OID value: 2.5.29.28
OID description:
This CRL extension field identifies the CRL distribution
point for this particular CRL, and indicates if the CRL
is limited to revocations for end-entity certificates only,
for CA-certificates only, or for a limited set of reasons
only. The CRL is signed by the CRL issuer's key - CRL
distribution points do not have their own key pairs.
However, for a CRL distributed via the Directory, the CRL
is stored in the entry of the CRL distribution point, which
may not be in the directory entry of the CRL issuer.
This extension is always critical.
issuingDistributionPoint EXTENSION ::= { SYNTAX IssuingDistPointSyntax IDENTIFIED BY id-ce-issuingDistributionPoint } IssuingDistPointSyntax ::= SEQUENCE { distributionPoint [0] DistributionPointName OPTIONAL, onlyContainsUserCerts [1] BOOLEAN DEFAULT FALSE, onlyContainsCACerts [2] BOOLEAN DEFAULT FALSE, onlySomeReasons [3] ReasonFlags OPTIONAL, indirectCRL [4] BOOLEAN DEFAUTL FALSE }
See also the OID Repository website reference for 2.5.29.28