Field | Code Signing Certificate Value |
Version | V3 (2) |
Serial Number | Must be unique |
Issuer Signature Algorithm | sha-1WithRSAEncryption |
Issuer Distinguished Name | cn=ORC ACES <CA Name>, o=ORC PKI, c=US |
Validity Period | 2 years from date of issue |
Subject Distinguished Name | cn=CS.<Code Signer Organization Name>.<optional number>, <ou=Code Signer Company Name>, o=<Consistent with Subscriber Signing Certificate> , c=US |
Subject Public Key Information | 1024 bit RSA key modulus, rsaEncryption |
Issuer Unique Identifier | Not Present |
Subject Unique Identifier | Not Present |
Issuer’s Signature | sha-1WithRSAEncryption |
Extensions | |
Authority Key Identifier | c=no; octet string |
Subject Key Identifier | c=no; octet string |
Key Usage | c=yes; digitalSignature, nonRepudiation |
Extended Key Usage | c=yes; { iso(1) identified-organization(3) DoD(6) internet(1) security(5) mechanisms(5) pkix(7) id-kp(3) id-kp-codesigning (3)} |
Private Key Usage Period | Not Present |
Certificate Policies | c=no; {2 16 840 1 101 3 2 1 12 1}, {2 16 840 1 101 3 2 1 12 2}; optional: id-fpki-common-hardware::={2 16 840 1 101 3 2 1 3 7} |
Policy Mapping | Not Present |
Subject Alternative Name | always present; c=no; cn=<private key holder name>, <ou=Code Signer Company Name>, o==<Consistent with Signing Certificate>, c=US |
Issuer Alternative Name | Not Present |
Subject Directory Attributes | Not Present |
Basic Constraints | c=yes; cA=false |
Name Constraints | Not Present |
Policy Constraints | Not Present |
Authority Information Access | c=no; ocsp= http://eva.orc.com, caIssuers=ldap://aces-ds.orc.com/cn=ORC ACES <CA Name>, o=ORC PKI, c=US?cacertificate;binary, caIssuers=http://aces.orc.com/caCerts/<CAType>.p7b |
CRL Distribution Points | c=no; always present, {ldap://aces-ds.orc.com/cn=ORC ACES <CA Name>, o=ORC PKI, c=US?certificaterevocationlist;binary} {http://aces.orc.com/CRLs/<CAType>.crl} |