OID reference

certificateExtension

2.5.29

Description

Certificate extensions

Full description and source information

Identification

Identifier and names

Parent
2.5 (ds)
Node code
29
Node names
  • certificateExtension
  • id-ce
Numeric OID
2.5.29
URN notation
urn:oid:2.5.29
ASN.1, OID-IRI and named path variants
ASN.1 notation

{2 5 29}

  • {joint-iso-itu-t(2) ds(5) certificateExtension(29)}
  • {joint-iso-itu-t(2) ds(5) id-ce(29)}
  • {joint-iso-ccitt(2) ds(5) certificateExtension(29)}
  • {joint-iso-ccitt(2) ds(5) id-ce(29)}
OID-IRI notation
  • /2/5/29
  • /Joint-ISO-ITU-T/5/29
Named path variants
  • /joint-iso-itu-t/ds/certificateExtension
  • /joint-iso-itu-t/ds/id-ce
  • /joint-iso-ccitt/ds/certificateExtension
  • /joint-iso-ccitt/ds/id-ce

Practical context

Documented protocol requirements

These statements apply to the indicated protocol and document; other contexts can have different requirements.

RFC 3281 · References · Section 10

Literal namespace and algorithm references from this RFC edition; the cited section specifies their protocol role.

RFC 5755 · Object Identifiers · Section A

Literal namespace and value references from this RFC edition; the cited section preserves their protocol role.

Available source records contain 4 distinct definitions; some records may not include a definition.

Show 4 published definitions

id-ce · unspecified

id-ce OBJECT IDENTIFIER  ::=  {joint-iso-ccitt(2) ds(5) 29}

id-ce · unspecified

id-ce   OBJECT IDENTIFIER ::= { joint-iso-ccitt(2) ds(5) 29 }

certificateExtension · unspecified

certificateExtension ID ::= {ds  29}

id-ce · unspecified

id-ce ID ::= certificateExtension

Meaning

Descriptions

1 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Evidence

Source records

3 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Definitions without a descriptionITU official formal descriptions, RFC Editor3 records · 24 sources
id-ce · unspecifiedITU official formal descriptions, RFC Editor8 sources

Status in source: unspecified.

Names: id-ce

Technical details
{
  "smi_kind": "OBJECT IDENTIFIER",
  "definition": [
    "id-ce",
    "OBJECT",
    "IDENTIFIER",
    "::=",
    "{",
    "joint-iso-ccitt",
    "(",
    "2",
    ")",
    "ds",
    "(",
    "5",
    ")",
    "29",
    "}"
  ]
}
certificateExtension · unspecifiedITU official formal descriptions8 sources

Status in source: unspecified.

Names: certificateExtension

Technical details
{
  "smi_kind": "OBJECT IDENTIFIER",
  "definition": [
    "certificateExtension",
    "ID",
    "::=",
    "{",
    "ds",
    "29",
    "}"
  ]
}
id-ce · unspecifiedITU official formal descriptions8 sources

Status in source: unspecified.

Names: id-ce

Technical details
{
  "smi_kind": "OBJECT IDENTIFIER",
  "definition": [
    "id-ce",
    "ID",
    "::=",
    "certificateExtension"
  ]
}

Registration

Registration authorities

First Registration Authority (inferred from ancestor 2.5)

Hoyt Kesterson & R. Exner

Current Registration Authority (inferred from ancestor 2)

ITU-T SG 17 & ISO/IEC JTC 1/SC 6

Direct children (75)

OIDNameDirect childrenDescendantsDescription
2.5.29.51 baseUpdateTime, id-ce-baseUpdateTime22 Certificate extension: "baseUpdateTime"
2.5.29.52 acceptableCertPolicies, id-ce-acceptableCertPolicies22 Certificate extension: "acceptableCertPolicies"
(Acceptable certificate policies extension)
2.5.29.53 deltaInfo, id-ce-deltaInfo22 Certificate extension: "deltaInfo"
2.5.29.54 inhibitAnyPolicy, id-ce-inhibitAnyPolicy, ext-InhibitAnyPolicy22 X.509 version 3 certificate extension Inhibit Any-policy

The inhibit any-policy extension can be used in certificates issued t…
2.5.29.55 targetInformation, id-ce-targetInformation, targetingInformation, aAissuingDistributionPoint, id-ce-AAissuingDistributionPoint, id-ce-targetingInformation, ext-targetInformation22 Certificate extension: "targetInformation" (Targeting information extension)
2.5.29.56 noRevAvail, id-ce-noRevAvail, ext-noRevAvail22 Certificate extension: "noRevAvail" (No revocation information extension)
2.5.29.57 acceptablePrivilegePolicies, id-ce-acceptablePrivilegePolicies22 Certificate extension: "acceptablePrivilegePolicies"
2.5.29.58 id-ce-toBeRevoked, toBeRevoked22
2.5.29.59 id-ce-RevokedGroups, revokedGroups, id-ce-revokedGroups22
2.5.29.60 id-ce-expiredCertsOnCRL, expiredCertsOnCRL22
2.5.29.61 indirectIssuer, id-ce-indirectIssuer22 (Attribute) certificate extension: "indirectIssuer"
2.5.29.62 id-ce-noAssertion, noAssertion22
2.5.29.63 id-ce-aAissuingDistributionPoint, aAissuingDistributionPoint22
2.5.29.64 id-ce-issuedOnBehaIFOF, id-ce-issuedOnBehalfOf, issuedOnBehalfOf22
2.5.29.65 id-ce-singleUse, singleUse22
2.5.29.66 id-ce-groupAC, groupAC22
2.5.29.67 id-ce-allowedAttAss, allowedAttributeAssignments, id-ce-allowedAttributeAssignments22
2.5.29.68 id-ce-attributeMappings, attributeMappings22
2.5.29.69 id-ce-holderNameConstraints, holderNameConstraints22
2.5.29.70 authorizationValidation, id-ce-authorizationValidation22
2.5.29.71 id-ce-protRestrict, protRestrict22
2.5.29.72 id-ce-subjectAltPublicKeyInfo, subjectAltPublicKeyInfo22
2.5.29.73 altSignatureAlgorithm, id-ce-altSignatureAlgorithm22
2.5.29.74 altSignatureValue, id-ce-altSignatureValue22
2.5.29.75 associatedInformation, id-ce-associatedInformation00

Siblings (41)

OIDNameDirect childrenDescendantsDescription
2.5.1 module49298 ASN.1 modules
2.5.2 serviceElement00 Directory service element.
2.5.3 applicationContext, id-ac1632 Application context.
2.5.4 attributeType, id-at107193 Attribute type
2.5.5 attributeSyntaxVendor, attributeSyntax, dummyCurv1818 Attribute syntax vendor
2.5.6 objectClass, id-oc, objectClass-oid4547 Information object classes
2.5.7 attribute-set00 X.500 attribute sets
2.5.8 algorithm47 Enveloped digital signature algorithm
2.5.9 abstractSyntax, id-as3333 Abstract syntaxes
2.5.12 dsaOperationalAttribute, id-doa99 DSA (Directory System Agent) operational attributes
2.5.13 matchingRule, id-mr7777 Matching rules
2.5.14 knowledgeMatchingRule, id-kmr44 Knowledge matching rules
2.5.15 nameForm, id-nf2121 Nname forms
2.5.16 group00 Group.
2.5.17 subentry, id-sc66 Subentries
2.5.18 operationalAttributeType, id-oa4949 Operational attribute types
2.5.19 operationalBinding, id-ob33 Operational bindings
2.5.20 schemaObjectClass, id-soc33 Schema object classes
2.5.21 schemaOperationalAttribute, id-soa1313 Schema operational attributes
2.5.22 2200 Unused
2.5.23 administrativeRoles, id-ar99 Administrative roles.
2.5.24 accessControlAttribute, id-aca44 Access control attributes
2.5.25 rosObject, id-rosObject99 ROS (Remote Operation Service) objects
2.5.26 contract, id-contract55 Contracts
2.5.27 package, id-package1313 Packages
2.5.28 accessControlSchemes, id-acScheme55 Access control schemes
2.5.30 managementObject, id-mgt6243 Management objects
2.5.31 attributeValueContext, id-avc66 Attribute value contexts
2.5.32 securityExchange, id-se22 Security exchanges
2.5.33 idmProtocol, id-idm44 IDM Protocol
2.5.34 problem, id-pr3636 Problem definitions
2.5.35 notification, id-not1818 Notification attributes
2.5.36 matchingRestriction, id-mre00 Matching restriction
2.5.37 controlAttributeType, id-cat44 Control attribute type
2.5.38 keyPurposes, id-kp00 Key purposes
2.5.39 passwordQuality, id-pq44 Password quality
2.5.40 attributeSyntax, id-asx, id-ats2020 Attribute syntax
2.5.41 avRestriction, id-avr11
2.5.42 cmsContentType, id-cmsct2020
2.5.43 id-wrprot, wrapperProtocolType33
2.5.44 algorithm, id-algo, algorithms8122