1 -- X.509 AuthorityKeyIdentifier
2 -- rfc5280 section 4.2.1.1
4 AuthorityKeyIdentifier ::= SEQUENCE {
5 keyIdentifier [0] IMPLICIT KeyIdentifier OPTIONAL,
6 authorityCertIssuer [1] IMPLICIT GeneralNames OPTIONAL,
7 authorityCertSerialNumber [2] IMPLICIT CertificateSerialNumber OPTIONAL
10 KeyIdentifier ::= OCTET STRING ({ x509_akid_note_kid })
12 CertificateSerialNumber ::= INTEGER ({ x509_akid_note_serial })
14 GeneralNames ::= SEQUENCE OF GeneralName
16 GeneralName ::= CHOICE {
18 rfc822Name [1] IA5String,
19 dNSName [2] IA5String,
21 directoryName [4] Name ({ x509_akid_note_name }),
23 uniformResourceIdentifier [6] IA5String,
24 iPAddress [7] OCTET STRING,
25 registeredID [8] OBJECT IDENTIFIER
28 Name ::= SEQUENCE OF RelativeDistinguishedName
30 RelativeDistinguishedName ::= SET OF AttributeValueAssertion
32 AttributeValueAssertion ::= SEQUENCE {
33 attributeType OBJECT IDENTIFIER ({ x509_note_OID }),
34 attributeValue ANY ({ x509_extract_name_segment })