# 
# The contents of this file are subject to the Mozilla Public
# License Version 1.1 (the "License"); you may not use this file
# except in compliance with the License. You may obtain a copy of
# the License at http://www.mozilla.org/MPL/
# 
# Software distributed under the License is distributed on an "AS
# IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
# implied. See the License for the specific language governing
# rights and limitations under the License.
# 
# The Original Code is the Netscape security libraries.
# 
# The Initial Developer of the Original Code is Netscape
# Communications Corporation.  Portions created by Netscape are 
# Copyright (C) 1994-2000 Netscape Communications Corporation.  All
# Rights Reserved.
# 
# Contributor(s):
# 
# Alternatively, the contents of this file may be used under the
# terms of the GNU General Public License Version 2 or later (the
# "GPL"), in which case the provisions of the GPL are applicable 
# instead of those above.  If you wish to allow use of your 
# version of this file only under the terms of the GPL and not to
# allow others to use your version of this file under the MPL,
# indicate your decision by deleting the provisions above and
# replace them with the notice and other provisions required by
# the GPL.  If you do not delete the provisions above, a recipient
# may use your version of this file under either the MPL or the
# GPL.
#
CVS_ID "@(#) $RCSfile$ $Revision$ $Date$ $Name$"

# Fields
#  OID  -- the OID data itself, in dotted-number format
#  TAG  -- the unofficial but common name.  e.g., when written like
#          { joint-iso-ccitt(2) country(16) US(840) company(1) netscape(113730) }
#          those words ("joint-iso-ccitt," "country," etc.) are the tags.
#  EXPL -- a textual explanation, that should stand by itself
#  NAME -- the name we use in our code.  If no NAME is given, it won't be included
#
# Additionally, some sets of OIDs map to some other spaces.. 
# additional fields capture that data:
#
#  CKM  -- the corresponding Cryptoki Mechanism, if any
#  CKK  -- the corresponding Cryptoki Key type, if any
#  ATTR -- the UTF-8 attribute type encoding, if applicable
#          it should be in the standard presentation style (e.g., lowercase),
#          already-escaped a la RFC 2253 if necessary (which would only
#          be necessary if some idiot defined an attribute with, say,
#          an equals sign in it)
#  CERT_EXTENSION -- SUPPORTED or UNSUPPORTED certificate extension, if applicable

# Top of the OID tree -- see http://www.alvestrand.no/objectid/top.html
# 
OID 0
TAG ccitt               # ITU-T used to be called CCITT
EXPL "ITU-T"

# See X.208 Annex C for an explanation of the OIDs below ccitt/itu-t

OID 0.0
TAG recommendation
EXPL "ITU-T Recommendation"

OID 0.1
TAG question
EXPL "ITU-T Question"

OID 0.2
TAG administration
EXPL "ITU-T Administration"

OID 0.3
TAG network-operator
EXPL "ITU-T Network Operator"

OID 0.4
TAG identified-organization
EXPL "ITU-T Identified Organization"

OID 0.9           # used in some RFCs (unofficial!)
TAG data
EXPL "RFC Data"

OID 0.9.2342
TAG pss
EXPL "PSS British Telecom X.25 Network"

OID 0.9.2342.19200300
TAG ucl
EXPL "RFC 1274 UCL Data networks"

OID 0.9.2342.19200300.100
TAG pilot
EXPL "RFC 1274 pilot"

OID 0.9.2342.19200300.100.1
TAG attributeType
EXPL "RFC 1274 Attribute Type"

OID 0.9.2342.19200300.100.1.1
TAG uid
EXPL "RFC 1274 User Id"
NAME NSS_OID_RFC1274_UID
ATTR "uid"

OID 0.9.2342.19200300.100.1.3
TAG mail
EXPL "RFC 1274 E-mail Addres"
NAME NSS_OID_RFC1274_EMAIL
ATTR "mail" # XXX fgmr

OID 0.9.2342.19200300.100.1.25
TAG dc
EXPL "RFC 2247 Domain Component"
NAME NSS_OID_RFC2247_DC
ATTR "dc"

OID 0.9.2342.19200300.100.3
TAG attributeSyntax
EXPL "RFC 1274 Attribute Syntax"

OID 0.9.2342.19200300.100.3.4
TAG iA5StringSyntax
EXPL "RFC 1274 IA5 String Attribute Syntax"

OID 0.9.2342.19200300.100.3.5
TAG caseIgnoreIA5StringSyntax
EXPL "RFC 1274 Case-Ignore IA5 String Attribute Syntax"

OID 0.9.2342.19200300.100.4
TAG objectClass
EXPL "RFC 1274 Object Class"

OID 0.9.2342.19200300.100.10
TAG groups
EXPL "RFC 1274 Groups"

OID 0.9.2342.234219200300 
TAG ucl
EXPL "RFC 1327 ucl"

OID 1
TAG iso
EXPL "ISO"

# See X.208 Annex B for an explanation of the OIDs below iso

OID 1.0
TAG standard
EXPL "ISO Standard"

OID 1.1
TAG registration-authority
EXPL "ISO Registration Authority"

OID 1.2
TAG member-body
EXPL "ISO Member Body"

OID 1.2.36
TAG australia
EXPL "Australia (ISO)"

OID 1.2.158
TAG taiwan
EXPL "Taiwan (ISO)"

OID 1.2.372 
TAG ireland
EXPL "Ireland (ISO)"

OID 1.2.578 
TAG norway
EXPL "Norway (ISO)"

OID 1.2.752 
TAG sweden
EXPL "Sweden (ISO)"

OID 1.2.826 
TAG great-britain
EXPL "Great Britain (ISO)"

OID 1.2.840
TAG us
EXPL "United States (ISO)"

OID 1.2.840.1 
TAG organization
EXPL "US (ISO) organization"

OID 1.2.840.10003
TAG ansi-z30-50
EXPL "ANSI Z39.50"

OID 1.2.840.10008
TAG dicom
EXPL "DICOM"

OID 1.2.840.10017
TAG ieee-1224
EXPL "IEEE 1224"

OID 1.2.840.10022
TAG ieee-802-10
EXPL "IEEE 802.10"

OID 1.2.840.10036
TAG ieee-802-11
EXPL "IEEE 802.11"

OID 1.2.840.10040
TAG x9-57
EXPL "ANSI X9.57"

# RFC 2459:
#
# holdInstruction OBJECT IDENTIFIER ::=
#           {iso(1) member-body(2) us(840) x9cm(10040) 2}
#
# Note that the appendices of RFC 2459 define the (wrong) value
# of 2.2.840.10040.2 for this oid.
OID 1.2.840.10040.2
TAG holdInstruction
EXPL "ANSI X9.57 Hold Instruction"

# RFC 2459:
#
# id-holdinstruction-none OBJECT IDENTIFIER  ::=
#                 {holdInstruction 1} -- deprecated
OID 1.2.840.10040.2.1
TAG id-holdinstruction-none
EXPL "ANSI X9.57 Hold Instruction: None"

