Download OpenTrust root CA Certification Policy

NotBefore
NotAfter
Subject
Subject Public Key Info
Signature (algorithm &
OID)
above).
YYYY/MM/DD HH:MM:SS Z (certificate issuance date)
Refer to section 6.3 above.
C = FR
O = same as RCA or ICA that issues the OCSP certificate
OU = 0002 478217318
CN = OCSP RESPONDER <CN of RCA or ICA that issues the OCSP
certificate> <date de KC>-<additional information used for unicity>
Key generation (algorithm & OID)
Refer to section 7.1.3 above.
Key size
Refer to section 6.1.5 above.
Refer to section 7.1.3 above
Criticality
Value
(True/False)
FALSE
Extensions
Authority Key Identifier
keyIdentifier
Defined by Software used in key ceremony
FALSE
Subject Key Identifier
Methods of generating key
Defined by Software (SHA1 160bits of the subject public
key)
ID
TRUE
Key Usage
digitalSignature
Set
TRUE
Basic Constraint
cA
False
pathLenConstraint
Clear
FALSE
Extended Key Usage
OCSPSigning
Set
OCSPNoCheck
(1.3.6.1.5.5.7.48.1.5)
FALSE
Null
10.5 CRL for RCA and ICA
Fields
Value
Version
V2
Issuer DN
DN of RCA or ICA that issues the OCSP certificate (refer to section 3.1 above)
ThisUpdate
YYYY/MM/DD HH:MM:SS Z (issuance date)
NextUpdate
YYYY/MM/DD HH:MM:SS Z (1 year after issuance date)
Signature (algorithm
& OID)
Refer to section 7.1.3 above
CRL Extension
Include
Critical
(True/False)
Value
CRLNumber
Yes
False
Integer number monotonically increasing.
AKI
Yes
False
Defined by Software used in key ceremony
© OpenTrust. All rights reserved.
Ref : OpenTrust_DMS_RCA Program_OpenTrust_CP v 1.2
- 95 -
www.opentrust.com