1CRLDP extension taken from NIST PKITS (ValidcRLIssuerTest28EE.crt)
2
3    X509v3 CRL Distribution Points:
4
5        Full Name:
6          DirName: C = US, O = Test Certificates 2011, OU = indirectCRL CA3 cRLIssuer, CN = indirect CRL for indirectCRL CA3
7        CRL Issuer:
8          DirName: C = US, O = Test Certificates 2011, OU = indirectCRL CA3 cRLIssuer
9
10
11
12#-----BEGIN EXTENSION-----
13SEQUENCE {
14  # cRLDistributionPoints
15  OBJECT_IDENTIFIER { 2.5.29.31 }
16  OCTET_STRING {
17    SEQUENCE {
18      SEQUENCE {
19        [0] {
20          [0] {
21            [4] {
22              SEQUENCE {
23                SET {
24                  SEQUENCE {
25                    # countryName
26                    OBJECT_IDENTIFIER { 2.5.4.6 }
27                    PrintableString { "US" }
28                  }
29                }
30                SET {
31                  SEQUENCE {
32                    # organizationName
33                    OBJECT_IDENTIFIER { 2.5.4.10 }
34                    PrintableString { "Test Certificates 2011" }
35                  }
36                }
37                SET {
38                  SEQUENCE {
39                    # organizationUnitName
40                    OBJECT_IDENTIFIER { 2.5.4.11 }
41                    PrintableString { "indirectCRL CA3 cRLIssuer" }
42                  }
43                }
44                SET {
45                  SEQUENCE {
46                    # commonName
47                    OBJECT_IDENTIFIER { 2.5.4.3 }
48                    PrintableString { "indirect CRL for indirectCRL CA3" }
49                  }
50                }
51              }
52            }
53          }
54        }
55        [2] {
56          [4] {
57            SEQUENCE {
58              SET {
59                SEQUENCE {
60                  # countryName
61                  OBJECT_IDENTIFIER { 2.5.4.6 }
62                  PrintableString { "US" }
63                }
64              }
65              SET {
66                SEQUENCE {
67                  # organizationName
68                  OBJECT_IDENTIFIER { 2.5.4.10 }
69                  PrintableString { "Test Certificates 2011" }
70                }
71              }
72              SET {
73                SEQUENCE {
74                  # organizationUnitName
75                  OBJECT_IDENTIFIER { 2.5.4.11 }
76                  PrintableString { "indirectCRL CA3 cRLIssuer" }
77                }
78              }
79            }
80          }
81        }
82      }
83    }
84  }
85}
86#-----END EXTENSION-----
87
88-----BEGIN CERTIFICATE-----
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
90-----END CERTIFICATE-----
91