2.5.29.36 - Policy Constraints

OID value: 2.5.29.36

OID description:
id-ce-policyConstraints

This extension specifies constraints which may require explicit certificate policy identification or inhibit policty mapping for the remainder of the certification path.

This extension may, at the option of the certificate issuer, be either critical or non-critical. It is recommended that it be flagged critical, otherwise a certificate user may not ccorrectly interpret the stipulation of the issuing CA.

policyConstraints EXTENSION ::= {
	SYNTAX PolicyConstraintsSyntax
	IDENTIFIED BY id-ce-policyConstraints
}

PolicyConstraintsSyntax ::= SEQUENCE {
	requireExplicitPolicy [0] SkipCerts OPTIONAL,
	inhibitPolicyMapping  [1] SkipCerts OPTIONAL
}

SkipCerts ::= INTEGER (0..MAX)

Superior references

• 2.5.29 - certificateExtension (id-ce)
• 2.5 - X.500 Directory Services
• 2 - ISO/ITU-T jointly assigned OIDs
• Top of OID tree