# RFC 2459:
#
# id-holdinstruction-callissuer OBJECT IDENTIFIER ::=
#                 {holdInstruction 2}
OID 1.2.840.10040.2.2
TAG id-holdinstruction-callissuer
EXPL "ANSI X9.57 Hold Instruction: Call Issuer"

# RFC 2459:
#
# id-holdinstruction-reject OBJECT IDENTIFIER ::=
#                 {holdInstruction 3}
OID 1.2.840.10040.2.3
TAG id-holdinstruction-reject
EXPL "ANSI X9.57 Hold Instruction: Reject"

OID 1.2.840.10040.4
TAG x9algorithm
EXPL "ANSI X9.57 Algorithm"

# RFC 2459:
#
# id-dsa OBJECT IDENTIFIER ::= {
#      iso(1) member-body(2) us(840) x9-57(10040) x9algorithm(4) 1 }
OID 1.2.840.10040.4.1
TAG id-dsa
EXPL "ANSI X9.57 DSA Signature"
NAME NSS_OID_ANSIX9_DSA_SIGNATURE
CKM CKM_DSA
CKK CKK_DSA

# RFC 2459:
#
# id-dsa-with-sha1 OBJECT IDENTIFIER ::=  {
#      iso(1) member-body(2) us(840) x9-57 (10040) x9algorithm(4) 3 }
OID 1.2.840.10040.4.3
TAG id-dsa-with-sha1
EXPL "ANSI X9.57 Algorithm DSA Signature with SHA-1 Digest"
NAME NSS_OID_ANSIX9_DSA_SIGNATURE_WITH_SHA1_DIGEST
CKM CKM_DSA_SHA1

OID 1.2.840.10046
TAG x942
EXPL "ANSI X9.42"

OID 1.2.840.10046.2
TAG algorithm
EXPL "ANSI X9.42 Algorithm"

# RFC 2459:
#
# dhpublicnumber OBJECT IDENTIFIER ::= {
#      iso(1) member-body(2) us(840) ansi-x942(10046) number-type(2) 1 }
OID 1.2.840.10046.2.1
TAG dhpublicnumber
EXPL "Diffie-Hellman Public Key Algorithm"
NAME NSS_OID_X942_DIFFIE_HELMAN_KEY
CKM CKM_DH_PKCS_DERIVE
CKK CKK_DH

OID 1.2.840.113533
TAG entrust
EXPL "Entrust Technologies"

OID 1.2.840.113549 
TAG rsadsi
EXPL "RSA Data Security Inc."

OID 1.2.840.113549.1 
# http://www.rsa.com/rsalabs/pubs/PKCS/
TAG pkcs
EXPL "PKCS"

# RFC 2459:
#
# pkcs-1 OBJECT IDENTIFIER ::= {
#      iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 1 }
OID 1.2.840.113549.1.1
# ftp://ftp.rsa.com/pub/pkcs/ascii/pkcs-1.asc
TAG pkcs-1
EXPL "PKCS #1"

# RFC 2459:
#
# rsaEncryption OBJECT IDENTIFIER ::=  { pkcs-1 1 }
OID 1.2.840.113549.1.1.1
TAG rsaEncryption
EXPL "PKCS #1 RSA Encryption"
NAME NSS_OID_PKCS1_RSA_ENCRYPTION
CKM CKM_RSA_PKCS
CKK CKK_RSA

# RFC 2459:
#
# md2WithRSAEncryption OBJECT IDENTIFIER  ::=  { pkcs-1 2 }
OID 1.2.840.113549.1.1.2 
TAG md2WithRSAEncryption
EXPL "PKCS #1 MD2 With RSA Encryption"      
NAME NSS_OID_PKCS1_MD2_WITH_RSA_ENCRYPTION
CKM CKM_MD2_RSA_PKCS

OID 1.2.840.113549.1.1.3 
TAG md4WithRSAEncryption
EXPL "PKCS #1 MD4 With RSA Encryption"      
NAME NSS_OID_PKCS1_MD4_WITH_RSA_ENCRYPTION
# No CKM!

# RFC 2459:
#
# md5WithRSAEncryption OBJECT IDENTIFIER  ::=  { pkcs-1 4 }
OID 1.2.840.113549.1.1.4 
TAG md5WithRSAEncryption
EXPL "PKCS #1 MD5 With RSA Encryption"      
NAME NSS_OID_PKCS1_MD5_WITH_RSA_ENCRYPTION
CKM CKM_MD5_RSA_PKCS

# RFC 2459:
#
# sha1WithRSAEncryption OBJECT IDENTIFIER  ::=  { pkcs-1 5 }
OID 1.2.840.113549.1.1.5 
TAG sha1WithRSAEncryption
EXPL "PKCS #1 SHA-1 With RSA Encryption"    
NAME NSS_OID_PKCS1_SHA1_WITH_RSA_ENCRYPTION
CKM CKM_SHA1_RSA_PKCS

OID 1.2.840.113549.1.5 
# ftp://ftp.rsa.com/pub/pkcs/ascii/pkcs-5.asc
TAG pkcs-5
EXPL "PKCS #5"

OID 1.2.840.113549.1.5.1 
TAG pbeWithMD2AndDES-CBC
EXPL "PKCS #5 Password Based Encryption With MD2 and DES-CBC"     
NAME NSS_OID_PKCS5_PBE_WITH_MD2_AND_DES_CBC
CKM CKM_PBE_MD2_DES_CBC

OID 1.2.840.113549.1.5.3 
TAG pbeWithMD5AndDES-CBC
EXPL "PKCS #5 Password Based Encryption With MD5 and DES-CBC"     
NAME NSS_OID_PKCS5_PBE_WITH_MD5_AND_DES_CBC
CKM CKM_PBE_MD5_DES_CBC

OID 1.2.840.113549.1.5.10 
TAG pbeWithSha1AndDES-CBC
EXPL "PKCS #5 Password Based Encryption With SHA-1 and DES-CBC"   
NAME NSS_OID_PKCS5_PBE_WITH_SHA1_AND_DES_CBC
CKM CKM_NETSCAPE_PBE_SHA1_DES_CBC

OID 1.2.840.113549.1.7 
# ftp://ftp.rsa.com/pub/pkcs/ascii/pkcs-7.asc
TAG pkcs-7
EXPL "PKCS #7"
NAME NSS_OID_PKCS7

OID 1.2.840.113549.1.7.1
TAG data
EXPL "PKCS #7 Data"
NAME NSS_OID_PKCS7_DATA

OID 1.2.840.113549.1.7.2 
TAG signedData
EXPL "PKCS #7 Signed Data"
NAME NSS_OID_PKCS7_SIGNED_DATA

OID 1.2.840.113549.1.7.3 
TAG envelopedData
EXPL "PKCS #7 Enveloped Data"
NAME NSS_OID_PKCS7_ENVELOPED_DATA

