[ssl-users] OID for basicConstraints

[John P. Wack]

Hi Folks,

Can anyone either tell me whether there is an assigned OID for the
basicConstraints extension, and where this is documented?  Being
relatively new to this stuff, I'm trying to hack a Netscape CA to add
this extension, and Netscape wants the OID as a sequence of digits
separated by dots.  From the
http://csrc.nist.gov/pki/draft-ietf-pkix-ipki-part1-07.txt, I get

id-ce-basicConstraints OBJECT IDENTIFIER ::=  { id-ce 19 }

   BasicConstraints ::= SEQUENCE {
        cA                      BOOLEAN DEFAULT FALSE,
        pathLenConstraint       INTEGER (0..MAX) OPTIONAL }

but I'm having no luck elsewhere on the web understanding what id-ce
19 means.

Thank you,
John Wack

+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/  |
+-------------------------------------------------------------------------+