(
1.2.840.113549.1.9.1
NAME 'emailAddress'
DESC 'Email address'
EQUALITY pkcs9CaseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
B.3.6 unstructuredName
(
1.2.840.113549.1.9.2
NAME 'unstructuredName'
DESC 'PKCS #9 unstructured name'
EQUALITY pkcs9CaseIgnoreMatch
SYNTAX 1.2.840.113549.1.9.26.1
)
B.3.7 unstructuredAddress
(
1.2.840.113549.1.9.8
NAME 'unstructuredAddress'
DESC 'PKCS #9 unstructured address'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
B.3.8 dateOfBirth
(
1.3.6.1.5.5.7.9.1
NAME 'dateOfBirth'
DESC 'Date of birth'
EQUALITY generalizedTimeMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
SINGLE-VALUE
)
B.3.9 placeOfBirth
(
1.3.6.1.5.5.7.9.2
NAME 'placeOfBirth'
DESC 'Place of birth'
EQUALITY caseExactMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE
)
B.3.10 gender
(
1.3.6.1.5.5.7.9.3
NAME 'gender'
DESC 'Gender'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44
SINGLE-VALUE
)
B.3.11 countryOfCitizenship
(
1.3.6.1.5.5.7.9.4
NAME 'countryOfCitizenship'
DESC 'Country of citizenship'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44
)
B.3.12 countryOfResidence
(
1.3.6.1.5.5.7.9.5
NAME 'countryOfResidence'
DESC 'Country of residence'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44
)
B.3.13 pseudonym
(
2.5.4.65
NAME 'pseudonym'
DESC 'Pseudonym'
EQUALITY caseExactMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
B.3.14 contentType
In the (highly unlikely) event of this attribute being stored in a
Directory it is to be stored and requested in binary form, as
contentType;binary. Attribute values shall be OCTET STRINGs stored
as binary (BER- or DER-encoded) data.
(
1.2.840.113549.1.9.3
NAME 'contentType'
DESC 'PKCS #7 content type attribute'
EQUALITY objectIdentifierMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.38
SINGLE-VALUE
)
B.3.15 messageDigest
In the (highly unlikely) event of this attribute being stored in a
Directory it is to be stored and requested in binary form, as
messageDigest;binary. Attribute values shall be OCTET STRINGs stored
as binary (BER- or DER-encoded) data.
(
1.2.840.113549.1.9.4
NAME 'messageDigest'
DESC 'PKCS #7 mesage digest attribute'
EQUALITY octetStringMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.5
SINGLE-VALUE
)
B.3.16 signingTime
(
1.2.840.113549.1.9.5
NAME 'signingTime'
DESC 'PKCS #7 signing time'
EQUALITY signingTimeMatch
SYNTAX 1.2.840.113549.1.9.26.2
SINGLE-VALUE
)
B.3.17 counterSignature
In the (highly unlikely) event that this attribute is to be stored in
a directory, it is to be stored and requested in binary form, as
counterSignature;binary. Attribute values shall be stored as binary
(BER- or DER-encoded) data.
(
1.2.840.113549.1.9.6
NAME 'counterSignature'
DESC 'PKCS #7 countersignature'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.5
)
B.3.18 challengePassword
(
1.2.840.113549.1.9.7
NAME 'challengePassword'
DESC 'Challenge password for certificate revocations'
EQUALITY caseExactMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE
)
Note - It is not recommended to store unprotected values of this
attribute in a directory.
B.4 Matching rules
B.4.1 pkcs9CaseIgnoreMatch
(
1.2.840.113549.1.9.27.1
NAME 'pkcs9CaseIgnoreMatch'
SYNTAX 1.2.840.113549.1.9.26.1
)
B.4.2 signingTimeMatch
(
1.2.840.113549.1.9.27.3
NAME 'signingTimeMatch'
SYNTAX 1.2.840.113549.1.9.26.2
)
C. Intellectual property considerations
RSA Security makes no patent claims on the general constructions
described in this document, although specific underlying techniques
may be covered.
License to copy this document is granted provided that it is
identified as "RSA Security Inc. Public-Key Cryptography Standards
(PKCS)" in all material mentioning or referencing this document.
RSA Security makes no representations regarding intellectual property
claims by other parties. Such determination is the responsibility of
the user.
D. Revision history
Version 1.0
Version 1.0 was part of the June 3, 1991 initial public release of
PKCS. Version 1.0 was also published as NIST/OSI Implementors'
Workshop document SEC-SIG-91-24.
Version 1.1
Version 1.1 incorporated several editorial changes, including
updates to the references and the addition of a revision history.
