2.5.13.35 - id-mr-certificateMatch

OID value: 2.5.13.35

OID description:
The certificate match rule compares a presented value with an attribute of type Certificate. It selects one or more certificates on the basis of various characteristics.

The rule returns TRUE if all the components that are present in the presented value match the corresponding components of the attribute value.

certificateMatch MATCHING-RULE ::= {
	SYNTAX CertificateAssertion
	ID id-mr-certificateMatch
}

CertificateAssertion ::= SEQUENCE {
	serialNumber	[0] CertificateSerialNumber OPTIONAL,
	issuer		[1] Name OPTIONAL,
	subjectKeyIdentifier [2] SubjectKeyIdentifier OPTIONAL,
	authorityKeyIdentifier [3] AuthorityKeyIdentifier OPTIONAL,
	certificateValid [4] UTCTime OPTIONAL,
	privateKeyValid [5] GeneralizedTime OPTIONAL,
	subjectPublicKeyAlgID [6] OBJECT IDENTIFIER OPTIONAL,
	keyUsage [7] KeyUsage OPTIONAL,
	subjectAltName [8] AltNameType OPTIONAL,
	policy [9] CertPolicySet OPTIONAL,
	pathToName [10] Name OPTIONAL
}

AltNameType ::= CHOICE {
	builtinNameForm ENUMERATED {
		rfc822name(1),
		dNSName(2),
		x400Address(3),
		directoryName(4),
		ediPartyName(5),
		uniformResourceIdentifier(6),
		iPAddress(7),
		registeredId(8)
	},
	otherNameForm OBJECT IDENTIFIER
}

Superior references

• 2.5.13 - Matching Rule
• 2.5 - X.500 Directory Services
• 2 - ISO/ITU-T jointly assigned OIDs
• Top of OID tree