OID 1.2.840.113549.1.7.4 
TAG signedAndEnvelopedData
EXPL "PKCS #7 Signed and Enveloped Data"
NAME NSS_OID_PKCS7_SIGNED_ENVELOPED_DATA

OID 1.2.840.113549.1.7.5 
TAG digestedData
EXPL "PKCS #7 Digested Data"
NAME NSS_OID_PKCS7_DIGESTED_DATA

OID 1.2.840.113549.1.7.6 
TAG encryptedData
EXPL "PKCS #7 Encrypted Data"
NAME NSS_OID_PKCS7_ENCRYPTED_DATA

# RFC 2459:
#
# pkcs-9 OBJECT IDENTIFIER ::=
#        { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 9 }
OID 1.2.840.113549.1.9 
# ftp://ftp.rsa.com/pub/pkcs/ascii/pkcs-9.asc
TAG pkcs-9
EXPL "PKCS #9"

# RFC 2459:
#
# emailAddress AttributeType      ::= { pkcs-9 1 }
OID 1.2.840.113549.1.9.1
TAG emailAddress
EXPL "PKCS #9 Email Address"
NAME NSS_OID_PKCS9_EMAIL_ADDRESS

OID 1.2.840.113549.1.9.2 
TAG unstructuredName
EXPL "PKCS #9 Unstructured Name"
NAME NSS_OID_PKCS9_UNSTRUCTURED_NAME

OID 1.2.840.113549.1.9.3 
TAG contentType
EXPL "PKCS #9 Content Type"
NAME NSS_OID_PKCS9_CONTENT_TYPE

OID 1.2.840.113549.1.9.4 
TAG messageDigest
EXPL "PKCS #9 Message Digest"
NAME NSS_OID_PKCS9_MESSAGE_DIGEST

OID 1.2.840.113549.1.9.5 
TAG signingTime
EXPL "PKCS #9 Signing Time"
NAME NSS_OID_PKCS9_SIGNING_TIME

OID 1.2.840.113549.1.9.6 
TAG counterSignature
EXPL "PKCS #9 Counter Signature"
NAME NSS_OID_PKCS9_COUNTER_SIGNATURE

OID 1.2.840.113549.1.9.7 
TAG challengePassword
EXPL "PKCS #9 Challenge Password"
NAME NSS_OID_PKCS9_CHALLENGE_PASSWORD

OID 1.2.840.113549.1.9.8 
TAG unstructuredAddress
EXPL "PKCS #9 Unstructured Address"
NAME NSS_OID_PKCS9_UNSTRUCTURED_ADDRESS

OID 1.2.840.113549.1.9.9 
TAG extendedCertificateAttributes
EXPL "PKCS #9 Extended Certificate Attributes"
NAME NSS_OID_PKCS9_EXTENDED_CERTIFICATE_ATTRIBUTES

OID 1.2.840.113549.1.9.15 
TAG sMIMECapabilities
EXPL "PKCS #9 S/MIME Capabilities"
NAME NSS_OID_PKCS9_SMIME_CAPABILITIES

OID 1.2.840.113549.1.9.20
TAG friendlyName
EXPL "PKCS #9 Friendly Name"
NAME NSS_OID_PKCS9_FRIENDLY_NAME

OID 1.2.840.113549.1.9.21
TAG localKeyID
EXPL "PKCS #9 Local Key ID"
NAME NSS_OID_PKCS9_LOCAL_KEY_ID

OID 1.2.840.113549.1.9.22 
TAG certTypes
EXPL "PKCS #9 Certificate Types"

OID 1.2.840.113549.1.9.22.1
TAG x509Certificate
EXPL "PKCS #9 Certificate Type = X.509"
NAME NSS_OID_PKCS9_X509_CERT

OID 1.2.840.113549.1.9.22.2
TAG sdsiCertificate
EXPL "PKCS #9 Certificate Type = SDSI"
NAME NSS_OID_PKCS9_SDSI_CERT

OID 1.2.840.113549.1.9.23 
TAG crlTypes
EXPL "PKCS #9 Certificate Revocation List Types"

OID 1.2.840.113549.1.9.23.1
TAG x509Crl
EXPL "PKCS #9 CRL Type = X.509"
NAME NSS_OID_PKCS9_X509_CRL

OID 1.2.840.113549.1.12
# http://www.rsa.com/rsalabs/pubs/PKCS/html/pkcs-12.html
# NOTE -- PKCS #12                          multiple contradictory
#         documents exist.  Somebody go figure out the canonical
#         OID list, keeping in mind backwards-compatability..
TAG pkcs-12
EXPL "PKCS #12"
NAME NSS_OID_PKCS12

OID 1.2.840.113549.1.12.1 
TAG pkcs-12PbeIds
EXPL "PKCS #12 Password Based Encryption IDs"
NAME NSS_OID_PKCS12_PBE_IDS
# We called it SEC_OID_PKCS12_MODE_IDS

OID 1.2.840.113549.1.12.1.1
TAG pbeWithSHA1And128BitRC4
EXPL "PKCS #12 Password Based Encryption With SHA-1 and 128-bit RC4"
NAME NSS_OID_PKCS12_PBE_WITH_SHA1_AND_128_BIT_RC4
CKM CKM_NETSCAPE_PBE_SHA1_128_BIT_RC4
# We called it SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_128_BIT_RC4

OID 1.2.840.113549.1.12.1.2
TAG pbeWithSHA1And40BitRC4
EXPL "PKCS #12 Password Based Encryption With SHA-1 and 40-bit RC4"
NAME NSS_OID_PKCS12_PBE_WITH_SHA1_AND_40_BIT_RC4
CKM CKM_NETSCAPE_PBE_SHA1_40_BIT_RC4
# We called it SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC4

OID 1.2.840.113549.1.12.1.3
TAG pbeWithSHA1And3-KeyTripleDES-CBC
EXPL "PKCS #12 Password Based Encryption With SHA-1 and 3-key Triple DES-CBC"
NAME NSS_OID_PKCS12_PBE_WITH_SHA1_AND_3_KEY_TRIPLE_DES_CBC
CKM CKM_NETSCAPE_PBE_SHA1_TRIPLE_DES_CBC
# We called it SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_3KEY_TRIPLE_DES_CBC

OID 1.2.840.113549.1.12.1.4
TAG pbeWithSHA1And2-KeyTripleDES-CBC
EXPL "PKCS #12 Password Based Encryption With SHA-1 and 2-key Triple DES-CBC"
NAME NSS_OID_PKCS12_PBE_WITH_SHA1_AND_2_KEY_TRIPLE_DES_CBC
CKM CKM_PBE_SHA1_DES2_EDE_CBC
# We called it SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_2KEY_TRIPLE_DES_CBC

OID 1.2.840.113549.1.12.1.5
TAG pbeWithSHA1And128BitRC2-CBC
EXPL "PKCS #12 Password Based Encryption With SHA-1 and 128-bit RC2-CBC"
NAME NSS_OID_PKCS12_PBE_WITH_SHA1_AND_128_BIT_RC2_CBC
CKM CKM_NETSCAPE_PBE_SHA1_128_BIT_RC2_CBC
# We called it SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_128_BIT_RC2_CBC

