_oid.py 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313
  1. # This file is dual licensed under the terms of the Apache License, Version
  2. # 2.0, and the BSD License. See the LICENSE file in the root of this repository
  3. # for complete details.
  4. from __future__ import annotations
  5. from cryptography.hazmat.bindings._rust import (
  6. ObjectIdentifier as ObjectIdentifier,
  7. )
  8. from cryptography.hazmat.primitives import hashes
  9. class ExtensionOID:
  10. SUBJECT_DIRECTORY_ATTRIBUTES = ObjectIdentifier("2.5.29.9")
  11. SUBJECT_KEY_IDENTIFIER = ObjectIdentifier("2.5.29.14")
  12. KEY_USAGE = ObjectIdentifier("2.5.29.15")
  13. SUBJECT_ALTERNATIVE_NAME = ObjectIdentifier("2.5.29.17")
  14. ISSUER_ALTERNATIVE_NAME = ObjectIdentifier("2.5.29.18")
  15. BASIC_CONSTRAINTS = ObjectIdentifier("2.5.29.19")
  16. NAME_CONSTRAINTS = ObjectIdentifier("2.5.29.30")
  17. CRL_DISTRIBUTION_POINTS = ObjectIdentifier("2.5.29.31")
  18. CERTIFICATE_POLICIES = ObjectIdentifier("2.5.29.32")
  19. POLICY_MAPPINGS = ObjectIdentifier("2.5.29.33")
  20. AUTHORITY_KEY_IDENTIFIER = ObjectIdentifier("2.5.29.35")
  21. POLICY_CONSTRAINTS = ObjectIdentifier("2.5.29.36")
  22. EXTENDED_KEY_USAGE = ObjectIdentifier("2.5.29.37")
  23. FRESHEST_CRL = ObjectIdentifier("2.5.29.46")
  24. INHIBIT_ANY_POLICY = ObjectIdentifier("2.5.29.54")
  25. ISSUING_DISTRIBUTION_POINT = ObjectIdentifier("2.5.29.28")
  26. AUTHORITY_INFORMATION_ACCESS = ObjectIdentifier("1.3.6.1.5.5.7.1.1")
  27. SUBJECT_INFORMATION_ACCESS = ObjectIdentifier("1.3.6.1.5.5.7.1.11")
  28. OCSP_NO_CHECK = ObjectIdentifier("1.3.6.1.5.5.7.48.1.5")
  29. TLS_FEATURE = ObjectIdentifier("1.3.6.1.5.5.7.1.24")
  30. CRL_NUMBER = ObjectIdentifier("2.5.29.20")
  31. DELTA_CRL_INDICATOR = ObjectIdentifier("2.5.29.27")
  32. PRECERT_SIGNED_CERTIFICATE_TIMESTAMPS = ObjectIdentifier(
  33. "1.3.6.1.4.1.11129.2.4.2"
  34. )
  35. PRECERT_POISON = ObjectIdentifier("1.3.6.1.4.1.11129.2.4.3")
  36. SIGNED_CERTIFICATE_TIMESTAMPS = ObjectIdentifier("1.3.6.1.4.1.11129.2.4.5")
  37. MS_CERTIFICATE_TEMPLATE = ObjectIdentifier("1.3.6.1.4.1.311.21.7")
  38. class OCSPExtensionOID:
  39. NONCE = ObjectIdentifier("1.3.6.1.5.5.7.48.1.2")
  40. ACCEPTABLE_RESPONSES = ObjectIdentifier("1.3.6.1.5.5.7.48.1.4")
  41. class CRLEntryExtensionOID:
  42. CERTIFICATE_ISSUER = ObjectIdentifier("2.5.29.29")
  43. CRL_REASON = ObjectIdentifier("2.5.29.21")
  44. INVALIDITY_DATE = ObjectIdentifier("2.5.29.24")
  45. class NameOID:
  46. COMMON_NAME = ObjectIdentifier("2.5.4.3")
  47. COUNTRY_NAME = ObjectIdentifier("2.5.4.6")
  48. LOCALITY_NAME = ObjectIdentifier("2.5.4.7")
  49. STATE_OR_PROVINCE_NAME = ObjectIdentifier("2.5.4.8")
  50. STREET_ADDRESS = ObjectIdentifier("2.5.4.9")
  51. ORGANIZATION_IDENTIFIER = ObjectIdentifier("2.5.4.97")
  52. ORGANIZATION_NAME = ObjectIdentifier("2.5.4.10")
  53. ORGANIZATIONAL_UNIT_NAME = ObjectIdentifier("2.5.4.11")
  54. SERIAL_NUMBER = ObjectIdentifier("2.5.4.5")
  55. SURNAME = ObjectIdentifier("2.5.4.4")
  56. GIVEN_NAME = ObjectIdentifier("2.5.4.42")
  57. TITLE = ObjectIdentifier("2.5.4.12")
  58. INITIALS = ObjectIdentifier("2.5.4.43")
  59. GENERATION_QUALIFIER = ObjectIdentifier("2.5.4.44")
  60. X500_UNIQUE_IDENTIFIER = ObjectIdentifier("2.5.4.45")
  61. DN_QUALIFIER = ObjectIdentifier("2.5.4.46")
  62. PSEUDONYM = ObjectIdentifier("2.5.4.65")
  63. USER_ID = ObjectIdentifier("0.9.2342.19200300.100.1.1")
  64. DOMAIN_COMPONENT = ObjectIdentifier("0.9.2342.19200300.100.1.25")
  65. EMAIL_ADDRESS = ObjectIdentifier("1.2.840.113549.1.9.1")
  66. JURISDICTION_COUNTRY_NAME = ObjectIdentifier("1.3.6.1.4.1.311.60.2.1.3")
  67. JURISDICTION_LOCALITY_NAME = ObjectIdentifier("1.3.6.1.4.1.311.60.2.1.1")
  68. JURISDICTION_STATE_OR_PROVINCE_NAME = ObjectIdentifier(
  69. "1.3.6.1.4.1.311.60.2.1.2"
  70. )
  71. BUSINESS_CATEGORY = ObjectIdentifier("2.5.4.15")
  72. POSTAL_ADDRESS = ObjectIdentifier("2.5.4.16")
  73. POSTAL_CODE = ObjectIdentifier("2.5.4.17")
  74. INN = ObjectIdentifier("1.2.643.3.131.1.1")
  75. OGRN = ObjectIdentifier("1.2.643.100.1")
  76. SNILS = ObjectIdentifier("1.2.643.100.3")
  77. UNSTRUCTURED_NAME = ObjectIdentifier("1.2.840.113549.1.9.2")
  78. class SignatureAlgorithmOID:
  79. RSA_WITH_MD5 = ObjectIdentifier("1.2.840.113549.1.1.4")
  80. RSA_WITH_SHA1 = ObjectIdentifier("1.2.840.113549.1.1.5")
  81. # This is an alternate OID for RSA with SHA1 that is occasionally seen
  82. _RSA_WITH_SHA1 = ObjectIdentifier("1.3.14.3.2.29")
  83. RSA_WITH_SHA224 = ObjectIdentifier("1.2.840.113549.1.1.14")
  84. RSA_WITH_SHA256 = ObjectIdentifier("1.2.840.113549.1.1.11")
  85. RSA_WITH_SHA384 = ObjectIdentifier("1.2.840.113549.1.1.12")
  86. RSA_WITH_SHA512 = ObjectIdentifier("1.2.840.113549.1.1.13")
  87. RSA_WITH_SHA3_224 = ObjectIdentifier("2.16.840.1.101.3.4.3.13")
  88. RSA_WITH_SHA3_256 = ObjectIdentifier("2.16.840.1.101.3.4.3.14")
  89. RSA_WITH_SHA3_384 = ObjectIdentifier("2.16.840.1.101.3.4.3.15")
  90. RSA_WITH_SHA3_512 = ObjectIdentifier("2.16.840.1.101.3.4.3.16")
  91. RSASSA_PSS = ObjectIdentifier("1.2.840.113549.1.1.10")
  92. ECDSA_WITH_SHA1 = ObjectIdentifier("1.2.840.10045.4.1")
  93. ECDSA_WITH_SHA224 = ObjectIdentifier("1.2.840.10045.4.3.1")
  94. ECDSA_WITH_SHA256 = ObjectIdentifier("1.2.840.10045.4.3.2")
  95. ECDSA_WITH_SHA384 = ObjectIdentifier("1.2.840.10045.4.3.3")
