Version 3 certificate or CRL extension (as defined in RFC 3280). More...

Data Fields
byteBoolean	isCritical
	`TRUE` if extension is critical; otherwise `FALSE`. More...

ubyte *	oid
	Extension Id: an OID defined in src/asn1/oiddefs.h. More...

ubyte *	value
	DER-encoded extension value. More...

ubyte4	valueLen
	Number of bytes in the DER-encoded extension value (`value`). More...

Detailed Description

This structure is used to specify a version 3 certificate or CRL extension (as defined in RFC 3280).

Since: 3.06

Version: 3.06 and later

Field Documentation

◆ isCritical

byteBoolean extensions::isCritical

TRUE if extension is critical; otherwise FALSE.

◆ oid

ubyte* extensions::oid

Extension Id: an OID defined in src/asn1/oiddefs.h. The table shows the valid *_OID constants and the applicable section of RFC 3280.

Certificate Extension oiddefs Variable	RFC 3280
authorityKeyIdentifier_OID	4.2.1.1 Authority Key Identifier
subjectKeyIdentifier_OID	4.2.1.2 Subject Key Identifier
keyUsage_OID	4.2.1.3 Key Usage
privateKeyUsagePeriod_OID	4.2.1.4 Private Key Usage Period
certificatePolicies_OID	4.2.1.5 Certificate Policies
policyMappings_OID	4.2.1.6 Policy Mappings
subjectAltName_OID	4.2.1.7 Subject Alternative Name
issuerAltName_OID	4.2.1.8 Issuer Alternative Name
subjectDirectoryAttributes_OID	4.2.1.9 Subject Directory Attributes
basicConstraints_OID	4.2.1.10 Basic Constraints
nameConstraints_OID	4.2.1.11 Name Constraints
policyConstraints_OI	4.2.1.12 Policy Constraints
extendedKeyUsage_OID	4.2.1.13 Extended Key Usage
crl_OID	4.2.1.14 CRL Distribution Points
inhibitAnyPolicy_OID	4.2.1.15 Inhibit Any-Policy
freshestCRL_OID	4.2.1.16 Freshest CRL

CRL Extension oiddefs Variable	RFC 3280 Section
authorityKeyIdentifier_OID	5.2.1 Authority Key Identifier
issuerAltName_OID	5.2.2 Issuer Alternative Name
cRLNumber 20	5.2.3 CRL Number
deltaCRLIndicator 27	5.2.4 Delta CRL Indicator
issuingDistributionPoint 28	5.2.5 Issuing Distribution Point
freshestCRL 46	5.2.6 Freshest CRL
	5.3 CRL Entry Extensions
cRLReason 21	5.3.1 Reason Code
holdInstructionCode 23	5.3.2 Hold Instruction Code
invalidityDate 24	5.3.3 Invalidity Date
certificateIssuer 29	5.3.4 Certificate Issuer

(verify which *_OID constants are valid)

◆ value

ubyte* extensions::value

DER-encoded extension value. When DER-encoding the value, refer to the ASN.1 definitions provided in the following sections of RFC 3280, https://tools.ietf.org/html/rfc3280:

4.2.1.1, Authority Key Identifier
4.2.1.2, Subject Key Identifier
4.2.1.3, Key Usage
4.2.1.4, Private Key Usage Period
4.2.1.5, Certificate Policies
4.2.1.6, Policy Mappings
4.2.1.7, Subject Alternative Name
4.2.1.8, Issuer Alternative Name
4.2.1.9, Subject Directory Attributes
4.2.1.10, Basic Constraints
4.2.1.11, Name Constraints
4.2.1.12, Policy Constraints
4.2.1.13, Extended Key Usage
4.2.1.14, CRL Distribution Points
4.2.1.15, Inhibit Any-Policy
4.2.1.16, Freshest CRL

◆ valueLen

ubyte4 extensions::valueLen

Number of bytes in the DER-encoded extension value (value).

The documentation for this struct was generated from the following file: