2.5.29.28 - Issuing Distribution Point

OID value: 2.5.29.28

OID description:
This CRL extension field identifies the CRL distribution point for this particular CRL, and indicates if the CRL is limited to revocations for end-entity certificates only, for CA-certificates only, or for a limited set of reasons only. The CRL is signed by the CRL issuer's key - CRL distribution points do not have their own key pairs. However, for a CRL distributed via the Directory, the CRL is stored in the entry of the CRL distribution point, which may not be in the directory entry of the CRL issuer.

This extension is always critical.

issuingDistributionPoint EXTENSION ::= {
	SYNTAX IssuingDistPointSyntax
	IDENTIFIED BY id-ce-issuingDistributionPoint
}

IssuingDistPointSyntax ::= SEQUENCE {
	distributionPoint	[0] DistributionPointName OPTIONAL,
	onlyContainsUserCerts	[1] BOOLEAN DEFAULT FALSE,
	onlyContainsCACerts	[2] BOOLEAN DEFAULT FALSE,
	onlySomeReasons		[3] ReasonFlags OPTIONAL,
	indirectCRL		[4] BOOLEAN DEFAUTL FALSE
}

See also the OID Repository website reference for 2.5.29.28

Superior references

• 2.5.29 - certificateExtension (id-ce)
• 2.5 - X.500 Directory Services
• 2 - ISO/ITU-T jointly assigned OIDs
• Top of OID tree