OID reference

certificateExtension

2.5.29

Description

Certificate extensions

Full description and source information

Identification

Identifier and names

Parent
2.5 (ds)
Node code
29
Node names
  • certificateExtension
  • id-ce
Numeric OID
2.5.29
URN notation
urn:oid:2.5.29
ASN.1, OID-IRI and named path variants
ASN.1 notation

{2 5 29}

  • {joint-iso-itu-t(2) ds(5) certificateExtension(29)}
  • {joint-iso-itu-t(2) ds(5) id-ce(29)}
  • {joint-iso-ccitt(2) ds(5) certificateExtension(29)}
  • {joint-iso-ccitt(2) ds(5) id-ce(29)}
OID-IRI notation
  • /2/5/29
  • /Joint-ISO-ITU-T/5/29
Named path variants
  • /joint-iso-itu-t/ds/certificateExtension
  • /joint-iso-itu-t/ds/id-ce
  • /joint-iso-ccitt/ds/certificateExtension
  • /joint-iso-ccitt/ds/id-ce

Practical context

Documented protocol requirements

These statements apply to the indicated protocol and document; other contexts can have different requirements.

RFC 3281 · References · Section 10

Literal namespace and algorithm references from this RFC edition; the cited section specifies their protocol role.

RFC 5755 · Object Identifiers · Section A

Literal namespace and value references from this RFC edition; the cited section preserves their protocol role.

Available source records contain 4 distinct definitions; some records may not include a definition.

Show 4 published definitions

id-ce · unspecified

id-ce OBJECT IDENTIFIER  ::=  {joint-iso-ccitt(2) ds(5) 29}

id-ce · unspecified

id-ce   OBJECT IDENTIFIER ::= { joint-iso-ccitt(2) ds(5) 29 }

certificateExtension · unspecified

certificateExtension ID ::= {ds  29}

id-ce · unspecified

id-ce ID ::= certificateExtension

Meaning

Descriptions

1 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Evidence

Source records

3 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Definitions without a descriptionITU official formal descriptions, RFC Editor3 records · 24 sources
id-ce · unspecifiedITU official formal descriptions, RFC Editor8 sources

Status in source: unspecified.

Names: id-ce

Technical details
{
  "smi_kind": "OBJECT IDENTIFIER",
  "definition": [
    "id-ce",
    "OBJECT",
    "IDENTIFIER",
    "::=",
    "{",
    "joint-iso-ccitt",
    "(",
    "2",
    ")",
    "ds",
    "(",
    "5",
    ")",
    "29",
    "}"
  ]
}
certificateExtension · unspecifiedITU official formal descriptions8 sources

Status in source: unspecified.

Names: certificateExtension

Technical details
{
  "smi_kind": "OBJECT IDENTIFIER",
  "definition": [
    "certificateExtension",
    "ID",
    "::=",
    "{",
    "ds",
    "29",
    "}"
  ]
}
id-ce · unspecifiedITU official formal descriptions8 sources

Status in source: unspecified.

Names: id-ce

Technical details
{
  "smi_kind": "OBJECT IDENTIFIER",
  "definition": [
    "id-ce",
    "ID",
    "::=",
    "certificateExtension"
  ]
}

Registration

Registration authorities

First Registration Authority (inferred from ancestor 2.5)

Hoyt Kesterson & R. Exner

Current Registration Authority (inferred from ancestor 2)

ITU-T SG 17 & ISO/IEC JTC 1/SC 6

Direct children (75)

OIDNameDirect childrenDescendantsDescription
2.5.29.1 authorityKeyIdentifier00 X.509 old Authority Key Identifier

