1*4882a593Smuzhiyun-- X.509 AuthorityKeyIdentifier 2*4882a593Smuzhiyun-- rfc5280 section 4.2.1.1 3*4882a593Smuzhiyun 4*4882a593SmuzhiyunAuthorityKeyIdentifier ::= SEQUENCE { 5*4882a593Smuzhiyun keyIdentifier [0] IMPLICIT KeyIdentifier OPTIONAL, 6*4882a593Smuzhiyun authorityCertIssuer [1] IMPLICIT GeneralNames OPTIONAL, 7*4882a593Smuzhiyun authorityCertSerialNumber [2] IMPLICIT CertificateSerialNumber OPTIONAL 8*4882a593Smuzhiyun } 9*4882a593Smuzhiyun 10*4882a593SmuzhiyunKeyIdentifier ::= OCTET STRING ({ x509_akid_note_kid }) 11*4882a593Smuzhiyun 12*4882a593SmuzhiyunCertificateSerialNumber ::= INTEGER ({ x509_akid_note_serial }) 13*4882a593Smuzhiyun 14*4882a593SmuzhiyunGeneralNames ::= SEQUENCE OF GeneralName 15*4882a593Smuzhiyun 16*4882a593SmuzhiyunGeneralName ::= CHOICE { 17*4882a593Smuzhiyun otherName [0] ANY, 18*4882a593Smuzhiyun rfc822Name [1] IA5String, 19*4882a593Smuzhiyun dNSName [2] IA5String, 20*4882a593Smuzhiyun x400Address [3] ANY, 21*4882a593Smuzhiyun directoryName [4] Name ({ x509_akid_note_name }), 22*4882a593Smuzhiyun ediPartyName [5] ANY, 23*4882a593Smuzhiyun uniformResourceIdentifier [6] IA5String, 24*4882a593Smuzhiyun iPAddress [7] OCTET STRING, 25*4882a593Smuzhiyun registeredID [8] OBJECT IDENTIFIER 26*4882a593Smuzhiyun } 27*4882a593Smuzhiyun 28*4882a593SmuzhiyunName ::= SEQUENCE OF RelativeDistinguishedName 29*4882a593Smuzhiyun 30*4882a593SmuzhiyunRelativeDistinguishedName ::= SET OF AttributeValueAssertion 31*4882a593Smuzhiyun 32*4882a593SmuzhiyunAttributeValueAssertion ::= SEQUENCE { 33*4882a593Smuzhiyun attributeType OBJECT IDENTIFIER ({ x509_note_OID }), 34*4882a593Smuzhiyun attributeValue ANY ({ x509_extract_name_segment }) 35*4882a593Smuzhiyun } 36