Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора, Страница: 453 / 512

issuerAltName Extension
433
Use OID
Code signing 1.3.6.1.5.5.7.3.3
Email 1.3.6.1.5.5.7.3.4
Timestamping 1.3.6.1.5.5.7.3.8
OCSP Signing 1.3.6.1.5.5.7.3.9
1
OCSP Signing is not defined in PKIX Part 1, but in RFC 2560,
X.509 Internet Public Key Infrastructure Online Certificate Status
Protocol - OCSP
.
Table A.1. PKIX Extended Key Usage Extension Uses
Use OID
Certificate trust list signing 1.3.6.1.4.1.311.10.3.1
Microsoft Server Gated Crypto (SGC) 1.3.6.1.4.1.311.10.3.3
Microsoft Encrypted File System 1.3.6.1.4.1.311.10.3.4
Netscape SGC 2.16.840.1.113730.4.1
Table A.2. Private Extended Key Usage Extension Uses
A.3.7. issuerAltName Extension
A.3.7.1. OID
2.5.29.18
A.3.7.2. Criticality
PKIX Part 1 recommends that this extension be marked noncritical.
A.3.7.3. Discussion
The Issuer Alternative Name extension is used to associate Internet-style identities with the certificate
issuer. Names must use the forms defined for the Subject Alternative Name extension.
A.3.8. keyUsage
A.3.8.1. OID
2.5.29.15
A.3.8.2. Criticality
This extension may be critical or noncritical. PKIX Part 1 recommends that it should be marked critical
if it is used.
A.3.8.3. Discussion
The Key Usage extension defines the purpose of the key contained in the certificate. The Key Usage,
Extended Key Usage, and Basic Constraints extensions act together to specify the purposes for which
a certificate can be used.