  96. ECDSA_WITH_SHA512 = ObjectIdentifier("1.2.840.10045.4.3.4")
  97. ECDSA_WITH_SHA3_224 = ObjectIdentifier("2.16.840.1.101.3.4.3.9")
  98. ECDSA_WITH_SHA3_256 = ObjectIdentifier("2.16.840.1.101.3.4.3.10")
  99. ECDSA_WITH_SHA3_384 = ObjectIdentifier("2.16.840.1.101.3.4.3.11")
  100. ECDSA_WITH_SHA3_512 = ObjectIdentifier("2.16.840.1.101.3.4.3.12")
  101. DSA_WITH_SHA1 = ObjectIdentifier("1.2.840.10040.4.3")
  102. DSA_WITH_SHA224 = ObjectIdentifier("2.16.840.1.101.3.4.3.1")
  103. DSA_WITH_SHA256 = ObjectIdentifier("2.16.840.1.101.3.4.3.2")
  104. DSA_WITH_SHA384 = ObjectIdentifier("2.16.840.1.101.3.4.3.3")
  105. DSA_WITH_SHA512 = ObjectIdentifier("2.16.840.1.101.3.4.3.4")
  106. ED25519 = ObjectIdentifier("1.3.101.112")
  107. ED448 = ObjectIdentifier("1.3.101.113")
  108. GOSTR3411_94_WITH_3410_2001 = ObjectIdentifier("1.2.643.2.2.3")
  109. GOSTR3410_2012_WITH_3411_2012_256 = ObjectIdentifier("1.2.643.7.1.1.3.2")
  110. GOSTR3410_2012_WITH_3411_2012_512 = ObjectIdentifier("1.2.643.7.1.1.3.3")
  111. _SIG_OIDS_TO_HASH: dict[ObjectIdentifier, hashes.HashAlgorithm | None] = {
  112. SignatureAlgorithmOID.RSA_WITH_MD5: hashes.MD5(),
  113. SignatureAlgorithmOID.RSA_WITH_SHA1: hashes.SHA1(),
  114. SignatureAlgorithmOID._RSA_WITH_SHA1: hashes.SHA1(),
  115. SignatureAlgorithmOID.RSA_WITH_SHA224: hashes.SHA224(),
  116. SignatureAlgorithmOID.RSA_WITH_SHA256: hashes.SHA256(),
  117. SignatureAlgorithmOID.RSA_WITH_SHA384: hashes.SHA384(),
  118. SignatureAlgorithmOID.RSA_WITH_SHA512: hashes.SHA512(),
  119. SignatureAlgorithmOID.RSA_WITH_SHA3_224: hashes.SHA3_224(),
  120. SignatureAlgorithmOID.RSA_WITH_SHA3_256: hashes.SHA3_256(),
  121. SignatureAlgorithmOID.RSA_WITH_SHA3_384: hashes.SHA3_384(),
  122. SignatureAlgorithmOID.RSA_WITH_SHA3_512: hashes.SHA3_512(),
  123. SignatureAlgorithmOID.ECDSA_WITH_SHA1: hashes.SHA1(),
  124. SignatureAlgorithmOID.ECDSA_WITH_SHA224: hashes.SHA224(),
  125. SignatureAlgorithmOID.ECDSA_WITH_SHA256: hashes.SHA256(),
  126. SignatureAlgorithmOID.ECDSA_WITH_SHA384: hashes.SHA384(),
  127. SignatureAlgorithmOID.ECDSA_WITH_SHA512: hashes.SHA512(),
  128. SignatureAlgorithmOID.ECDSA_WITH_SHA3_224: hashes.SHA3_224(),
  129. SignatureAlgorithmOID.ECDSA_WITH_SHA3_256: hashes.SHA3_256(),
  130. SignatureAlgorithmOID.ECDSA_WITH_SHA3_384: hashes.SHA3_384(),
  131. SignatureAlgorithmOID.ECDSA_WITH_SHA3_512: hashes.SHA3_512(),
  132. SignatureAlgorithmOID.DSA_WITH_SHA1: hashes.SHA1(),
  133. SignatureAlgorithmOID.DSA_WITH_SHA224: hashes.SHA224(),
  134. SignatureAlgorithmOID.DSA_WITH_SHA256: hashes.SHA256(),
  135. SignatureAlgorithmOID.ED25519: None,
  136. SignatureAlgorithmOID.ED448: None,
