Upload New File

ETSI472-1CertExtensions

 { itu-t(0) identified-organization(4) etsi(0) id-cert-profile(194121) id-mod(0)

 id-mod-validity-assured(1) v1(0) }

DEFINITIONS ::=

BEGIN

-- EXPORTS ALL --

IMPORTS

Extensions, ATTRIBUTE, EXTENSION

FROM PKIX-CommonTypes-2009

-- { iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-mod-pkixCommon-02(57) }

;

-- Arc for all the identifiers of the extensions of X.509-AC EAAs

id-etsi-eaa-x509AC-ext-root	OBJECT IDENTIFIER ::= { itu-t(0) identified-organization(4) etsi(0) id-qeaas-profile(194721) }

-- Subarc for identifiers of extensions applicable to all EAAs

id-etsi-eaa-x509AC-nqext 	OBJECT IDENTIFIER ::= { id-etsi-eaa-x509AC-ext-root 2 }

-- EAA Type attestation extension

id-etsi-eaa-x509AC-ext-type	OBJECT IDENTIFIER ::= { id-etsi-eaa-x509AC-nqext 1 }

etsi-eaaType  EXTENSION ::= { SYNTAX EAAType IDENTIFIED BY id-etsi-eaa-x509AC-ext-type}

EAAType  ::= UTF8String

-- Subarc for extensions applicable only to QEAA and PuB-EAA

id-etsi-qeaas-x509AC-prof-identifiers	OBJECT IDENTIFIER ::= { id-etsi-eaa-x509AC-ext-root 1 }

-- QEAA-STATEMENT class definition

QEAA-STATEMENT ::= CLASS {

    &statementId  OBJECT IDENTIFIER UNIQUE,

    &Type OPTIONAL

}

WITH SYNTAX {

    IDENTIFIED BY &statementId

    [SYNTAX &Type]

}

-- QEAAStatements definition 

id-qeaas-qeaaStatements     OBJECT IDENTIFIER ::= { id-etsi-qeaas-x509AC-prof-identifiers 1 }

etsi-qeaaStatements  EXTENSION ::= {

          SYNTAX             QEAAStatements

          IDENTIFIED BY      id-qeaas-qeaaStatements }

QEAAStatements ::= SEQUENCE OF QEAAStatement

QEAAStatement ::= SEQUENCE {

    statementId   QEAA-STATEMENT.&statementId({SupportedStatements}),

    -- Most a típus mezőre hivatkozunk, nem a statementInfo mezőre

    statementInfo QEAA-STATEMENT.&Type

                  ({SupportedStatements}{@statementId}) OPTIONAL 

}

SupportedStatements QEAA-STATEMENT ::= { etsi-qeaaStatement-1 | etsi-eaaPubAStatement-1}

-- EUqeaaCompliance QEAAStatement definition

id-etsi-qeaas-EUqeaaCompliance OBJECT IDENTIFIER ::= { id-qeaas-qeaaStatements 1}

etsi-qeaaStatement-1 QEAA-STATEMENT ::= { 

    IDENTIFIED BY id-etsi-qeaas-EUqeaaCompliance 

    -- No content >>(TYPE IS) >> no statementInfo

}

-- eaaPubA-EUeaaPubACompliance QEAAStatement definition

id-etsi-eaaPubA-EUeaaPubACompliance OBJECT IDENTIFIER ::= { id-qeaas-qeaaStatements 2}

etsi-eaaPubAStatement-1 QEAA-STATEMENT ::= { 

    IDENTIFIED BY id-etsi-eaaPubA-EUeaaPubACompliance

	-- No content >> (TYPE IS) >> no statementInfo

}

-- EAA administrative validity period attestation extension

id-etsi-eaa-x509AC-ext-adm-validityPeriod	OBJECT IDENTIFIER ::= { id-etsi-eaa-x509AC-nqext 3 }

etsi-eaaAdmValidityPeriod  EXTENSION ::= {

	SYNTAX             AdmValidityPeriod

	IDENTIFIED BY      id-etsi-eaa-x509AC-ext-adm-validityPeriod }

AdmValidityPeriod  ::= SEQUENCE {

	notBeforeTime  GeneralizedTime,

	notAfterTime   GeneralizedTime

}

-- oneTimeUse EAA attestation extension

id-etsi-eaa-x509AC-ext-oneTimeUse		OBJECT IDENTIFIER ::= { id-etsi-eaa-x509AC-nqext 2 }

etsi-eaaOneTimeUse 	EXTENSION ::= { IDENTIFIED BY id-etsi-eaa-x509AC-ext-oneTimeUse }

-- shortLived EAA attestation extension

id-etsi-eaa-x509AC-ext-shortLived		OBJECT IDENTIFIER ::= { id-etsi-eaa-x509AC-nqext 4 }

etsi-eaaShortLived 	EXTENSION ::= { IDENTIFIED BY id-etsi-eaa-x509AC-ext-shortLived }

-- JSON encoded attestation extension

id-etsi-eaa-x509AC-ext-jsonattr		OBJECT IDENTIFIER ::= { id-etsi-eaa-x509AC-nqext 5 }

etsi-eaa-ext-jsonattr		ATTRIBUTE ::= {SYNTAX JSONEncodedAttribute IDENTIFIED BY id-etsi-eaa-x509AC-ext-jsonattr }

JSONEncodedAttribute ::= UTF8String

-- Attribute for associating a sequence of attributes to one attribute subject

id-etsi-eaa-x509AC-ext-subAttrs		OBJECT IDENTIFIER ::= { id-etsi-eaa-x509AC-nqext 6 }

etsi-eaa-ext-subAttrs		EXTENSION ::= {SYNTAX SubjectAttrs IDENTIFIED BY id-etsi-eaa-x509AC-ext-subAttrs }

SubjectAttrs ::= SEQUENCE {

	subIdOrPseudonym	IdOrPseudonym,

	attrs				Extensions -- the attributes associated to the attribute subject

}

IdOrPseudonym ::= CHOICE {

	subId	[0] IA5String,

	subAka	[1] IA5String

}

END