Deprecated, use {2 5 29 35} instead
2.5.29.2 keyAttributes00 Obsolete
2.5.29.3 certificatePolicies00 Certificate policies (obsolete but can be found in some VeriSign-issued certificates)
2.5.29.4 keyUsageRestriction00 Obsolete
2.5.29.5 policyMapping00 Obsolete
2.5.29.6 subtreesConstraint00 Obsolete
2.5.29.7 subjectAltName00 Obsolete
2.5.29.8 issuerAltName00 Obsolete
2.5.29.9 subjectDirectoryAttributes, id-ce-subjectDirectoryAttributes, ext-SubjectDirectoryAttributes22 Subject directory attributes certificate extension
2.5.29.10 basicConstraints00 X.509 id-ce (deprecated)
2.5.29.11 1100 Obsolete
2.5.29.12 1200 Obsolete
2.5.29.13 1300 Obsolete
2.5.29.14 subjectKeyIdentifier, id-ce-subjectKeyIdentifier, ext-SubjectKeyIdentifier22 Subject key identifier.
2.5.29.15 keyUsage, id-ce-keyUsage, ext-KeyUsage22 Key usage.
2.5.29.16 privateKeyUsagePeriod, id-ce-privateKeyUsagePeriod, ext-PrivateKeyUsagePeriod22 Private key usage period.
2.5.29.17 subjectAltName, id-ce-subjectAltName, ext-SubjectAltName22 Subject alternative name.
2.5.29.18 issuerAltName, id-ce-issuerAltName, ext-IssuerAltName22 Issuer alternative name.
2.5.29.19 basicConstraints, id-ce-basicConstraints, ext-BasicConstraints22 Basic constraints.
2.5.29.20 cRLNumber, id-ce-cRLNumber, ext-CRLNumber22 CRL (Certificate Revocation List) number.
2.5.29.21 reasonCode, id-ce-reasonCode, id-ce-cRLReasons, ext-CRLReason, id-ce-cRLReason22 Reason code.
2.5.29.22 expirationDate00 Obsolete
2.5.29.23 instructionCode, id-ce-instructionCode, id-ce-holdInstructionCode, holdInstructionCode, ext-HoldInstructionCode22 Hold instruction code
2.5.29.24 invalidityDate, id-ce-invalidityDate, ext-InvalidityDate22 Invalidity date.
2.5.29.25 cRLDistributionPoints00 Obsolete
2.5.29.26 issuingDistributionPoint00 Obsolete
2.5.29.27 deltaCRLIndicator, id-ce-deltaCRLIndicator, ext-DeltaCRLIndicator22 Certificate Revocation List indicator.
2.5.29.28 issuingDistributionPoint, id-ce-issuingDistributionPoint, ext-IssuingDistributionPoint22 Issuing distribution point.
2.5.29.29 certificateIssuer, id-ce-certificateIssuer, ext-CertificateIssuer22 Certificate issuer.
2.5.29.30 nameConstraints, id-ce-nameConstraints, ext-NameConstraints22 Name constraints.
2.5.29.31 cRLDistributionPoints, id-ce-cRLDistributionPoints, ext-CRLDistributionPoints22 Certificate Revocation List distribution points.
2.5.29.32 certificatePolicies, id-ce-certificatePolicies, ext-CertificatePolicies33 Certificate policies
2.5.29.33 policyMappings, id-ce-policyMappings, ext-PolicyMappings22 Policy mappings.
2.5.29.34 policyConstraints00 X.509 id-ce