  137. SignatureAlgorithmOID.GOSTR3411_94_WITH_3410_2001: None,
  138. SignatureAlgorithmOID.GOSTR3410_2012_WITH_3411_2012_256: None,
  139. SignatureAlgorithmOID.GOSTR3410_2012_WITH_3411_2012_512: None,
  140. }
  141. class PublicKeyAlgorithmOID:
  142. DSA = ObjectIdentifier("1.2.840.10040.4.1")
  143. EC_PUBLIC_KEY = ObjectIdentifier("1.2.840.10045.2.1")
  144. RSAES_PKCS1_v1_5 = ObjectIdentifier("1.2.840.113549.1.1.1")
  145. RSASSA_PSS = ObjectIdentifier("1.2.840.113549.1.1.10")
  146. X25519 = ObjectIdentifier("1.3.101.110")
  147. X448 = ObjectIdentifier("1.3.101.111")
  148. ED25519 = ObjectIdentifier("1.3.101.112")
  149. ED448 = ObjectIdentifier("1.3.101.113")
  150. class ExtendedKeyUsageOID:
  151. SERVER_AUTH = ObjectIdentifier("1.3.6.1.5.5.7.3.1")
  152. CLIENT_AUTH = ObjectIdentifier("1.3.6.1.5.5.7.3.2")
  153. CODE_SIGNING = ObjectIdentifier("1.3.6.1.5.5.7.3.3")
  154. EMAIL_PROTECTION = ObjectIdentifier("1.3.6.1.5.5.7.3.4")
  155. TIME_STAMPING = ObjectIdentifier("1.3.6.1.5.5.7.3.8")
  156. OCSP_SIGNING = ObjectIdentifier("1.3.6.1.5.5.7.3.9")
  157. ANY_EXTENDED_KEY_USAGE = ObjectIdentifier("2.5.29.37.0")
  158. SMARTCARD_LOGON = ObjectIdentifier("1.3.6.1.4.1.311.20.2.2")
  159. KERBEROS_PKINIT_KDC = ObjectIdentifier("1.3.6.1.5.2.3.5")
  160. IPSEC_IKE = ObjectIdentifier("1.3.6.1.5.5.7.3.17")
  161. CERTIFICATE_TRANSPARENCY = ObjectIdentifier("1.3.6.1.4.1.11129.2.4.4")
  162. class AuthorityInformationAccessOID:
  163. CA_ISSUERS = ObjectIdentifier("1.3.6.1.5.5.7.48.2")
  164. OCSP = ObjectIdentifier("1.3.6.1.5.5.7.48.1")
  165. class SubjectInformationAccessOID:
  166. CA_REPOSITORY = ObjectIdentifier("1.3.6.1.5.5.7.48.5")
  167. class CertificatePoliciesOID:
  168. CPS_QUALIFIER = ObjectIdentifier("1.3.6.1.5.5.7.2.1")
  169. CPS_USER_NOTICE = ObjectIdentifier("1.3.6.1.5.5.7.2.2")
  170. ANY_POLICY = ObjectIdentifier("2.5.29.32.0")
  171. class AttributeOID:
  172. CHALLENGE_PASSWORD = ObjectIdentifier("1.2.840.113549.1.9.7")
  173. UNSTRUCTURED_NAME = ObjectIdentifier("1.2.840.113549.1.9.2")
  174. _OID_NAMES = {
  175. NameOID.COMMON_NAME: "commonName",
  176. NameOID.COUNTRY_NAME: "countryName",
  177. NameOID.LOCALITY_NAME: "localityName",
  178. NameOID.STATE_OR_PROVINCE_NAME: "stateOrProvinceName",
  179. NameOID.STREET_ADDRESS: "streetAddress",
  180. NameOID.ORGANIZATION_NAME: "organizationName",
  181. NameOID.ORGANIZATIONAL_UNIT_NAME: "organizationalUnitName",
  182. NameOID.SERIAL_NUMBER: "serialNumber",
  183. NameOID.SURNAME: "surname",
  184. NameOID.GIVEN_NAME: "givenName",
  185. NameOID.TITLE: "title",
  186. NameOID.GENERATION_QUALIFIER: "generationQualifier",