The following substantive changes were made:
- Section 6: challengePassword, unstructuredAddress, and
extendedCertificateAttributes attribute types were added
- Section 7: challengePassword, unstructuredAddress, and
extendedCertificateAttributes object identifiers were added
Version 2.0
Version 2.0 incorporates several editorial changes as well. In
addition, the following substantive changes have been made:
- Addition of a Section defining two new auxiliary object classes,
pkcsEntity and naturalPerson
- Addition of several new attribute types and matching rules for
use in conjunction with these object classes and elsewhere
- Update of all ASN.1 to be in line with the 1997 version of this
syntax
- Addition a "compilable" ASN.1 module
- Addition, in accordance with [21], an ABNF description of all
attributes and object classes
- Addition of an intellectual property considerations section
E. References
[1] Bradner, S., "Key words for use in RFCs to Indicate Requirement
Levels", BCP 14, RFC2119, March 1997.
[2] Crocker, D. and P. Overell, "Augmented BNF for Syntax
Specifications: ABNF", RFC2234, November 1997.
[3] Housley, R., "Cryptographic Message Syntax CMS", RFC2630, June
1999.
[4] ISO/IEC 3166-1:Codes for the representation of names of
countries and their subdivisions - Part 1: Country codes. 1997.
[5] ISO/IEC 8824-1:1999: Information technology - Abstract Syntax
Notation One (ASN.1) - Specification of basic notation.1999.
[6] ISO/IEC 8825-1:1999: Information technology - ASN.1 Encoding
Rules: Specification of Basic Encoding Rules (BER), Canonical
Encoding Rules (CER) and Distinguished Encoding Rules (DER).
1999.
[7] ISO/IEC 9594-2:1997: Information technology - Open Systems
Interconnection - The Directory: Models. 1997.
[8] ISO/IEC 9594-6:1997: Information technology - Open Systems
Interconnection - The Directory: Selected attribute types. 1997.
[9] ISO/IEC 9594-7:1997: Information technology - Open Systems
Interconnection - The Directory: Selected object classes. 1997.
[10] ISO/IEC 9594-8:1997: Information technology - Open Systems
Interconnection - The Directory: Authentication framework. 1997.
[11] ISO/IEC 10646-1: Information Technology - Universal Multiple-
Octet Coded Character Set (UCS) - Part 1: Architecture and Basic
Multilingual Plane. 1993.
[12] Ramsdell, R., "S/MIME Version 3 Message Specification", RFC
2633, June 1999.
[13] RSA Laboratories. PKCS #6: Extended-Certificate Syntax Standard.
Version 1.5, November 1993.
[14] RSA Laboratories. PKCS #7: Cryptographic Message Syntax
Standard. Version 1.5, November 1993.
[15] RSA Laboratories. PKCS #8: Private-Key Information Syntax
Standard. Version 1.2, November 1993.
[16] RSA Laboratories. PKCS #10: Certification Request Syntax
Standard. Version 1.0, November 1993.
[17] RSA Laboratories. PKCS #12: Personal Information Exchange Syntax
Standard. Version 1.0, June 1999.
[18] RSA Laboratories. PKCS #15: Cryptographic Token Information
Format Standard. Version 1.1, June 2000.
[19] Santesson, S., Polk, W., Barzin, P. and M. Nystrom, "Internet
X.509 Public Key Infrastructure - Qualified Certificates
Profile", Work in Progress.
[20] Smith, M. "Definition of the inetOrgPerson LDAP Object Class",
RFC2798, April 2000.
[21] Wahl, M., Coulbeck, A., Howes, T. and S. Kille, "Lightweight
Directory Access Protocol (v3): Attribute Syntax Definitions",
RFC2252, December 1997.
[22] Wahl, M., Howes, T. and S. Kille, "Lightweight Directory Access
Protocol (v3)", RFC2251, December 1997.
F. Contact information & About PKCS
The Public-Key Cryptography Standards are specifications produced by
RSA Laboratories in cooperation with secure systems developers
worldwide for the purpose of accelerating the deployment of public-
key cryptography. First published in 1991 as a result of meetings
with a small group of early adopters of public-key technology, the
PKCS documents have become widely referenced and implemented.
Contributions from the PKCS series have become part of many formal
and de facto standards, including ANSI X9 documents, PKIX, SET,
S/MIME, and SSL.
Further development of PKCS occurs through mailing list discussions
and occasional workshops, and suggestions for improvement are
welcome. For more information, contact:
PKCS Editor
RSA Laboratories
20 Crosby Drive
Bedford, MA 01730 USA
pkcs-editor@rsasecurity.com
http://www.rsasecurity.com/rsalabs/PKCS
Full Copyright Statement
Copyright (C) The Internet Society (2000). All Rights Reserved.
This document and translations of it may be copied and furnished to
others provided that the above copyright notice and this paragraph
are included on all such copies. However, this document itself may
not be modified in any way, such as by removing the copyright notice
or references to the Internet Society or other Internet
organizations, except as required to translate it into languages
other than English.
The limited permissions granted above are perpetual and will not be
revoked by the Internet Society or its successors or assigns.
This document and the information contained herein is provided on an
"AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING
TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING
BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION
HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Acknowledgement
Funding for the RFCEditor function is currently provided by the
Internet Society.