Deprecated, use {2 5 29 36} instead
2.5.29.35 authorityKeyIdentifier, id-ce-authorityKeyIdentifier, ext-AuthorityKeyIdentifier22 Authority key identifier.
2.5.29.36 policyConstraints, id-ce-policyConstraints, ext-PolicyConstraints22 Policy constraints.
2.5.29.37 extKeyUsage, id-ce-extKeyUsage, ext-ExtKeyUsage33 Certificate extension: "extKeyUsage" (Extended key usage)
2.5.29.38 authorityAttributeIdentifier, id-ce-authorityAttributeIdentifier22 Certificate extension: "authorityAttributeIdentifier"
2.5.29.39 roleSpecCertIdentifier, id-ce-roleSpecCertIdentifier22 Certificate extension: "roleSpecCertIdentifier" (Role specification certificate identifier extension)
2.5.29.40 cRLStreamIdentifier, id-ce-cRLStreamIdentifier22 Certificate extension: "cRLStreamIdentifier"
2.5.29.41 basicAttConstraints, id-ce-basicAttConstraints22 Certificate extension: "basicAttConstraints"
2.5.29.42 delegatedNameConstraints, id-ce-delegatedNameConstraints22 Certificate extension: "delegatedNameConstraints"
2.5.29.43 timeSpecification, id-ce-timeSpecification22 Certificate extension: "timeSpecification"
2.5.29.44 cRLScope, crlScope, id-ce-cRLScope22 Certificate extension: "cRLScope"
2.5.29.45 statusReferrals, id-ce-statusReferrals22 Certificate extension: "statusReferrals"
2.5.29.46 freshestCRL, id-ce-freshestCRL, ext-FreshestCRL22 Certificate extension: "freshestCRL"
2.5.29.47 orderedList, id-ce-orderedList22 Certificate extension: "orderedList"
2.5.29.48 attributeDescriptor, id-ce-attributeDescriptor22 Certificate extension: "attributeDescriptor"
2.5.29.49 userNotice, id-ce-userNotice22 Certificate extension: "userNotice"
2.5.29.50 sOAIdentifier, id-ce-sOAIdentifier22 Certificate extension: "sOAIdentifier"

Siblings (41)

OIDNameDirect childrenDescendantsDescription
2.5.1 module49298 ASN.1 modules
2.5.2 serviceElement00 Directory service element.
2.5.3 applicationContext, id-ac1632 Application context.
2.5.4 attributeType, id-at107193 Attribute type
2.5.5 attributeSyntaxVendor, attributeSyntax, dummyCurv1818 Attribute syntax vendor
2.5.6 objectClass, id-oc, objectClass-oid4547 Information object classes
2.5.7 attribute-set00 X.500 attribute sets
2.5.8 algorithm47 Enveloped digital signature algorithm
2.5.9 abstractSyntax, id-as3333 Abstract syntaxes
2.5.12 dsaOperationalAttribute, id-doa99 DSA (Directory System Agent) operational attributes
2.5.13 matchingRule, id-mr7777 Matching rules
2.5.14 knowledgeMatchingRule, id-kmr44 Knowledge matching rules
2.5.15 nameForm, id-nf2121 Nname forms
2.5.16 group00 Group.
2.5.17 subentry, id-sc66 Subentries
2.5.18 operationalAttributeType, id-oa4949 Operational attribute types
2.5.19 operationalBinding, id-ob33 Operational bindings
2.5.20 schemaObjectClass, id-soc33 Schema object classes
2.5.21 schemaOperationalAttribute, id-soa1313 Schema operational attributes
2.5.22 2200 Unused
2.5.23 administrativeRoles, id-ar99 Administrative roles.
2.5.24 accessControlAttribute, id-aca44 Access control attributes
2.5.25 rosObject, id-rosObject99 ROS (Remote Operation Service) objects
2.5.26 contract, id-contract55 Contracts
2.5.27 package, id-package1313 Packages
2.5.28 accessControlSchemes, id-acScheme55 Access control schemes
2.5.30 managementObject, id-mgt6243 Management objects
2.5.31 attributeValueContext, id-avc66 Attribute value contexts
2.5.32 securityExchange, id-se22 Security exchanges
2.5.33 idmProtocol, id-idm44 IDM Protocol
2.5.34 problem, id-pr3636 Problem definitions
2.5.35 notification, id-not1818 Notification attributes
2.5.36 matchingRestriction, id-mre00 Matching restriction
2.5.37 controlAttributeType, id-cat44 Control attribute type
2.5.38 keyPurposes, id-kp00 Key purposes
2.5.39 passwordQuality, id-pq44 Password quality
2.5.40 attributeSyntax, id-asx, id-ats2020 Attribute syntax
2.5.41 avRestriction, id-avr11
2.5.42 cmsContentType, id-cmsct2020
2.5.43 id-wrprot, wrapperProtocolType33
2.5.44 algorithm, id-algo, algorithms8122