Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 771 / 874

Standard X.509 v3 CRL Extensions
Appendix G Certificate and CRL Extensions 771
Serial Number: 0xA
Revocation Date: Wednesday, November 25, 1998 5:11:18 AM
Extensions:
Identifier: Revocation Reason - 2.5.29.21
Critical: no
Reason: Affiliation_Changed
...
Standard X.509 v3 CRL Extensions
In addition to certificate extensions, the X.509 v3 proposed standard defines
extensions to CRLs, which provide methods for associating additional attributes
with Internet CRLs. These are of two kinds: extensions to the CRL itself, and
extensions to individual certificate entries in the CRL.
• Extensions for CRLs
• CRL Entry Extensions
Extensions for CRLs
The sections that follow describe the CRL extension types that are defined as part
of the Internet X.509 v3 Public Key Infrastructure proposed standard, as of
September 1998.
These are the CRL extensions described in the sections that follow:
• authorityKeyIdentifier
• CRLNumber
• deltaCRLIndicator
• issuerAltName
• issuingDistributionPoint
authorityKeyIdentifier
OID
2.5.29.35