  187. NameOID.X500_UNIQUE_IDENTIFIER: "x500UniqueIdentifier",
  188. NameOID.DN_QUALIFIER: "dnQualifier",
  189. NameOID.PSEUDONYM: "pseudonym",
  190. NameOID.USER_ID: "userID",
  191. NameOID.DOMAIN_COMPONENT: "domainComponent",
  192. NameOID.EMAIL_ADDRESS: "emailAddress",
  193. NameOID.JURISDICTION_COUNTRY_NAME: "jurisdictionCountryName",
  194. NameOID.JURISDICTION_LOCALITY_NAME: "jurisdictionLocalityName",
  195. NameOID.JURISDICTION_STATE_OR_PROVINCE_NAME: (
  196. "jurisdictionStateOrProvinceName"
  197. ),
  198. NameOID.BUSINESS_CATEGORY: "businessCategory",
  199. NameOID.POSTAL_ADDRESS: "postalAddress",
  200. NameOID.POSTAL_CODE: "postalCode",
  201. NameOID.INN: "INN",
  202. NameOID.OGRN: "OGRN",
  203. NameOID.SNILS: "SNILS",
  204. NameOID.UNSTRUCTURED_NAME: "unstructuredName",
  205. SignatureAlgorithmOID.RSA_WITH_MD5: "md5WithRSAEncryption",
  206. SignatureAlgorithmOID.RSA_WITH_SHA1: "sha1WithRSAEncryption",
  207. SignatureAlgorithmOID.RSA_WITH_SHA224: "sha224WithRSAEncryption",
  208. SignatureAlgorithmOID.RSA_WITH_SHA256: "sha256WithRSAEncryption",
  209. SignatureAlgorithmOID.RSA_WITH_SHA384: "sha384WithRSAEncryption",
  210. SignatureAlgorithmOID.RSA_WITH_SHA512: "sha512WithRSAEncryption",
  211. SignatureAlgorithmOID.RSASSA_PSS: "RSASSA-PSS",
  212. SignatureAlgorithmOID.ECDSA_WITH_SHA1: "ecdsa-with-SHA1",
  213. SignatureAlgorithmOID.ECDSA_WITH_SHA224: "ecdsa-with-SHA224",
  214. SignatureAlgorithmOID.ECDSA_WITH_SHA256: "ecdsa-with-SHA256",
  215. SignatureAlgorithmOID.ECDSA_WITH_SHA384: "ecdsa-with-SHA384",
  216. SignatureAlgorithmOID.ECDSA_WITH_SHA512: "ecdsa-with-SHA512",
  217. SignatureAlgorithmOID.DSA_WITH_SHA1: "dsa-with-sha1",
  218. SignatureAlgorithmOID.DSA_WITH_SHA224: "dsa-with-sha224",
  219. SignatureAlgorithmOID.DSA_WITH_SHA256: "dsa-with-sha256",
  220. SignatureAlgorithmOID.ED25519: "ed25519",
  221. SignatureAlgorithmOID.ED448: "ed448",
  222. SignatureAlgorithmOID.GOSTR3411_94_WITH_3410_2001: (
  223. "GOST R 34.11-94 with GOST R 34.10-2001"
  224. ),
  225. SignatureAlgorithmOID.GOSTR3410_2012_WITH_3411_2012_256: (
  226. "GOST R 34.10-2012 with GOST R 34.11-2012 (256 bit)"
  227. ),
  228. SignatureAlgorithmOID.GOSTR3410_2012_WITH_3411_2012_512: (
  229. "GOST R 34.10-2012 with GOST R 34.11-2012 (512 bit)"
  230. ),
  231. PublicKeyAlgorithmOID.DSA: "dsaEncryption",
  232. PublicKeyAlgorithmOID.EC_PUBLIC_KEY: "id-ecPublicKey",
  233. PublicKeyAlgorithmOID.RSAES_PKCS1_v1_5: "rsaEncryption",
  234. PublicKeyAlgorithmOID.RSASSA_PSS: "rsassaPss",
  235. PublicKeyAlgorithmOID.X25519: "X25519",
  236. PublicKeyAlgorithmOID.X448: "X448",
  237. ExtendedKeyUsageOID.SERVER_AUTH: "serverAuth",
