Je was op zoek naar: policyconstraints (Engels - Frans)

2.3.14 policyconstraints this extension is not used.
2.3.14 policyconstraints ce champ additionnel n'est pas employé.

a ca must populate and mark as critical the policyconstraints extension.
assurance de niveau ÉlevÉ signature numÉrique confidentialitÉ

7.1.7 usage of policy constraints extension a ca must populate and mark as critical the policyconstraints extension.
7.1.7 utilisation du champ additionnel policyconstraints l’ac doit inscrire, dans le champ additionnel policyconstraints, la valeur « critical ».

policyconstraints this extension specifies constraints which may require explicit certificate policy identification or inhibit policy mapping for the remainder of the certification path.
policyconstraints ce champ additionnel précise les contraintes selon lesquelles il faut soit une identification de politique de certification explicite, soit empêcher l'équivalence de politiques pour le reste de l'itinéraire de certification.

element certificate extensions authoritykeyidentifier subjectkeyidentifier keyusage privatekeyusageperiod certificatepolicies policymappings privateversinfo subjectaltname 4 issueraltname subjectdirectoryattributes basicconstraints nameconstraints policyconstraints extkeyusage crldistributionpoints authorityinfoaccess crl extensions authoritykeyidentifier issueraltname crlnumber deltacrlindicator issuingdistributionpoint crl entry extensions reasoncode holdinstructioncode invaliditydate certificateissue
critique ou non critique critique ou non critique non critique critique ou non critique critique ou non critique critique ou non critique s. o.

minimum pkix compliance element certificate extensions authoritykeyidentifier subjectkeyidentifier keyusage certificatepolicies subjectaltname basicconstraints nameconstraints policyconstraints extkeyusage crldistributionpoints crl extensions authoritykeyidentifier crlnumber crl entry extensions reasoncode ca support yes yes yes yes yes 3 yes optional optional optional optional yes yes optional end entity recognize optional optional yes yes yes yes yes yes yes optional optional optional optional
conformité minimale à la norme pkix Élément champs additionnels de certificat authoritykeyidentifier subjectkeyidentifier keyusage certificatepolicies subjectaltname basicconstraints nameconstraints policyconstraints extkeyusage crldistributionpoints champs additionnels de lcr authoritykeyidentifier crlnumber prise en charge par l'ac oui oui oui oui oui3 oui facultative facultative facultative facultative oui oui reconnaissance d'entité finale facultative facultative oui oui oui oui oui oui oui facultative facultative facultative

table 1 - ca minimum pkix compliance element certificate extensions authoritykeyidentifier subjectkeyidentifier keyusage certificatepolicies subjectaltname basicconstraints nameconstraints policyconstraints extkeyusage crldistributionpoints crl extensions authoritykeyidentifier crlnumber crl entry extensions reasoncode invaliditydate ca support required required required required required 1 required optional optional optional optional2 required required optional optional
prise en charge par l'autorité de certification obligatoire obligatoire obligatoire obligatoire 1 obligatoire obligatoire facultatif facultatif facultatif 2 facultatif obligatoire obligatoire facultatif facultatif

-draftextension pathlenconstraint nameconstraints permittedsubtrees generalsubtrees generalsubtree base generalname othername rfc822name dnsname x400address directoryname edipartyname uri ipaddress registeredid minimum maximum excludedsubtrees generalsubtree base generalname othername rfc822name dnsname x400address directoryname edipartyname uri ipaddress registeredid minimum maximum policyconstraints requireexplicitpolicy skipcerts inhibitpolicymapping pkix type type or value integer sequence generalsubtrees generalsubtree sequence generalname choice type-identifier [1] (ia5string) [2] (ia5string) [3] (oraddress) [4] (dn) [5] (edipartyname) [6] (ia5string) [7] (octet string) [8] (oid) integer integer generalsubtree sequence generalname choice type-identifier [1] (ia5string) [2] (ia5string) [3] (oraddress) [4] (dn) [5] (edipartyname) [6] (ia5string) [7] (octet string) [8] (oid) integer integer sequence [0] skipcerts integer [1] skipcerts integer sequence generalsubtrees generalsubtree sequence generalname choice type-identifier [1] (ia5string) [2] (ia5string) [3] (oraddress) [4] (dn) [5] (edipartyname) [6] (ia5string) [7] (octet string) [8] (oid) integer integer generalsubtree sequence generalname choice type-identifier [1] (ia5string) [2] (ia5string) [3] (oraddress) [4] (dn) [5] (edipartyname) [6] (ia5string) [7] (octet string) [8] (oid) integer integer sequence [0] skipcerts integer [1] skipcerts notes used only in ca certificates and is optional for pkix cas.
-Ébauche champ additionnel pathlenconstraint nameconstraints permittedsubtrees generalsubtrees generalsubtree base generalname othername rfc822name dnsname x400address directoryname edipartyname uri ipaddress registeredid minimum maximum excludedsubtrees generalsubtree base generalname othername rfc822name dnsname x400address directoryname edipartyname uri ipaddress registeredid minimum maximum policyconstraints requireexplicitpolicy type pkix integer sequence generalsubtrees generalsubtree sequence generalname choice type-identifier [1] (ia5string) [2] (ia5string) [3] (oraddress) [4] (dn) [5] (edipartyname) [6] (ia5string) [7] (octet string) [8] (oid) integer integer generalsubtree sequence generalname choice type-identifier [1] (ia5string) [2] (ia5string) [3] (oraddress) [4] (dn) [5] (edipartyname) [6] (ia5string) [7] (octet string) [8] (oid) integer integer sequence [0] skipcerts type ou valeur integer sequence generalsubtrees generalsubtree sequence generalname choice type-identifier [1] (ia5string) [2] (ia5string) [3] (oraddress) [4] (dn) [5] (edipartyname) [6] (ia5string) [7] (octet string) [8] (oid) integer integer generalsubtree sequence generalname choice type-identifier [1] (ia5string) [2] (ia5string) [3] (oraddress) [4] (dn) [5] (edipartyname) [6] (ia5string) [7] (octet string) [8] (oid) integer integer sequence [0] skipcerts notes utilisé uniquement dans les certificats de l'ac et est facultatif pour les ac de la norme pkix.