5.29.13 1300 Obsolete
2.5.29.14 subjectKeyIdentifier, id-ce-subjectKeyIdentifier, ext-SubjectKeyIdentifier22 Subject key identifier.
2.5.29.15 keyUsage, id-ce-keyUsage, ext-KeyUsage22 Key usage.
2.5.29.16 privateKeyUsagePeriod, id-ce-privateKeyUsagePeriod, ext-PrivateKeyUsagePeriod22 Private key usage period.
2.5.29.17 subjectAltName, id-ce-subjectAltName, ext-SubjectAltName22 Subject alternative name.
2.5.29.18 issuerAltName, id-ce-issuerAltName, ext-IssuerAltName22 Issuer alternative name.
2.5.29.19 basicConstraints, id-ce-basicConstraints, ext-BasicConstraints22 Basic constraints.
2.5.29.20 cRLNumber, id-ce-cRLNumber, ext-CRLNumber22 CRL (Certificate Revocation List) number.
2.5.29.21 reasonCode, id-ce-reasonCode, id-ce-cRLReasons, ext-CRLReason, id-ce-cRLReason22 Reason code.
2.5.29.22 expirationDate00 Obsolete
2.5.29.23 instructionCode, id-ce-instructionCode, id-ce-holdInstructionCode, holdInstructionCode, ext-HoldInstructionCode22 Hold instruction code
2.5.29.24 invalidityDate, id-ce-invalidityDate, ext-InvalidityDate22 Invalidity date.
2.5.29.25 cRLDistributionPoints00 Obsolete
2.5.29.26 issuingDistributionPoint00 Obsolete
2.5.29.27 deltaCRLIndicator, id-ce-deltaCRLIndicator, ext-DeltaCRLIndicator22 Certificate Revocation List indicator.
2.5.29.28 issuingDistributionPoint, id-ce-issuingDistributionPoint, ext-IssuingDistributionPoint22 Issuing distribution point.
2.5.29.29 certificateIssuer, id-ce-certificateIssuer, ext-CertificateIssuer22 Certificate issuer.
2.5.29.30 nameConstraints, id-ce-nameConstraints, ext-NameConstraints22 Name constraints.
2.5.29.31 cRLDistributionPoints, id-ce-cRLDistributionPoints, ext-CRLDistributionPoints22 Certificate Revocation List distribution points.
2.5.29.32 certificatePolicies, id-ce-certificatePolicies, ext-CertificatePolicies33 Certificate policies
2.5.29.33 policyMappings, id-ce-policyMappings, ext-PolicyMappings22 Policy mappings.
2.5.29.34 policyConstraints00 X.509 id-ce

Deprecated, use {2 5 29 36} instead
2.5.29.35 authorityKeyIdentifier, id-ce-authorityKeyIdentifier, ext-AuthorityKeyIdentifier22 Authority key identifier.
2.5.29.36 policyConstraints, id-ce-policyConstraints, ext-PolicyConstraints22 Policy constraints.
2.5.29.37 extKeyUsage, id-ce-extKeyUsage, ext-ExtKeyUsage33 Certificate extension: "extKeyUsage" (Extended key usage)
2.5.29.38 authorityAttributeIdentifier, id-ce-authorityAttributeIdentifier22 Certificate extension: "authorityAttributeIdentifier"
2.5.29.39 roleSpecCertIdentifier, id-ce-roleSpecCertIdentifier22 Certificate extension: "roleSpecCertIdentifier" (Role specification certificate identifier extension)
2.5.29.40 cRLStreamIdentifier, id-ce-cRLStreamIdentifier22 Certificate extension: "cRLStreamIdentifier"
2.5.29.41 basicAttConstraints, id-ce-basicAttConstraints22 Certificate extension: "basicAttConstraints"
2.5.29.42 delegatedNameConstraints, id-ce-delegatedNameConstraints22 Certificate extension: "delegatedNameConstraints"
2.5.29.43 timeSpecification, id-ce-timeSpecification22 Certificate extension: "timeSpecification"
2.5.29.44 cRLScope, crlScope, id-ce-cRLScope22 Certificate extension: "cRLScope"
2.5.29.45 statusReferrals, id-ce-statusReferrals22 Certificate extension: "statusReferrals"
2.5.29.46 freshestCRL, id-ce-freshestCRL, ext-FreshestCRL22 Certificate extension: "freshestCRL"
2.5.29.47 orderedList, id-ce-orderedList22 Certificate extension: "orderedList"
2.5.29.48 attributeDescriptor, id-ce-attributeDescriptor22 Certificate extension: "attributeDescriptor"
2.5.29.49 userNotice, id-ce-userNotice22 Certificate extension: "userNotice"
2.5.29.50 sOAIdentifier, id-ce-sOAIdentifier22 Certificate extension: "sOAIdentifier"