attributetype ( 1.3.6.1.4.1.5515.2.1 NAME 'typeName' SUP name SINGLE-VALUE )

#attributetype ( 1.3.6.1.4.1.5515.2.2 NAME 'serialNumber' SUP name SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.5515.2.3 NAME 'issuer' SUP distinguishedName SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.5515.2.4 NAME 'validityNotBefore' EQUALITY generalizedTimeMatch

      ORDERING generalizedTimeOrderingMatch

      SYNTAX 1.3.6.1.4.1.1466.115.121.1.24

      SINGLE-VALUE )

attributetype (  1.3.6.1.4.1.5515.2.5 NAME 'validityNotAfter' EQUALITY generalizedTimeMatch

      ORDERING generalizedTimeOrderingMatch

      SYNTAX 1.3.6.1.4.1.1466.115.121.1.24

      SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.5515.2.6 NAME 'subject' SUP distinguishedName SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.5515.2.7 NAME 'subjectPublicKeyInfo' SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} EQUALITY octetStringMatch SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.5515.2.8 NAME 'certificateExtension' EQUALITY  octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )

attributetype ( 1.3.6.1.4.1.5515.2.9 NAME 'otherInfo' SUP name )

attributetype ( 1.3.6.1.4.1.5515.2.10 NAME 'certificateHash' SUP name SINGLE-VALUE )

 

attributetype ( 1.3.6.1.4.1.5515.2.11 NAME 'validityPKNotBefore' EQUALITY generalizedTimeMatch

      ORDERING generalizedTimeOrderingMatch

      SYNTAX 1.3.6.1.4.1.1466.115.121.1.24

      SINGLE-VALUE )

 

objectclass (

        1.3.6.1.4.1.5515.1.1 NAME 'certificateType'

        SUP top

        STRUCTURAL

        MUST typeName

        MAY ( serialNumber $ issuer $ validityNotBefore $ validityNotAfter $ subject $ subjectPublicKeyInfo $ userCertificate $  certificateExtension $ otherInfo ) )