  238. ExtendedKeyUsageOID.CLIENT_AUTH: "clientAuth",
  239. ExtendedKeyUsageOID.CODE_SIGNING: "codeSigning",
  240. ExtendedKeyUsageOID.EMAIL_PROTECTION: "emailProtection",
  241. ExtendedKeyUsageOID.TIME_STAMPING: "timeStamping",
  242. ExtendedKeyUsageOID.OCSP_SIGNING: "OCSPSigning",
  243. ExtendedKeyUsageOID.SMARTCARD_LOGON: "msSmartcardLogin",
  244. ExtendedKeyUsageOID.KERBEROS_PKINIT_KDC: "pkInitKDC",
  245. ExtensionOID.SUBJECT_DIRECTORY_ATTRIBUTES: "subjectDirectoryAttributes",
  246. ExtensionOID.SUBJECT_KEY_IDENTIFIER: "subjectKeyIdentifier",
  247. ExtensionOID.KEY_USAGE: "keyUsage",
  248. ExtensionOID.SUBJECT_ALTERNATIVE_NAME: "subjectAltName",
  249. ExtensionOID.ISSUER_ALTERNATIVE_NAME: "issuerAltName",
  250. ExtensionOID.BASIC_CONSTRAINTS: "basicConstraints",
  251. ExtensionOID.PRECERT_SIGNED_CERTIFICATE_TIMESTAMPS: (
  252. "signedCertificateTimestampList"
  253. ),
  254. ExtensionOID.SIGNED_CERTIFICATE_TIMESTAMPS: (
  255. "signedCertificateTimestampList"
  256. ),
  257. ExtensionOID.PRECERT_POISON: "ctPoison",
  258. ExtensionOID.MS_CERTIFICATE_TEMPLATE: "msCertificateTemplate",
  259. CRLEntryExtensionOID.CRL_REASON: "cRLReason",
  260. CRLEntryExtensionOID.INVALIDITY_DATE: "invalidityDate",
  261. CRLEntryExtensionOID.CERTIFICATE_ISSUER: "certificateIssuer",
  262. ExtensionOID.NAME_CONSTRAINTS: "nameConstraints",
  263. ExtensionOID.CRL_DISTRIBUTION_POINTS: "cRLDistributionPoints",
  264. ExtensionOID.CERTIFICATE_POLICIES: "certificatePolicies",
  265. ExtensionOID.POLICY_MAPPINGS: "policyMappings",
  266. ExtensionOID.AUTHORITY_KEY_IDENTIFIER: "authorityKeyIdentifier",
  267. ExtensionOID.POLICY_CONSTRAINTS: "policyConstraints",
  268. ExtensionOID.EXTENDED_KEY_USAGE: "extendedKeyUsage",
  269. ExtensionOID.FRESHEST_CRL: "freshestCRL",
  270. ExtensionOID.INHIBIT_ANY_POLICY: "inhibitAnyPolicy",
  271. ExtensionOID.ISSUING_DISTRIBUTION_POINT: "issuingDistributionPoint",
  272. ExtensionOID.AUTHORITY_INFORMATION_ACCESS: "authorityInfoAccess",
  273. ExtensionOID.SUBJECT_INFORMATION_ACCESS: "subjectInfoAccess",
  274. ExtensionOID.OCSP_NO_CHECK: "OCSPNoCheck",
  275. ExtensionOID.CRL_NUMBER: "cRLNumber",
  276. ExtensionOID.DELTA_CRL_INDICATOR: "deltaCRLIndicator",
  277. ExtensionOID.TLS_FEATURE: "TLSFeature",
  278. AuthorityInformationAccessOID.OCSP: "OCSP",
  279. AuthorityInformationAccessOID.CA_ISSUERS: "caIssuers",
  280. SubjectInformationAccessOID.CA_REPOSITORY: "caRepository",
  281. CertificatePoliciesOID.CPS_QUALIFIER: "id-qt-cps",
  282. CertificatePoliciesOID.CPS_USER_NOTICE: "id-qt-unotice",
  283. OCSPExtensionOID.NONCE: "OCSPNonce",
  284. AttributeOID.CHALLENGE_PASSWORD: "challengePassword",
  285. }