2.5.29.32 - Certificate Policies

OID value: 2.5.29.32

OID description:
id-ce-certificatePolicies

This extension lists certificate policies, recognized by the issuing CA, that apply to the certificate, together with optional qualifier information pertaining to these certificate policies. Typically, different certificate policies will relate to different applications which may use the certified key.

certificatePolicies EXTENSION ::= {
	SYNTAX CertificatePoliciesSyntax
	IDENTIFIED BY id-ce-certificatePolicies
}

CertificatePoliciesSyntax ::= SEQUENCE SIZE (1..MAX) OF
	PolicyInformation

PolicyInformation ::= SEQUENCE {
	policyIdentifier CertPolicyId,
	policyQualifier SEQUENCE SIZE (1..MAX) OF
		PolicyQualifierInfo OPTIONAL
}

CertPolicyId ::= OBJECT IDENTIFIER

PolicyQualiferInfo ::= SEQUENCE {
	policyQualifierId CERT-POLICY-QUALIFIER.&id
			({SupportedPolicyQualifiers}),
	qualifier CERT-POLICY-QUALIFIER.&Qualifier
			({SupportedPolicyQualifiers}
			 {@policyQualifierId}) 
			OPTIONAL
}

SupportedPolicyQualifers CERT-POLICY-QUALIFIER ::= { ... }

CERT-POLICY-QUALIFIER ::= CLASS {
	&id	OBJECT IDENTIFIER UNIQUE,
	&Qualifier OPTIONAL
} WITH SYNTAX {
	POLICY-QUALIFIER-ID &id
	[QUALIFIER-TYPE &Qualifier]
}

Superior references

• 2.5.29 - certificateExtension (id-ce)
• 2.5 - X.500 Directory Services
• 2 - ISO/ITU-T jointly assigned OIDs
• Top of OID tree