Appendix A. Certificate and CRL Extensions

This appendix explains both the standard certificate extensions defined by X.509 v3 and the extensions defined by Netscape that were used in versions of products released before X.509 v3 was finalized. It provides recommendations for extensions to use with specific kinds of certificates, including PKIX Part 1 recommendations.

This appendix contains the following sections:

Section A.1, “Introduction to Certificate Extensions”
Section A.2, “Note on Object Identifiers”
Section A.3, “Standard X.509 v3 Certificate Extensions”
Section A.4, “Introduction to CRL Extensions”
Section A.5, “Standard X.509 v3 CRL Extensions”