2.2.3.5.1.4 PnrpRole

  • Article 

 pnrpRole EXTENSION ::= {
           SYNTAX PnrpRole
           IDENTIFIED BY id-microsoftp2pgrouping-pnrpRole }
 id-microsoftp2pgrouping-pnrpRole OBJECT IDENTIFIER ::=
             { id-microsoftp2ppnrp 3 }
 RoleUuid ::= OCTET STRING  
             { roleAdmin          (04387127aa56450a8ce54f565c6790f4),
               roleMember         (f12dc4c708574ca093fcb1bb19a3d8c2),
               roleInvitingMember (dd15f41ffc4e4922b0354c06a754d01d) }
 PnrpRole ::=  SEQUENCE SIZE (1..MAX) OF RoleUuid
           

PnrpRole: This property MUST exist in all certificates except the first certificate in the chain. Each RoleUuid MUST be one of the following.

Value

Meaning

roleAdmin

All classifiers in the PnrpClassifiersList extension have some classifier in the previous certificate's classifiers list (if any) as a prefix.

roleMember

All classifiers in the PnrpClassifiersList extension are equal to some classifier in the previous certificate's classifiers list (if any).

roleInvitingMember

Same as roleAdmin. An application or higher-layer protocol decides this, and can use either value.