2.5.29.35 - Authority Key Identifier

OID value: 2.5.29.35

OID description:
id-ce-authorityKeyIdentifier

This extension may be used either as a certificate or CRL extension. It identifies the public key to be used to verify the signature on this certificate or CRL. It enables distinct keys used by the same CA to be distinguished (e.g., as key updating occurs).

authorityKeyIdentifier EXTENSION ::= {
	SYNTAX AuthorityKeyIdentifier
	IDENTIFIED BY id-ce-authorityKeyIdentifier
}

AuthorityKeyIdentifier ::= SEQUNCE {
	keyIdentifier	[0] KeyIdentifier OPTIONAL,
	authorityCertIssuer [1] GeneralNames OPTIONAL,
	authorityCertSerialNumber [2] CertificateSerialNumber OPTIONAL,
} (WITH COMPONENTS {..., authorityCertIssuer PRESENT,
			authorityCertSerialNumber PRESENT} |
   WITH COMPONENTS {..., authorityCertIssuer ABSENT,
			authorityCertSerialNumber ABSENT} )

KeyIdentifier ::= OCTET STRING

Superior references

• 2.5.29 - certificateExtension (id-ce)
• 2.5 - X.500 Directory Services
• 2 - ISO/ITU-T jointly assigned OIDs
• Top of OID tree