OID 1.2.840.113549.1.12.1.6
TAG pbeWithSHA1And40BitRC2-CBC
EXPL "PKCS #12 Password Based Encryption With SHA-1 and 40-bit RC2-CBC"
NAME NSS_OID_PKCS12_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC
CKM CKM_NETSCAPE_PBE_SHA1_40_BIT_RC2_CBC
# We called it SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC

OID 1.2.840.113549.1.12.2 
TAG pkcs-12EspvkIds
EXPL "PKCS #12 ESPVK IDs"
# We called it SEC_OID_PKCS12_ESPVK_IDS

OID 1.2.840.113549.1.12.2.1
TAG pkcs8-key-shrouding
EXPL "PKCS #12 Key Shrouding"
# We called it SEC_OID_PKCS12_PKCS8_KEY_SHROUDING

OID 1.2.840.113549.1.12.3 
TAG draft1Pkcs-12Bag-ids
EXPL "Draft 1.0 PKCS #12 Bag IDs"
# We called it SEC_OID_PKCS12_BAG_IDS

OID 1.2.840.113549.1.12.3.1
TAG keyBag
EXPL "Draft 1.0 PKCS #12 Key Bag"
# We called it SEC_OID_PKCS12_KEY_BAG_ID

OID 1.2.840.113549.1.12.3.2
TAG certAndCRLBagId
EXPL "Draft 1.0 PKCS #12 Cert and CRL Bag ID"
# We called it SEC_OID_PKCS12_CERT_AND_CRL_BAG_ID

OID 1.2.840.113549.1.12.3.3
TAG secretBagId
EXPL "Draft 1.0 PKCS #12 Secret Bag ID"
# We called it SEC_OID_PKCS12_SECRET_BAG_ID

OID 1.2.840.113549.1.12.3.4
TAG safeContentsId
EXPL "Draft 1.0 PKCS #12 Safe Contents Bag ID"
# We called it SEC_OID_PKCS12_SAFE_CONTENTS_ID

OID 1.2.840.113549.1.12.3.5
TAG pkcs-8ShroudedKeyBagId
EXPL "Draft 1.0 PKCS #12 PKCS #8-shrouded Key Bag ID"
# We called it SEC_OID_PKCS12_PKCS8_SHROUDED_KEY_BAG_ID

OID 1.2.840.113549.1.12.4 
TAG pkcs-12CertBagIds
EXPL "PKCS #12 Certificate Bag IDs"
# We called it SEC_OID_PKCS12_CERT_BAG_IDS

OID 1.2.840.113549.1.12.4.1
TAG x509CertCRLBagId
EXPL "PKCS #12 X.509 Certificate and CRL Bag"
# We called it SEC_OID_PKCS12_X509_CERT_CRL_BAG

OID 1.2.840.113549.1.12.4.2
TAG SDSICertBagID
EXPL "PKCS #12 SDSI Certificate Bag"
# We called it SEC_OID_PKCS12_SDSI_CERT_BAG

OID 1.2.840.113549.1.12.5 
TAG pkcs-12Oids
EXPL "PKCS #12 OIDs (XXX)"
# We called it SEC_OID_PKCS12_OIDS

OID 1.2.840.113549.1.12.5.1 
TAG pkcs-12PbeIds
EXPL "PKCS #12 OIDs PBE IDs (XXX)"
# We called it SEC_OID_PKCS12_PBE_IDS

OID 1.2.840.113549.1.12.5.1.1
TAG pbeWithSha1And128BitRC4
EXPL "PKCS #12 OIDs PBE with SHA-1 and 128-bit RC4 (XXX)"
CKM CKM_NETSCAPE_PBE_SHA1_128_BIT_RC4
# We called it SEC_OID_PKCS12_PBE_WITH_SHA1_AND_128_BIT_RC4

OID 1.2.840.113549.1.12.5.1.2
TAG pbeWithSha1And40BitRC4
EXPL "PKCS #12 OIDs PBE with SHA-1 and 40-bit RC4 (XXX)"
CKM CKM_NETSCAPE_PBE_SHA1_40_BIT_RC4
# We called it SEC_OID_PKCS12_PBE_WITH_SHA1_AND_40_BIT_RC4

OID 1.2.840.113549.1.12.5.1.3
TAG pbeWithSha1AndTripleDES-CBC
EXPL "PKCS #12 OIDs PBE with SHA-1 and Triple DES-CBC (XXX)"
CKM CKM_NETSCAPE_PBE_SHA1_TRIPLE_DES_CBC
# We called it SEC_OID_PKCS12_PBE_WITH_SHA1_AND_TRIPLE_DES_CBC

OID 1.2.840.113549.1.12.5.1.4
TAG pbeWithSha1And128BitRC2-CBC
EXPL "PKCS #12 OIDs PBE with SHA-1 and 128-bit RC2-CBC (XXX)"
CKM CKM_NETSCAPE_PBE_SHA1_128_BIT_RC2_CBC
# We called it SEC_OID_PKCS12_PBE_WITH_SHA1_AND_128_BIT_RC2_CBC

OID 1.2.840.113549.1.12.5.1.5
TAG pbeWithSha1And40BitRC2-CBC
EXPL "PKCS #12 OIDs PBE with SHA-1 and 40-bit RC2-CBC (XXX)"
CKM CKM_NETSCAPE_PBE_SHA1_40_BIT_RC2_CBC
# We called it SEC_OID_PKCS12_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC

OID 1.2.840.113549.1.12.5.2 
TAG pkcs-12EnvelopingIds
EXPL "PKCS #12 OIDs Enveloping IDs (XXX)"
# We called it SEC_OID_PKCS12_ENVELOPING_IDS

OID 1.2.840.113549.1.12.5.2.1
TAG rsaEncryptionWith128BitRC4
EXPL "PKCS #12 OIDs Enveloping RSA Encryption with 128-bit RC4"
# We called it SEC_OID_PKCS12_RSA_ENCRYPTION_WITH_128_BIT_RC4

OID 1.2.840.113549.1.12.5.2.2
TAG rsaEncryptionWith40BitRC4
EXPL "PKCS #12 OIDs Enveloping RSA Encryption with 40-bit RC4"
# We called it SEC_OID_PKCS12_RSA_ENCRYPTION_WITH_40_BIT_RC4

OID 1.2.840.113549.1.12.5.2.3
TAG rsaEncryptionWithTripleDES
EXPL "PKCS #12 OIDs Enveloping RSA Encryption with Triple DES"
# We called it SEC_OID_PKCS12_RSA_ENCRYPTION_WITH_TRIPLE_DES

OID 1.2.840.113549.1.12.5.3 
TAG pkcs-12SignatureIds
EXPL "PKCS #12 OIDs Signature IDs (XXX)"
# We called it SEC_OID_PKCS12_SIGNATURE_IDS

