1 -- This ASN definition is taken from (and modified to pass through asn2wrs)
4 -- RFC3739 contains the followin copyright statements:
6 -- Full Copyright Statement
8 -- Copyright (C) The Internet Society (2004). This document is subject
9 -- to the rights, licenses and restrictions contained in BCP 78 and
10 -- except as set forth therein, the authors retain all their rights.
12 -- This document and the information contained herein are provided on an
13 -- "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE
14 -- REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE
15 -- INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR
16 -- IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF
17 -- THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED
18 -- WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
20 -- Intellectual Property
22 -- The IETF takes no position regarding the validity or scope of any
23 -- Intellectual Property Rights or other rights that might be claimed
24 -- to pertain to the implementation or use of the technology
25 -- described in this document or the extent to which any license
26 -- under such rights might or might not be available; nor does it
27 -- represent that it has made any independent effort to identify any
28 -- such rights. Information on the procedures with respect to
29 -- rights in RFC documents can be found in BCP 78 and BCP 79.
31 -- Copies of IPR disclosures made to the IETF Secretariat and any
32 -- assurances of licenses to be made available, or the result of an
33 -- attempt made to obtain a general license or permission for the use
34 -- of such proprietary rights by implementers or users of this
35 -- specification can be obtained from the IETF on-line IPR repository
36 -- at http://www.ietf.org/ipr.
38 -- The IETF invites any interested party to bring to its attention
39 -- any copyrights, patents or patent applications, or other
40 -- proprietary rights that may cover technology that may be required
41 -- to implement this standard. Please address the information to the
42 -- IETF at ietf-ipr@ietf.org.
46 -- Funding for the RFC Editor function is currently provided by the
51 PKIXqualified97 {iso(1) identified-organization(3) dod(6)
52 internet(1) security(5) mechanisms(5) pkix(7) id-mod(0)
53 id-mod-qualified-cert-97(35) }
55 DEFINITIONS EXPLICIT TAGS ::=
63 informationFramework, certificateExtensions, selectedAttributeTypes,
64 authenticationFramework, upperBounds, id-at
65 FROM UsefulDefinitions {joint-iso-itu-t(2) ds(5) module(1)
66 usefulDefinitions(0) 3 }
69 FROM UpperBounds upperBounds
72 FROM CertificateExtensions certificateExtensions
74 ATTRIBUTE, AttributeType
75 FROM InformationFramework informationFramework
78 FROM SelectedAttributeTypes selectedAttributeTypes
80 AlgorithmIdentifier, Extension, EXTENSION
81 FROM AuthenticationFramework authenticationFramework
84 FROM PKIX1Explicit88 { iso(1) identified-organization(3) dod(6)
85 internet(1) security(5) mechanisms(5) pkix(7) id-mod(0)
86 id-pkix1-explicit(18) };
88 -- Locally defined OIDs
90 -- Arc for QC personal data attributes
91 -- id-pda OBJECT IDENTIFIER ::= { id-pkix 9 }
93 -- Arc for QC statements
94 -- id-qcs OBJECT IDENTIFIER ::= { id-pkix 11 }
96 -- Personal data attributes
98 -- id-pda-dateOfBirth AttributeType ::= { id-pda 1 }
99 -- id-pda-placeOfBirth AttributeType ::= { id-pda 2 }
100 -- id-pda-gender AttributeType ::= { id-pda 3 }
101 -- id-pda-countryOfCitizenship AttributeType ::= { id-pda 4 }
