1CRLDP extension taken from NIST PKITS (BasicSelfIssuedCRLSigningKeyCRLCert.crt): 2 3 X509v3 CRL Distribution Points: 4 5 Full Name: 6 DirName: C = US, O = Test Certificates 2011, CN = Self-Issued Cert DP for Basic Self-Issued CRL Signing Key CA 7 8#-----BEGIN EXTENSION----- 9SEQUENCE { 10 # cRLDistributionPoints 11 OBJECT_IDENTIFIER { 2.5.29.31 } 12 OCTET_STRING { 13 SEQUENCE { 14 SEQUENCE { 15 [0] { 16 [0] { 17 [4] { 18 SEQUENCE { 19 SET { 20 SEQUENCE { 21 # countryName 22 OBJECT_IDENTIFIER { 2.5.4.6 } 23 PrintableString { "US" } 24 } 25 } 26 SET { 27 SEQUENCE { 28 # organizationName 29 OBJECT_IDENTIFIER { 2.5.4.10 } 30 PrintableString { "Test Certificates 2011" } 31 } 32 } 33 SET { 34 SEQUENCE { 35 # commonName 36 OBJECT_IDENTIFIER { 2.5.4.3 } 37 PrintableString { "Self-Issued Cert DP for Basic Self-Issued CRL Signing Key CA" } 38 } 39 } 40 } 41 } 42 } 43 } 44 } 45 } 46 } 47} 48#-----END EXTENSION----- 49 50-----BEGIN CERTIFICATE----- 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 52-----END CERTIFICATE----- 53