OID 1.2.840.113549.1.12.5.3.1
TAG rsaSignatureWithSHA1Digest
EXPL "PKCS #12 OIDs RSA Signature with SHA-1 Digest"
# We called it SEC_OID_PKCS12_RSA_SIGNATURE_WITH_SHA1_DIGEST

OID 1.2.840.113549.1.12.10 
TAG pkcs-12Version1
EXPL "PKCS #12 Version 1"

OID 1.2.840.113549.1.12.10.1
TAG pkcs-12BagIds
EXPL "PKCS #12 Bag IDs"

OID 1.2.840.113549.1.12.10.1.1
TAG keyBag
EXPL "PKCS #12 Key Bag"
NAME NSS_OID_PKCS12_KEY_BAG
# We called it SEC_OID_PKCS12_V1_KEY_BAG_ID

OID 1.2.840.113549.1.12.10.1.2
TAG pkcs-8ShroudedKeyBag
EXPL "PKCS #12 PKCS #8-shrouded Key Bag"
NAME NSS_OID_PKCS12_PKCS8_SHROUDED_KEY_BAG
# We called it SEC_OID_PKCS12_V1_PKCS8_SHROUDED_KEY_BAG_ID

OID 1.2.840.113549.1.12.10.1.3
TAG certBag
EXPL "PKCS #12 Certificate Bag"
NAME NSS_OID_PKCS12_CERT_BAG
# We called it SEC_OID_PKCS12_V1_CERT_BAG_ID

OID 1.2.840.113549.1.12.10.1.4
TAG crlBag
EXPL "PKCS #12 CRL Bag"
NAME NSS_OID_PKCS12_CRL_BAG
# We called it SEC_OID_PKCS12_V1_CRL_BAG_ID

OID 1.2.840.113549.1.12.10.1.5
TAG secretBag
EXPL "PKCS #12 Secret Bag"
NAME NSS_OID_PKCS12_SECRET_BAG
# We called it SEC_OID_PKCS12_V1_SECRET_BAG_ID

OID 1.2.840.113549.1.12.10.1.6
TAG safeContentsBag
EXPL "PKCS #12 Safe Contents Bag"
NAME NSS_OID_PKCS12_SAFE_CONTENTS_BAG
# We called it SEC_OID_PKCS12_V1_SAFE_CONTENTS_BAG_ID

OID 1.2.840.113549.2
TAG digest
EXPL "RSA digest algorithm"

OID 1.2.840.113549.2.2 
TAG md2
EXPL "MD2"
NAME NSS_OID_MD2
CKM CKM_MD2

OID 1.2.840.113549.2.4 
TAG md4
EXPL "MD4"
NAME NSS_OID_MD4
# No CKM

OID 1.2.840.113549.2.5
TAG md5
EXPL "MD5"
NAME NSS_OID_MD5
CKM CKM_MD5

OID 1.2.840.113549.3 
TAG cipher
EXPL "RSA cipher algorithm"

OID 1.2.840.113549.3.2 
TAG rc2cbc
EXPL "RC2-CBC"
NAME NSS_OID_RC2_CBC
CKM_RC2_CBC

OID 1.2.840.113549.3.4 
TAG rc4
EXPL "RC4"
NAME NSS_OID_RC4
CKM CKM_RC4

OID 1.2.840.113549.3.7 
TAG desede3cbc
EXPL "DES-EDE3-CBC"
NAME NSS_OID_DES_EDE3_CBC
CKM CKM_DES3_CBC

OID 1.2.840.113549.3.9 
TAG rc5cbcpad
EXPL "RC5-CBCPad"
NAME NSS_OID_RC5_CBC_PAD
CKM CKM_RC5_CBC

OID 1.2.840.113556
TAG microsoft
EXPL "Microsoft"

OID 1.2.840.113560
TAG columbia-university
EXPL "Columbia University"

OID 1.2.840.113572
TAG unisys
EXPL "Unisys"

OID 1.2.840.113658
TAG xapia
EXPL "XAPIA"

OID 1.2.840.113699
TAG wordperfect
EXPL "WordPerfect"

OID 1.3
TAG identified-organization
EXPL "ISO identified organizations"

OID 1.3.6
TAG us-dod
EXPL "United States Department of Defense"

OID 1.3.6.1 
TAG internet  # See RFC 1065
EXPL "The Internet"

OID 1.3.6.1.1
TAG directory
EXPL "Internet: Directory"

OID 1.3.6.1.2
TAG management
EXPL "Internet: Management"

OID 1.3.6.1.3
TAG experimental
EXPL "Internet: Experimental"

OID 1.3.6.1.4
TAG private
EXPL "Internet: Private"

OID 1.3.6.1.5
TAG security
EXPL "Internet: Security"

OID 1.3.6.1.5.5

# RFC 2459:
#
# id-pkix  OBJECT IDENTIFIER  ::=
#          { iso(1) identified-organization(3) dod(6) internet(1)
#                     security(5) mechanisms(5) pkix(7) }
OID 1.3.6.1.5.5.7 
TAG id-pkix
EXPL "Public Key Infrastructure"

# RFC 2459:
#
# PKIX1Explicit88 {iso(1) identified-organization(3) dod(6) internet(1)
#   security(5) mechanisms(5) pkix(7) id-mod(0) id-pkix1-explicit-88(1)}
OID 1.3.6.1.5.5.7.0.1
TAG PKIX1Explicit88
EXPL "RFC 2459 Explicitly Tagged Module, 1988 Syntax"

# RFC 2459:
#
# PKIX1Implicit88 {iso(1) identified-organization(3) dod(6) internet(1)
#   security(5) mechanisms(5) pkix(7) id-mod(0) id-pkix1-implicit-88(2)}
OID 1.3.6.1.5.5.7.0.2
TAG PKIXImplicit88
EXPL "RFC 2459 Implicitly Tagged Module, 1988 Syntax"

# RFC 2459:
#
# PKIX1Explicit93 {iso(1) identified-organization(3) dod(6) internet(1)
#    security(5) mechanisms(5) pkix(7) id-mod(0) id-pkix1-explicit-93(3)}
OID 1.3.6.1.5.5.7.0.3
TAG PKIXExplicit93
EXPL "RFC 2459 Explicitly Tagged Module, 1993 Syntax"

# RFC 2459:
#
# id-pe OBJECT IDENTIFIER  ::=  { id-pkix 1 }
#         -- arc for private certificate extensions
OID 1.3.6.1.5.5.7.1 
TAG id-pe
EXPL "PKIX Private Certificate Extensions"

# RFC 2459:
#
# id-pe-authorityInfoAccess OBJECT IDENTIFIER ::= { id-pe 1 }
OID 1.3.6.1.5.5.7.1.1
TAG id-pe-authorityInfoAccess
EXPL "Certificate Authority Information Access"
NAME NSS_OID_X509_AUTH_INFO_ACCESS
CERT_EXTENSION SUPPORTED

