2.2.3.5.1.1 PnrpCertificateType

 pnrpCertificateType EXTENSION ::= {
           SYNTAX PnrpCertificateType
           IDENTIFIED BY id-microsoftp2pgeneral-pnrpCertificateType }
 id-microsoftp2pgeneral-pnrpCertificateType OBJECT IDENTIFIER ::= 
             { id-microsoftp2pgeneral 1}
 PnrpCertificateType ::= OCTET STRING (SIZE(4)) 
            

PnrpCertificateType: The PNRP Certificate type. Every certificate in the chain MUST have this extension and MUST be a 4-byte integer in little-endian byte order. For the first certificate, the PnrpCertificateType MUST be certTypeRoot (0x00000002), and for all other certificates, the PnrpCertificateType MUST be certTypeMember (0x00000001).

Value

Meaning

certTypeMember

0x00000001

The certificate is one that has been delegated permissions from the previous certificate in the chain.

certTypeRoot

0x00000002

The certificate is the first certificate of a chain.

Show: