2.2.3.5.1.1 PnrpCertificateType
-
pnrpCertificateType EXTENSION ::= { SYNTAX PnrpCertificateType IDENTIFIED BY id-microsoftp2pgeneral-pnrpCertificateType } id-microsoftp2pgeneral-pnrpCertificateType OBJECT IDENTIFIER ::= { id-microsoftp2pgeneral 1} PnrpCertificateType ::= OCTET STRING (SIZE(4))
PnrpCertificateType: The PNRP Certificate type. Every certificate in the chain MUST have this extension and MUST be a 4-byte integer in little-endian byte order. For the first certificate, the PnrpCertificateType MUST be certTypeRoot (0x00000002), and for all other certificates, the PnrpCertificateType MUST be certTypeMember (0x00000001).
|
Value |
Meaning |
|---|---|
|
certTypeMember 0x00000001 |
The certificate is one that has been delegated permissions from the previous certificate in the chain. |
|
certTypeRoot 0x00000002 |
The certificate is the first certificate of a chain. |