# RFC 2459:
#
# id-qt OBJECT IDENTIFIER ::= { id-pkix 2 }
#         -- arc for policy qualifier types
OID 1.3.6.1.5.5.7.2 
TAG id-qt
EXPL "PKIX Policy Qualifier Types"

# RFC 2459:
#
# id-qt-cps      OBJECT IDENTIFIER ::=  { id-qt 1 }
#         -- OID for CPS qualifier
OID 1.3.6.1.5.5.7.2.1
TAG id-qt-cps
EXPL "PKIX CPS Pointer Qualifier"
NAME NSS_OID_PKIX_CPS_POINTER_QUALIFIER

# RFC 2459:
#
# id-qt-unotice  OBJECT IDENTIFIER ::=  { id-qt 2 }
#         -- OID for user notice qualifier
OID 1.3.6.1.5.5.7.2.2
TAG id-qt-unotice
EXPL "PKIX User Notice Qualifier"
NAME NSS_OID_PKIX_USER_NOTICE_QUALIFIER

# RFC 2459:
#
# id-kp OBJECT IDENTIFIER ::= { id-pkix 3 }
#         -- arc for extended key purpose OIDS
OID 1.3.6.1.5.5.7.3 
TAG id-kp
EXPL "PKIX Key Purpose"

# RFC 2459:
#
# id-kp-serverAuth      OBJECT IDENTIFIER ::= { id-kp 1 }
OID 1.3.6.1.5.5.7.3.1
TAG id-kp-serverAuth
EXPL "TLS Web Server Authentication Certificate"
NAME NSS_OID_EXT_KEY_USAGE_SERVER_AUTH

# RFC 2459:
#
# id-kp-clientAuth      OBJECT IDENTIFIER ::= { id-kp 2 }
OID 1.3.6.1.5.5.7.3.2
TAG id-kp-clientAuth
EXPL "TLS Web Client Authentication Certificate"
NAME NSS_OID_EXT_KEY_USAGE_CLIENT_AUTH

# RFC 2459:
#
# id-kp-codeSigning     OBJECT IDENTIFIER ::= { id-kp 3 }
OID 1.3.6.1.5.5.7.3.3
TAG id-kp-codeSigning
EXPL "Code Signing Certificate"
NAME NSS_OID_EXT_KEY_USAGE_CODE_SIGN

# RFC 2459:
#
# id-kp-emailProtection OBJECT IDENTIFIER ::= { id-kp 4 }
OID 1.3.6.1.5.5.7.3.4
TAG id-kp-emailProtection
EXPL "E-Mail Protection Certificate"
NAME NSS_OID_EXT_KEY_USAGE_EMAIL_PROTECTION

# RFC 2459:
#
# id-kp-ipsecEndSystem  OBJECT IDENTIFIER ::= { id-kp 5 }
OID 1.3.6.1.5.5.7.3.5
TAG id-kp-ipsecEndSystem
EXPL "IPSEC End System Certificate"
NAME NSS_OID_EXT_KEY_USAGE_IPSEC_END_SYSTEM

# RFC 2459:
#
# id-kp-ipsecTunnel     OBJECT IDENTIFIER ::= { id-kp 6 }
OID 1.3.6.1.5.5.7.3.6
TAG id-kp-ipsecTunnel
EXPL "IPSEC Tunnel Certificate"
NAME NSS_OID_EXT_KEY_USAGE_IPSEC_TUNNEL

# RFC 2459:
#
# id-kp-ipsecUser       OBJECT IDENTIFIER ::= { id-kp 7 }
OID 1.3.6.1.5.5.7.3.7
TAG id-kp-ipsecUser
EXPL "IPSEC User Certificate"
NAME NSS_OID_EXT_KEY_USAGE_IPSEC_USER

# RFC 2459:
#
# id-kp-timeStamping    OBJECT IDENTIFIER ::= { id-kp 8 }
OID 1.3.6.1.5.5.7.3.8
TAG id-kp-timeStamping
EXPL "Time Stamping Certificate"
NAME NSS_OID_EXT_KEY_USAGE_TIME_STAMP

OID 1.3.6.1.5.5.7.3.9
TAG ocsp-responder
EXPL "OCSP Responder Certificate"
NAME NSS_OID_OCSP_RESPONDER

OID 1.3.6.1.5.5.7.7 
TAG pkix-id-pkix

OID 1.3.6.1.5.5.7.7.5 
TAG pkix-id-pkip

OID 1.3.6.1.5.5.7.7.5.1 
TAG pkix-id-regctrl
EXPL "CRMF Registration Control"

OID 1.3.6.1.5.5.7.7.5.1.1
TAG regtoken
EXPL "CRMF Registration Control, Registration Token"
NAME NSS_OID_PKIX_REGCTRL_REGTOKEN

OID 1.3.6.1.5.5.7.7.5.1.2
TAG authenticator
EXPL "CRMF Registration Control, Registration Authenticator"
NAME NSS_OID_PKIX_REGCTRL_AUTHENTICATOR

OID 1.3.6.1.5.5.7.7.5.1.3
TAG pkipubinfo
EXPL "CRMF Registration Control, PKI Publication Info"
NAME NSS_OID_PKIX_REGCTRL_PKIPUBINFO

OID 1.3.6.1.5.5.7.7.5.1.4
TAG pki-arch-options
EXPL "CRMF Registration Control, PKI Archive Options"
NAME NSS_OID_PKIX_REGCTRL_PKI_ARCH_OPTIONS

OID 1.3.6.1.5.5.7.7.5.1.5
TAG old-cert-id
EXPL "CRMF Registration Control, Old Certificate ID"
NAME NSS_OID_PKIX_REGCTRL_OLD_CERT_ID

OID 1.3.6.1.5.5.7.7.5.1.6
TAG protocol-encryption-key
EXPL "CRMF Registration Control, Protocol Encryption Key"
NAME NSS_OID_PKIX_REGCTRL_PROTOCOL_ENC_KEY

OID 1.3.6.1.5.5.7.7.5.2 
TAG pkix-id-reginfo
EXPL "CRMF Registration Info"

OID 1.3.6.1.5.5.7.7.5.2.1
TAG utf8-pairs
EXPL "CRMF Registration Info, UTF8 Pairs"
NAME NSS_OID_PKIX_REGINFO_UTF8_PAIRS

OID 1.3.6.1.5.5.7.7.5.2.2
TAG cert-request
EXPL "CRMF Registration Info, Certificate Request"
NAME NSS_OID_PKIX_REGINFO_CERT_REQUEST

# RFC 2549:
#
# id-ad OBJECT IDENTIFIER ::= { id-pkix 48 }
#         -- arc for access descriptors
OID 1.3.6.1.5.5.7.48 
TAG id-ad
EXPL "PKIX Access Descriptors"

# RFC 2549:
#
# id-ad-ocsp      OBJECT IDENTIFIER ::= { id-ad 1 }
OID 1.3.6.1.5.5.7.48.1
TAG id-ad-ocsp
EXPL "PKIX Online Certificate Status Protocol"
NAME NSS_OID_OID_PKIX_OCSP

OID 1.3.6.1.5.5.7.48.1.1
TAG basic-response
EXPL "OCSP Basic Response"
NAME NSS_OID_PKIX_OCSP_BASIC_RESPONSE

OID 1.3.6.1.5.5.7.48.1.2
TAG nonce-extension
EXPL "OCSP Nonce Extension"
NAME NSS_OID_PKIX_OCSP_NONCE

OID 1.3.6.1.5.5.7.48.1.3
TAG response
EXPL "OCSP Response Types Extension"
NAME NSS_OID_PKIX_OCSP_RESPONSE

OID 1.3.6.1.5.5.7.48.1.4
TAG crl
EXPL "OCSP CRL Reference Extension"
NAME NSS_OID_PKIX_OCSP_CRL

OID 1.3.6.1.5.5.7.48.1.5
TAG no-check
EXPL "OCSP No Check Extension"
NAME NSS_OID_X509_OCSP_NO_CHECK  # X509_... ?

