1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
|
Internet Engineering Task Force (IETF) R. Housley
Request for Comments: 7229 Vigil Security
Category: Informational May 2014
ISSN: 2070-1721
Object Identifiers for Test Certificate Policies
Abstract
This document provides several certificate policy identifiers for
testing certificate handling software.
Status of This Memo
This document is not an Internet Standards Track specification; it is
published for informational purposes.
This document is a product of the Internet Engineering Task Force
(IETF). It represents the consensus of the IETF community. It has
received public review and has been approved for publication by the
Internet Engineering Steering Group (IESG). Not all documents
approved by the IESG are a candidate for any level of Internet
Standard; see Section 2 of RFC 5741.
Information about the current status of this document, any errata,
and how to provide feedback on it may be obtained at
http://www.rfc-editor.org/info/rfc7229.
Copyright Notice
Copyright (c) 2014 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(http://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Housley Informational [Page 1]
^L
RFC 7229 PKIX TEST OIDs May 2014
1. Introduction
This document provides several certificate policy identifiers for
testing certificate handling software. These certificate policy
identifiers are not intended for use in the public Internet.
The certificate policy identifiers provided in this document are
consistent with the certificate profile specified in [RFC5280]. They
are appropriate for testing the certificate policy processing,
especially the handling of the certificate policy extension, the
policy constraints extension, and the policy mapping extension.
2. Certificate Policy Identifiers for Testing
The following certificate policy identifiers are provided for testing
certificate handling software. ASN.1 [ASN1-2008] object identifiers
are used to name certificate policies.
id-pkix OBJECT IDENTIFIER ::= { iso(1) identified-organization(3)
dod(6) internet(1) security(5) mechanisms(5) pkix(7) }
id-TEST OBJECT IDENTIFIER ::= { id-pkix 13 }
-- Object Identifiers used ONLY for TESTING
id-TEST-certPolicyOne OBJECT IDENTIFIER ::= { id-TEST 1 }
id-TEST-certPolicyTwo OBJECT IDENTIFIER ::= { id-TEST 2 }
id-TEST-certPolicyThree OBJECT IDENTIFIER ::= { id-TEST 3 }
id-TEST-certPolicyFour OBJECT IDENTIFIER ::= { id-TEST 4 }
id-TEST-certPolicyFive OBJECT IDENTIFIER ::= { id-TEST 5 }
id-TEST-certPolicySix OBJECT IDENTIFIER ::= { id-TEST 6 }
id-TEST-certPolicySeven OBJECT IDENTIFIER ::= { id-TEST 7 }
id-TEST-certPolicyEight OBJECT IDENTIFIER ::= { id-TEST 8 }
3. Security Considerations
This specification does not identify particular certificate policies
for use in the Internet public key infrastructure. The actual
policies used for production certificates can have a significant
impact on the confidence that one can place in the certificate. No
confidence should be placed in any certificate that makes use of
these certificate policy identifiers, since they are intended only
for testing.
4. IANA Considerations
The object identifiers used in this document are defined in an arc
delegated by IANA to the PKIX Working Group. No further action by
IANA is necessary for this document or any anticipated updates.
Housley Informational [Page 2]
^L
RFC 7229 PKIX TEST OIDs May 2014
5. Normative References
[ASN1-2008] International Telecommunications Union, "Abstract Syntax
Notation One (ASN.1): Specification of basic notation",
ITU-T Recommendation X.680, November 2008.
[RFC5280] Cooper, D., Santesson, S., Farrell, S., Boeyen, S.,
Housley, R., and W. Polk, "Internet X.509 Public Key
Infrastructure Certificate and Certificate Revocation
List (CRL) Profile", RFC 5280, May 2008.
Housley Informational [Page 3]
^L
RFC 7229 PKIX TEST OIDs May 2014
Appendix A. ASN.1 Module
This appendix provides the certificate policy identifiers (object
identifiers) in an ASN.1 module. No fancy structures are needed, so
this module is compatible with [ASN1-2008].
PKIXTestCertPolicies { iso(1) identified-organization(3) dod(6)
internet(1) security(5) mechanisms(5) pkix(7) id-mod(0)
id-mod-TEST-certPolicies(83) }
DEFINITIONS IMPLICIT TAGS ::=
BEGIN
-- EXPORTS ALL --
-- IMPORTS NONE --
id-pkix OBJECT IDENTIFIER ::= { iso(1) identified-organization(3)
dod(6) internet(1) security(5) mechanisms(5) pkix(7) }
id-TEST OBJECT IDENTIFIER ::= { id-pkix 13 }
-- Object Identifiers used ONLY for TESTING
id-TEST-certPolicyOne OBJECT IDENTIFIER ::= { id-TEST 1 }
id-TEST-certPolicyTwo OBJECT IDENTIFIER ::= { id-TEST 2 }
id-TEST-certPolicyThree OBJECT IDENTIFIER ::= { id-TEST 3 }
id-TEST-certPolicyFour OBJECT IDENTIFIER ::= { id-TEST 4 }
id-TEST-certPolicyFive OBJECT IDENTIFIER ::= { id-TEST 5 }
id-TEST-certPolicySix OBJECT IDENTIFIER ::= { id-TEST 6 }
id-TEST-certPolicySeven OBJECT IDENTIFIER ::= { id-TEST 7 }
id-TEST-certPolicyEight OBJECT IDENTIFIER ::= { id-TEST 8 }
END
Author's Address
Russell Housley
Vigil Security, LLC
918 Spring Knoll Drive
Herndon, VA 20170
USA
EMail: housley@vigilsec.com
Housley Informational [Page 4]
^L
|
