package org.bouncycastle.asn1.isismtt;
import org.bouncycastle.asn1.ASN1ObjectIdentifier;
ISISMT -- Industrial Signature Interoperability Specification
/**
* ISISMT -- Industrial Signature Interoperability Specification
*/
public interface ISISMTTObjectIdentifiers
{
1.3.36.8 /** 1.3.36.8 */
static final ASN1ObjectIdentifier id_isismtt = new ASN1ObjectIdentifier("1.3.36.8");
1.3.36.8.1 /** 1.3.36.8.1 */
static final ASN1ObjectIdentifier id_isismtt_cp = id_isismtt.branch("1");
The id-isismtt-cp-accredited OID indicates that the certificate is a
qualified certificate according to Directive 1999/93/EC of the European
Parliament and of the Council of 13 December 1999 on a Community
Framework for Electronic Signatures, which additionally conforms the
special requirements of the SigG and has been issued by an accredited CA.
1.3.36.8.1.1
/**
* The id-isismtt-cp-accredited OID indicates that the certificate is a
* qualified certificate according to Directive 1999/93/EC of the European
* Parliament and of the Council of 13 December 1999 on a Community
* Framework for Electronic Signatures, which additionally conforms the
* special requirements of the SigG and has been issued by an accredited CA.
* <p>
* 1.3.36.8.1.1
*/
static final ASN1ObjectIdentifier id_isismtt_cp_accredited = id_isismtt_cp.branch("1");
1.3.36.8.3 /** 1.3.36.8.3 */
static final ASN1ObjectIdentifier id_isismtt_at = id_isismtt.branch("3");
Certificate extensionDate of certificate generation
DateOfCertGenSyntax ::= GeneralizedTime
OID: 1.3.36.8.3.1
/**
* Certificate extensionDate of certificate generation
* <pre>
* DateOfCertGenSyntax ::= GeneralizedTime
* </pre>
* OID: 1.3.36.8.3.1
*/
static final ASN1ObjectIdentifier id_isismtt_at_dateOfCertGen = id_isismtt_at.branch("1");
Attribute to indicate that the certificate holder may sign in the name of
a third person. May also be used as extension in a certificate.
OID: 1.3.36.8.3.2
/**
* Attribute to indicate that the certificate holder may sign in the name of
* a third person. May also be used as extension in a certificate.
* <p>
* OID: 1.3.36.8.3.2
*/
static final ASN1ObjectIdentifier id_isismtt_at_procuration = id_isismtt_at.branch("2");
Attribute to indicate admissions to certain professions. May be used as
attribute in attribute certificate or as extension in a certificate
OID: 1.3.36.8.3.3
/**
* Attribute to indicate admissions to certain professions. May be used as
* attribute in attribute certificate or as extension in a certificate
* <p>
* OID: 1.3.36.8.3.3
*/
static final ASN1ObjectIdentifier id_isismtt_at_admission = id_isismtt_at.branch("3");
Monetary limit for transactions. The QcEuMonetaryLimit QC statement MUST
be used in new certificates in place of the extension/attribute
MonetaryLimit since January 1, 2004. For the sake of backward
compatibility with certificates already in use, SigG conforming
components MUST support MonetaryLimit (as well as QcEuLimitValue).
OID: 1.3.36.8.3.4
/**
* Monetary limit for transactions. The QcEuMonetaryLimit QC statement MUST
* be used in new certificates in place of the extension/attribute
* MonetaryLimit since January 1, 2004. For the sake of backward
* compatibility with certificates already in use, SigG conforming
* components MUST support MonetaryLimit (as well as QcEuLimitValue).
* <p>
* OID: 1.3.36.8.3.4
*/
static final ASN1ObjectIdentifier id_isismtt_at_monetaryLimit = id_isismtt_at.branch("4");
A declaration of majority. May be used as attribute in attribute
certificate or as extension in a certificate
OID: 1.3.36.8.3.5
/**
* A declaration of majority. May be used as attribute in attribute
* certificate or as extension in a certificate
* <p>
* OID: 1.3.36.8.3.5
*/
static final ASN1ObjectIdentifier id_isismtt_at_declarationOfMajority = id_isismtt_at.branch("5");
Serial number of the smart card containing the corresponding private key
ICCSNSyntax ::= OCTET STRING (SIZE(8..20))
OID: 1.3.36.8.3.6
/**
* Serial number of the smart card containing the corresponding private key
* <pre>
* ICCSNSyntax ::= OCTET STRING (SIZE(8..20))
* </pre>
* <p>
* OID: 1.3.36.8.3.6
*/
static final ASN1ObjectIdentifier id_isismtt_at_iCCSN = id_isismtt_at.branch("6");
Reference for a file of a smartcard that stores the public key of this
certificate and that is used as "security anchor".
PKReferenceSyntax ::= OCTET STRING (SIZE(20))
OID: 1.3.36.8.3.7
/**
* Reference for a file of a smartcard that stores the public key of this
* certificate and that is used as "security anchor".
* <pre>
* PKReferenceSyntax ::= OCTET STRING (SIZE(20))
* </pre>
* <p>
* OID: 1.3.36.8.3.7
*/
static final ASN1ObjectIdentifier id_isismtt_at_PKReference = id_isismtt_at.branch("7");
Some other restriction regarding the usage of this certificate. May be
used as attribute in attribute certificate or as extension in a
certificate.
RestrictionSyntax ::= DirectoryString (SIZE(1..1024))
OID: 1.3.36.8.3.8
See Also: - Restriction
/**
* Some other restriction regarding the usage of this certificate. May be
* used as attribute in attribute certificate or as extension in a
* certificate.