OID 1.3.6.1.5.5.7.48.1.6
TAG archive-cutoff
EXPL "OCSP Archive Cutoff Extension"
NAME NSS_OID_PKIX_OCSP_ARCHIVE_CUTOFF

OID 1.3.6.1.5.5.7.48.1.7
TAG service-locator
EXPL "OCSP Service Locator Extension"
NAME NSS_OID_PKIX_OCSP_SERVICE_LOCATOR

# RFC 2549:
#
# id-ad-caIssuers OBJECT IDENTIFIER ::= { id-ad 2 }
OID 1.3.6.1.5.5.7.48.2
TAG id-ad-caIssuers
EXPL "Certificate Authority Issuers"

OID 1.3.6.1.6
TAG snmpv2
EXPL "Internet: SNMPv2"

OID 1.3.6.1.7
TAG mail
EXPL "Internet: mail"

OID 1.3.6.1.7.1
TAG mime-mhs
EXPL "Internet: mail MIME mhs"

OID 1.3.12 
TAG ecma
EXPL "European Computers Manufacturing Association"

OID 1.3.14
TAG oiw
EXPL "Open Systems Implementors Workshop"

OID 1.3.14.3 secsig
TAG secsig
EXPL "Open Systems Implementors Workshop Security Special Interest Group"

OID 1.3.14.3.1
TAG oIWSECSIGAlgorithmObjectIdentifiers
EXPL "OIW SECSIG Algorithm OIDs"

OID 1.3.14.3.2 
TAG algorithm
EXPL "OIW SECSIG Algorithm"

OID 1.3.14.3.2.6 
TAG desecb
EXPL "DES-ECB"
NAME NSS_OID_DES_ECB
CKM CKM_DES_ECB

OID 1.3.14.3.2.7
TAG descbc
EXPL "DES-CBC"
NAME NSS_OID_DES_CBC
CKM CKM_DES_CBC

OID 1.3.14.3.2.8
TAG desofb
EXPL "DES-OFB"
NAME NSS_OID_DES_OFB
# No CKM..

OID 1.3.14.3.2.9 
TAG descfb
EXPL "DES-CFB"
NAME NSS_OID_DES_CFB
# No CKM..

OID 1.3.14.3.2.10
TAG desmac
EXPL "DES-MAC"
NAME NSS_OID_DES_MAC
CKM CKM_DES_MAC

OID 1.3.14.3.2.15 
TAG isoSHAWithRSASignature
EXPL "ISO SHA with RSA Signature"
NAME NSS_OID_ISO_SHA_WITH_RSA_SIGNATURE
# No CKM..

OID 1.3.14.3.2.17 
TAG desede
EXPL "DES-EDE"
NAME NSS_OID_DES_EDE
# No CKM..

OID 1.3.14.3.2.26 
TAG sha1
EXPL "SHA-1"
NAME NSS_OID_SHA1
CKM CKM_SHA_1

OID 1.3.14.3.2.27
TAG bogusDSASignatureWithSHA1Digest
EXPL "Forgezza DSA Signature with SHA-1 Digest"
NAME NSS_OID_BOGUS_DSA_SIGNATURE_WITH_SHA1_DIGEST
CKM CKM_DSA_SHA1

OID 1.3.14.3.3
TAG authentication-mechanism
EXPL "OIW SECSIG Authentication Mechanisms"

OID 1.3.14.3.4
TAG security-attribute
EXPL "OIW SECSIG Security Attributes"

OID 1.3.14.3.5
TAG document-definition
EXPL "OIW SECSIG Document Definitions used in security"

OID 1.3.14.7
TAG directory-services-sig
EXPL "OIW directory services sig"

OID 1.3.16
TAG ewos
EXPL "European Workshop on Open Systems"

OID 1.3.22
TAG osf
EXPL "Open Software Foundation"

OID 1.3.23
TAG nordunet
EXPL "Nordunet"

OID 1.3.26
TAG nato-id-org
EXPL "NATO identified organisation"

OID 1.3.36
TAG teletrust
EXPL "Teletrust"

OID 1.3.52
TAG smpte
EXPL "Society of Motion Picture and Television Engineers"

OID 1.3.69
TAG sita
EXPL "Societe Internationale de Telecommunications Aeronautiques"

OID 1.3.90
TAG iana
EXPL "Internet Assigned Numbers Authority"

OID 1.3.101 
TAG thawte
EXPL "Thawte"

OID 2 
TAG joint-iso-ccitt
EXPL "Joint ISO/ITU-T assignment"

OID 2.0
TAG presentation
EXPL "Joint ISO/ITU-T Presentation"

OID 2.1
TAG asn-1
EXPL "Abstract Syntax Notation One"

OID 2.2
TAG acse
EXPL "Association Control"

OID 2.3
TAG rtse
EXPL "Reliable Transfer"

OID 2.4
TAG rose
EXPL "Remote Operations"

OID 2.5
TAG x500
EXPL "Directory"

OID 2.5.1
TAG modules
EXPL "X.500 modules"

OID 2.5.2
TAG service-environment
EXPL "X.500 service environment"

OID 2.5.3
TAG application-context
EXPL "X.500 application context"

# RFC 2459:
#
# id-at           OBJECT IDENTIFIER ::= {joint-iso-ccitt(2) ds(5) 4}
OID 2.5.4
TAG id-at
EXPL "X.520 attribute types"

# RFC 2459:
#
# id-at-commonName        AttributeType   ::=     {id-at 3}
OID 2.5.4.3
TAG id-at-commonName
EXPL "X.520 Common Name"
NAME NSS_OID_X520_COMMON_NAME
ATTR "cn"

# RFC 2459:
#
# id-at-surname           AttributeType   ::=     {id-at 4}
OID 2.5.4.4
TAG id-at-surname
EXPL "X.520 Surname"
NAME NSS_OID_X520_SURNAME
ATTR "sn"

