This page (revision-1) was last changed on 29-Nov-2024 16:16 by -jim

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note
1 29-Nov-2024 16:16 1 KB -jim

Page References

Incoming links Outgoing links

Version management

Difference between version and

At line 1 added 17 lines
!!! Overview
[{$pagename}] [Certificate Extension] ([OID] [2.5.29.32.0]) allows [Applications] with specific [policy] requirements are expected to have a list of those policies that they will accept and to compare the policy [OIDs] in the [certificate] to that list.
If this extension is critical, the path validation software [MUST] be able to interpret this extension (including the optional qualifier), or [MUST] reject the certificate.
To promote interoperability, this profile RECOMMENDS that policy information terms consist of only an OID. Where an OID alone is insufficient, this profile strongly recommends that the use of qualifiers be limited to those identified in this section. When qualifiers are used with the special policy [{$pagename}], they [MUST] be limited to the qualifiers identified in this section. Only those qualifiers returned as a result of path validation are considered.
This specification defines two policy qualifier types for use by certificate policy writers and certificate issuers. The qualifier types are the [CPS Pointer] and [User Notice] qualifiers.
The CPS Pointer qualifier contains a pointer to a [Certification Practice Statement] (CPS) published by the CA. The pointer is in the form of a [URI]. Processing requirements for this qualifier are a local matter. No action is mandated by this specification regardless of the criticality value asserted for the extension.
User notice is intended for display to a relying party when a certificate is used. Only user notices returned as a result of path validation are intended for display to the user. If a notice is duplicated, only one copy need be displayed. To prevent such duplication, this qualifier [SHOULD] only be present in [end entity certificates] and CA certificates issued to other organizations.
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]