- OCSP CRL Reference

Submitted by thomas at bender.thinknerd.de from host ( on Thu Jan 9 17:33:47 CET 2003 using a WWW entry form.

OID value:

OID description:

From RFC 2560:

4.4.2  CRL References

   It may be desirable for the OCSP responder to indicate the CRL on
   which a revoked or onHold certificate is found. This can be useful
   where OCSP is used between repositories, and also as an auditing
   mechanism. The CRL may be specified by a URL (the URL at which the
   CRL is available), a number (CRL number) or a time (the time at which
   the relevant CRL was created). These extensions will be specified as
   singleExtensions. The identifier for this extension will be id-pkix-
   ocsp-crl, while the value will be CrlID.

   id-pkix-ocsp-crl       OBJECT IDENTIFIER ::= { id-pkix-ocsp 3 }

   CrlID ::= SEQUENCE {
      crlUrl               [0]     EXPLICIT IA5String OPTIONAL,
      crlNum               [1]     EXPLICIT INTEGER OPTIONAL,
      crlTime              [2]     EXPLICIT GeneralizedTime OPTIONAL }

   For the choice crlUrl, the IA5String will specify the URL at which
   the CRL is available. For crlNum, the INTEGER will specify the value
   of the CRL number extension of the relevant CRL. For crlTime, the
   GeneralizedTime will indicate the time at which the relevant CRL was

URL for further info: http://www.ietf.org/rfc/rfc2560.txt

See also the OID Repository website reference for

Superior references

Search for text in all OIDs starting with

Go to the top node if you need to search all entries.
Tell me about OIDs you know about
Incoming OIDs that have not been proofread yet
Entered: Thu Jan 9 17:33:47 CET 2003 (not changed manually)