2.5.29.32 - Certificate Policies

OID value: 2.5.29.32

OID description:
id-ce-certificatePolicies

This extension lists certificate policies, recognized by the issuing CA, that apply to the certificate, together with optional qualifier information pertaining to these certificate policies. Typically, different certificate policies will relate to different applications which may use the certified key.

certificatePolicies EXTENSION ::= {
	SYNTAX CertificatePoliciesSyntax
	IDENTIFIED BY id-ce-certificatePolicies
}

CertificatePoliciesSyntax ::= SEQUENCE SIZE (1..MAX) OF
	PolicyInformation

PolicyInformation ::= SEQUENCE {
	policyIdentifier CertPolicyId,
	policyQualifier SEQUENCE SIZE (1..MAX) OF
		PolicyQualifierInfo OPTIONAL
}

CertPolicyId ::= OBJECT IDENTIFIER

PolicyQualiferInfo ::= SEQUENCE {
	policyQualifierId CERT-POLICY-QUALIFIER.&id
			({SupportedPolicyQualifiers}),
	qualifier CERT-POLICY-QUALIFIER.&Qualifier
			({SupportedPolicyQualifiers}
			 { at policyQualifierId}) 
			OPTIONAL
}

SupportedPolicyQualifers CERT-POLICY-QUALIFIER ::= { ... }

CERT-POLICY-QUALIFIER ::= CLASS {
	&id	OBJECT IDENTIFIER UNIQUE,
	&Qualifier OPTIONAL
} WITH SYNTAX {
	POLICY-QUALIFIER-ID &id
	[QUALIFIER-TYPE &Qualifier]
}

See also the OID Repository website reference for 2.5.29.32

Superior references

• 2.5.29 - certificateExtension (id-ce)
• 2.5 - X.500 Directory Services
• 2 - ISO/ITU-T jointly assigned OIDs
• Top of OID tree

Subsidiary references (single level)

• 2.5.29.32.0 - "anyPolicy" - Wildcard certificate policy OID defined in RFC 3280