* <pre>
* RestrictionSyntax ::= DirectoryString (SIZE(1..1024))
* </pre>
* <p>
* OID: 1.3.36.8.3.8
*
* @see org.bouncycastle.asn1.isismtt.x509.Restriction
*/
static final ASN1ObjectIdentifier id_isismtt_at_restriction = id_isismtt_at.branch("8");
(Single)Request extension: Clients may include this extension in a
(single) Request to request the responder to send the certificate in the
response message along with the status information. Besides the LDAP
service, this extension provides another mechanism for the distribution
of certificates, which MAY optionally be provided by certificate
repositories.
RetrieveIfAllowed ::= BOOLEAN
OID: 1.3.36.8.3.9
/**
* (Single)Request extension: Clients may include this extension in a
* (single) Request to request the responder to send the certificate in the
* response message along with the status information. Besides the LDAP
* service, this extension provides another mechanism for the distribution
* of certificates, which MAY optionally be provided by certificate
* repositories.
* <pre>
* RetrieveIfAllowed ::= BOOLEAN
* </pre>
* <p>
* OID: 1.3.36.8.3.9
*/
static final ASN1ObjectIdentifier id_isismtt_at_retrieveIfAllowed = id_isismtt_at.branch("9");
SingleOCSPResponse extension: The certificate requested by the client by
inserting the RetrieveIfAllowed extension in the request, will be
returned in this extension.
OID: 1.3.36.8.3.10
See Also: - RequestedCertificate
/**
* SingleOCSPResponse extension: The certificate requested by the client by
* inserting the RetrieveIfAllowed extension in the request, will be
* returned in this extension.
* <p>
* OID: 1.3.36.8.3.10
*
* @see org.bouncycastle.asn1.isismtt.ocsp.RequestedCertificate
*/
static final ASN1ObjectIdentifier id_isismtt_at_requestedCertificate = id_isismtt_at.branch("10");
Base ObjectIdentifier for naming authorities
OID: 1.3.36.8.3.11
/**
* Base ObjectIdentifier for naming authorities
* <p>
* OID: 1.3.36.8.3.11
*/
static final ASN1ObjectIdentifier id_isismtt_at_namingAuthorities = id_isismtt_at.branch("11");
SingleOCSPResponse extension: Date, when certificate has been published
in the directory and status information has become available. Currently,
accrediting authorities enforce that SigG-conforming OCSP servers include
this extension in the responses.
CertInDirSince ::= GeneralizedTime
OID: 1.3.36.8.3.12
/**
* SingleOCSPResponse extension: Date, when certificate has been published
* in the directory and status information has become available. Currently,
* accrediting authorities enforce that SigG-conforming OCSP servers include
* this extension in the responses.
*
* <pre>
* CertInDirSince ::= GeneralizedTime
* </pre>
* <p>
* OID: 1.3.36.8.3.12
*/
static final ASN1ObjectIdentifier id_isismtt_at_certInDirSince = id_isismtt_at.branch("12");
Hash of a certificate in OCSP.
OID: 1.3.36.8.3.13
See Also: - CertHash
/**
* Hash of a certificate in OCSP.
* <p>
* OID: 1.3.36.8.3.13
*
* @see org.bouncycastle.asn1.isismtt.ocsp.CertHash
*/
static final ASN1ObjectIdentifier id_isismtt_at_certHash = id_isismtt_at.branch("13");
/**
* <pre>
* NameAtBirth ::= DirectoryString(SIZE(1..64)
* </pre>
*
* Used in
* {@link org.bouncycastle.asn1.x509.SubjectDirectoryAttributes SubjectDirectoryAttributes}
* <p>
* OID: 1.3.36.8.3.14
*/
static final ASN1ObjectIdentifier id_isismtt_at_nameAtBirth = id_isismtt_at.branch("14");
Some other information of non-restrictive nature regarding the usage of
this certificate. May be used as attribute in atribute certificate or as
extension in a certificate.
AdditionalInformationSyntax ::= DirectoryString (SIZE(1..2048))
OID: 1.3.36.8.3.15
See Also: - AdditionalInformationSyntax
/**
* Some other information of non-restrictive nature regarding the usage of
* this certificate. May be used as attribute in atribute certificate or as
* extension in a certificate.
*
* <pre>
* AdditionalInformationSyntax ::= DirectoryString (SIZE(1..2048))
* </pre>
* <p>
* OID: 1.3.36.8.3.15
*
* @see org.bouncycastle.asn1.isismtt.x509.AdditionalInformationSyntax
*/
static final ASN1ObjectIdentifier id_isismtt_at_additionalInformation = id_isismtt_at.branch("15");
Indicates that an attribute certificate exists, which limits the
usability of this public key certificate. Whenever verifying a signature
with the help of this certificate, the content of the corresponding
attribute certificate should be concerned. This extension MUST be
included in a PKC, if a corresponding attribute certificate (having the
PKC as base certificate) contains some attribute that restricts the
usability of the PKC too. Attribute certificates with restricting content
MUST always be included in the signed document.
LiabilityLimitationFlagSyntax ::= BOOLEAN
OID: 0.2.262.1.10.12.0
/**
* Indicates that an attribute certificate exists, which limits the
* usability of this public key certificate. Whenever verifying a signature
* with the help of this certificate, the content of the corresponding
* attribute certificate should be concerned. This extension MUST be
* included in a PKC, if a corresponding attribute certificate (having the
* PKC as base certificate) contains some attribute that restricts the
* usability of the PKC too. Attribute certificates with restricting content
* MUST always be included in the signed document.
* <pre>
* LiabilityLimitationFlagSyntax ::= BOOLEAN
* </pre>
* <p>
* OID: 0.2.262.1.10.12.0
*/
static final ASN1ObjectIdentifier id_isismtt_at_liabilityLimitationFlag = new ASN1ObjectIdentifier("0.2.262.1.10.12.0");
}