Signature

NO_POLICY
ANY_POLICY
IMPLICIT_POLICY

Basic Signature Constraints

Signing certificate

digitalSignature
nonRepudiation
keyEncipherment
dataEncipherment
keyAgreement
keyCertSign
crlSign
encipherOnly
decipherOnly

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5

Certification authority (CA) certificate

digitalSignature
nonRepudiation
keyEncipherment
dataEncipherment
keyAgreement
keyCertSign
crlSign
encipherOnly
decipherOnly

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5

Signed attributes

Unsigned attributes

Countersignature

NO_POLICY
ANY_POLICY
IMPLICIT_POLICY

Basic Signature Constraints

Signing certificate

digitalSignature
nonRepudiation
keyEncipherment
dataEncipherment
keyAgreement
keyCertSign
crlSign
encipherOnly
decipherOnly

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5

Certification authority (CA) certificate

digitalSignature
nonRepudiation
keyEncipherment
dataEncipherment
keyAgreement
keyCertSign
crlSign
encipherOnly
decipherOnly

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5

Signed attributes

Unsigned attributes

Timestamp

Basic Signature Constraints

Signing certificate

digitalSignature
nonRepudiation
keyEncipherment
dataEncipherment
keyAgreement
keyCertSign
crlSign
encipherOnly
decipherOnly

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5

Certification authority (CA) certificate

digitalSignature
nonRepudiation
keyEncipherment
dataEncipherment
keyAgreement
keyCertSign
crlSign
encipherOnly
decipherOnly

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5

Revocation

Basic Signature Constraints

Signing certificate

digitalSignature
nonRepudiation
keyEncipherment
dataEncipherment
keyAgreement
keyCertSign
crlSign
encipherOnly
decipherOnly

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5

Certification authority (CA) certificate

digitalSignature
nonRepudiation
keyEncipherment
dataEncipherment
keyAgreement
keyCertSign
crlSign
encipherOnly
decipherOnly

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5

Cryptographic

RSA
DSA
ECDSA
HMAC
SHA1
SHA224
SHA256
SHA384
SHA512
RIPEMD160
MD2
MD5