Re: Policy Contraints Object Identifier

[dpkemp@xxxxxxxxxxxxxx (David P. Kemp)]

> From: Warwick Ford <wford@verisign.com>
> 
> The OID for policy constraints in the X.509 DAM was, at one stage, 34, but
> the ASN.1 was changed at a later stage and the new number 36 was assigned
> for the final X.509 text.  The current PKIX document is therefore correct.
> The 12/96 version of PKIX presumably erroneously took its ASN.1 from an
> obsolete X.509 draft.


The current draft is correct on Pages 30, 67, 86, and incorrect on Page 88.



Some other corrections:

Page 88 neglects to include the definition of id-ce-extKeyUsage
(extension number 37).

On Page 86, an extraneous definition of CertPolicySet should be deleted,
since that item was removed from the PolicyConstraints extension

On Pages 63 and 80, the definition of Attribute has "type AttributeValue"
instead of "type AttributeType".

On Pages 65 and 83, KeyUsage is missing definitions for bits 7 and 8.  The
definitions are present on Page 21.