the crlEntryExtensions can be used for the Reason Code (oid=
id-ce-reasonCode = 2.5.29.21)
reasonCode EXTENSION ::= {
SYNTAX CRLReason
IDENTIFIED BY id-ce-reasonCode
}
CRLReason ::= ENUMERATED {
unspecified(0),
keyCompromise(1),
cACompromise(2),
affiliationChanged(3),
superseded(4),
cessationOfOperation(5),
certificateHold(6),
removeFromCRL(8)
}
Some of crlExtensions are :
CRLNumber (id-ce-cRLNumber = 2.5.29.20)
Delta CRL indicator (id-ce-deltaCRLIndicator = 2.5.29.27)
Issuing Distribution Point (id-ce-issuingDistributionPoint = 2.5.29.28)
2 attached CRLs with extensions for example
-----Message d'origine-----
De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]De la part de Mads Rasmussen
Envoye : jeudi 28 fevrier 2002 13:13
A : [EMAIL PROTECTED]
Objet : Extension in CRLs never used????
Hi there,
A question about certificates:
In the rfc 2459 definition of the crl format
5.1 CRL Fields (page 42)
TBSCertList ::= SEQUENCE {