102 -- id-pda-countryOfResidence AttributeType ::= { id-pda 5 }
104 -- Certificate extensions
106 -- id-pe-biometricInfo OBJECT IDENTIFIER ::= { id-pe 2 }
107 -- id-pe-qcStatements OBJECT IDENTIFIER ::= { id-pe 3 }
111 -- id-qcs-pkixQCSyntax-v1 OBJECT IDENTIFIER ::= { id-qcs 1 }
112 -- id-qcs-pkixQCSyntax-v2 OBJECT IDENTIFIER ::= { id-qcs 2 }
114 Generalizedtime ::= GeneralizedTime
116 Directorystring ::= DirectoryString
118 Printablestring ::= PrintableString
120 -- Personal data attributes
122 -- dateOfBirth ATTRIBUTE ::= {
123 -- WITH SYNTAX GeneralizedTime
124 -- ID id-pda-dateOfBirth }
126 -- placeOfBirth ATTRIBUTE ::= {
127 -- WITH SYNTAX DirectoryString {ub-name}
128 -- ID id-pda-placeOfBirth }
130 -- gender ATTRIBUTE ::= {
131 -- WITH SYNTAX PrintableString (SIZE(1) ^ FROM("M"|"F"|"m"|"f"))
132 -- ID id-pda-gender }
134 -- countryOfCitizenship ATTRIBUTE ::= {
135 -- WITH SYNTAX PrintableString (SIZE (2))
136 -- (CONSTRAINED BY { })
137 -- ID id-pda-countryOfCitizenship }
139 -- countryOfResidence ATTRIBUTE ::= {
140 -- WITH SYNTAX PrintableString (SIZE (2))
141 -- (CONSTRAINED BY { })
142 -- ID id-pda-countryOfResidence }
144 -- Certificate extensions
146 -- Biometric info extension
148 -- biometricInfo EXTENSION ::= {
149 -- SYNTAX BiometricSyntax
150 -- IDENTIFIED BY id-pe-biometricInfo }
152 BiometricSyntax ::= SEQUENCE OF BiometricData
154 BiometricData ::= SEQUENCE {
155 typeOfBiometricData TypeOfBiometricData,
156 hashAlgorithm AlgorithmIdentifier,
157 biometricDataHash OCTET STRING,
158 sourceDataUri IA5String OPTIONAL,
161 TypeOfBiometricData ::= CHOICE {
162 predefinedBiometricType PredefinedBiometricType,
163 biometricDataOid OBJECT IDENTIFIER }
165 PredefinedBiometricType ::= INTEGER {
166 picture(0), handwritten-signature(1)}
169 -- QC Statements Extension
170 -- NOTE: This extension does not allow to mix critical and
171 -- non-critical Qualified Certificate Statements. Either all
172 -- statements must be critical or all statements must be
175 -- qcStatements EXTENSION ::= {
176 -- SYNTAX QCStatements
177 -- IDENTIFIED BY id-pe-qcStatements }
179 QCStatements ::= SEQUENCE OF QCStatement
181 QCStatement ::= SEQUENCE {
182 statementId OBJECT IDENTIFIER,
183 statementInfo ANY OPTIONAL }
185 -- QC-STATEMENT ::= CLASS {
186 -- &id OBJECT IDENTIFIER UNIQUE,
189 -- [SYNTAX &Type] IDENTIFIED BY &id }
191 -- qcStatement-1 QC-STATEMENT ::= { SYNTAX SemanticsInformation
192 -- IDENTIFIED BY id-qcs-pkixQCSyntax-v1}
193 -- This statement identifies conformance with requirements
194 -- defined in RFC 3039 (Version 1). This statement
195 -- may optionally contain additional semantics information
196 -- as specified below.
198 -- qcStatement-2 QC-STATEMENT ::= { SYNTAX SemanticsInformation
199 -- IDENTIFIED BY id-qcs-pkixQCSyntax-v2}
200 -- This statement identifies conformance with requirements
201 -- defined in this Qualified Certificate profile
202 -- (Version 2). This statement may optionally contain
203 -- additional semantics information as specified below.
205 SemanticsInformation ::= SEQUENCE {
206 semanticsIdentifier OBJECT IDENTIFIER OPTIONAL,
207 nameRegistrationAuthorities NameRegistrationAuthorities OPTIONAL
210 NameRegistrationAuthorities ::= SEQUENCE OF GeneralName
212 -- The following information object set is defined to constrain the
213 -- set of attributes applications are required to recognize as QCSs.
214 -- SupportedStatements QC-STATEMENT ::= {
216 -- qcStatement-2 , ... }
220 XmppAddr ::= UTF8String