public Class PKIXExtensions

This extension indicates how to access CA information and services for the issuer of the certificate in which the extension appears. This information may be used for on-line certification validation services.

Identifies the particular public key used to sign the certificate.

Identifies whether the subject of the certificate is a CA and how deep a certification path may exist through that CA.

Identifies the certificate issuer associated with an entry in an indirect CRL.

Contains the sequence of policy information terms.

Identifies how CRL information is obtained.

Conveys a monotonically increasing sequence number for each CRL issued by a given CA.

Identifies the delta CRL.

Identifies one or more purposes for which the certified public key may be used, in addition to or in place of the basic purposes indicated in the key usage extension field.

Identifies how delta CRL information is obtained.

This extension provides a registered instruction identifier indicating the action to be taken, after encountering a certificate that has been placed on hold.

Specifies whether any-policy policy OID is permitted

Identifies the date on which it is known or suspected that the private key was compromised or that the certificate otherwise became invalid.

Allows additional identities to be associated with the certificate issuer.

Identifies the CRL distribution point for a particular CRL.

Defines the purpose of the key contained in the certificate.

Provides for permitted and excluded subtrees that place restrictions on names that may be included within a certificate issued by a given CA.

Identifies the OCSP client can trust the responder for the lifetime of the responder's certificate.

This extension is used to provide nonce data for OCSP requests or responses.

Used to either prohibit policy mapping or limit the set of policies that can be in subsequent certificates.

Lists pairs of object identifiers of policies considered equivalent by the issuing CA to the subject CA.

Allows the certificate issuer to specify a different validity period for the private key than the certificate.

Identifies the reason for the certificate revocation.

Allows additional identities to be bound to the subject of the certificate.

Identifies additional directory attributes. This extension is always non-critical.

This extension indicates how to access CA information and services for the subject of the certificate in which the extension appears.

Identifies the particular public key used in an application.