# RFC 2459:
#
# id-at-countryName       AttributeType   ::=     {id-at 6}
OID 2.5.4.6
TAG id-at-countryName
EXPL "X.520 Country Name"
NAME NSS_OID_X520_COUNTRY_NAME
ATTR "c"

# RFC 2459:
#
# id-at-localityName      AttributeType   ::=     {id-at 7}
OID 2.5.4.7
TAG id-at-localityName
EXPL "X.520 Locality Name"
NAME NSS_OID_X520_LOCALITY_NAME
ATTR "l"

# RFC 2459:
#
# id-at-stateOrProvinceName       AttributeType   ::=     {id-at 8}
OID 2.5.4.8
TAG id-at-stateOrProvinceName
EXPL "X.520 State or Province Name"
NAME NSS_OID_X520_STATE_OR_PROVINCE_NAME
ATTR "s"

# RFC 2459:
#
# id-at-organizationName          AttributeType   ::=     {id-at 10}
OID 2.5.4.10
TAG id-at-organizationName
EXPL "X.520 Organization Name"
NAME NSS_OID_X520_ORGANIZATION_NAME
ATTR "o"

# RFC 2459:
#
# id-at-organizationalUnitName    AttributeType   ::=     {id-at 11}
OID 2.5.4.11
TAG id-at-organizationalUnitName
EXPL "X.520 Organizational Unit Name"
NAME NSS_OID_X520_ORGANIZATIONAL_UNIT_NAME
ATTR "ou"

# RFC 2459:
#
# id-at-title     AttributeType   ::=     {id-at 12}
OID 2.5.4.12
TAG id-at-title
EXPL "X.520 Title"
NAME NSS_OID_X520_TITLE
ATTR "title"

# RFC 2459:
#
# id-at-name              AttributeType   ::=     {id-at 41}
OID 2.5.4.41
TAG id-at-name
EXPL "X.520 Name"
NAME NSS_OID_X520_NAME
ATTR "name"

# RFC 2459:
#
# id-at-givenName         AttributeType   ::=     {id-at 42}
OID 2.5.4.42
TAG id-at-givenName
EXPL "X.520 Given Name"
NAME NSS_OID_X520_GIVEN_NAME
ATTR "givenName"

# RFC 2459:
#
# id-at-initials          AttributeType   ::=     {id-at 43}
OID 2.5.4.43
TAG id-at-initials
EXPL "X.520 Initials"
NAME NSS_OID_X520_INITIALS
ATTR "initials"

# RFC 2459:
#
# id-at-generationQualifier       AttributeType   ::=     {id-at 44}
OID 2.5.4.44
TAG id-at-generationQualifier
EXPL "X.520 Generation Qualifier"
NAME NSS_OID_X520_GENERATION_QUALIFIER
ATTR "generationQualifier"

# RFC 2459:
#
# id-at-dnQualifier       AttributeType   ::=     {id-at 46}
OID 2.5.4.46
TAG id-at-dnQualifier
EXPL "X.520 DN Qualifier"
NAME NSS_OID_X520_DN_QUALIFIER
ATTR "dnQualifier"

OID 2.5.5
TAG attribute-syntax
EXPL "X.500 attribute syntaxes"

OID 2.5.6
TAG object-classes
EXPL "X.500 standard object classes"

OID 2.5.7
TAG attribute-set
EXPL "X.500 attribute sets"

OID 2.5.8
TAG algorithms
EXPL "X.500-defined algorithms"

OID 2.5.8.1 
TAG encryption
EXPL "X.500-defined encryption algorithms"

OID 2.5.8.1.1 
TAG rsa
EXPL "RSA Encryption Algorithm"
NAME NSS_OID_X500_RSA_ENCRYPTION
CKM CKM_RSA_X_509

OID 2.5.9
TAG abstract-syntax
EXPL "X.500 abstract syntaxes"

OID 2.5.12
TAG operational-attribute
EXPL "DSA Operational Attributes"

OID 2.5.13
TAG matching-rule
EXPL "Matching Rule"

OID 2.5.14
TAG knowledge-matching-rule
EXPL "X.500 knowledge Matching Rules"

OID 2.5.15
TAG name-form
EXPL "X.500 name forms"

OID 2.5.16
TAG group
EXPL "X.500 groups"

OID 2.5.17
TAG subentry
EXPL "X.500 subentry"

OID 2.5.18
TAG operational-attribute-type
EXPL "X.500 operational attribute type"

OID 2.5.19
TAG operational-binding
EXPL "X.500 operational binding"

OID 2.5.20
TAG schema-object-class
EXPL "X.500 schema Object class"

OID 2.5.21
TAG schema-operational-attribute
EXPL "X.500 schema operational attributes"

OID 2.5.23
TAG administrative-role
EXPL "X.500 administrative roles"

OID 2.5.24
TAG access-control-attribute
EXPL "X.500 access control attribute"

OID 2.5.25
TAG ros
EXPL "X.500 ros object"

OID 2.5.26
TAG contract
EXPL "X.500 contract"

OID 2.5.27
TAG package
EXPL "X.500 package"

OID 2.5.28
TAG access-control-schema
EXPL "X.500 access control schema"

# RFC 2459:
#
# id-ce OBJECT IDENTIFIER  ::=  {joint-iso-ccitt(2) ds(5) 29}
OID 2.5.29
TAG id-ce
EXPL "X.500 Certificate Extension"

OID 2.5.29.5
TAG subject-directory-attributes
EXPL "Certificate Subject Directory Attributes"
NAME NSS_OID_X509_SUBJECT_DIRECTORY_ATTR
CERT_EXTENSION UNSUPPORTED

# RFC 2459:
#
# id-ce-subjectDirectoryAttributes OBJECT IDENTIFIER ::=  { id-ce 9 }
OID 2.5.29.9
TAG id-ce-subjectDirectoryAttributes
EXPL "Certificate Subject Directory Attributes"
NAME NSS_OID_X509_SUBJECT_DIRECTORY_ATTRIBUTES
CERT_EXTENSION UNSUPPORTED

# RFC 2459:
#
# id-ce-subjectKeyIdentifier OBJECT IDENTIFIER ::=  { id-ce 14 }
OID 2.5.29.14
TAG id-ce-subjectKeyIdentifier
EXPL "Certificate Subject Key ID"
NAME NSS_OID_X509_SUBJECT_KEY_ID
CERT_EXTENSION SUPPORTED

# RFC 2459:
#
# id-ce-keyUsage OBJECT IDENTIFIER ::=  { id-ce 15 }
OID 2.5.29.15
TAG id-ce-keyUsage
EXPL "Certificate Key Usage"
NAME NSS_OID_X509_KEY_USAGE
CERT_EXTENSION SUPPORTED
# We called it PKCS12_KEY_USAGE

# RFC 2459:
#
# id-ce-privateKeyUsagePeriod OBJECT IDENTIFIER ::=  { id-ce 16 }
OID 2.5.29.16
TAG id-ce-privateKeyUsagePeriod
EXPL "Certificate Private Key Usage Period"
NAME NSS_OID_X509_PRIVATE_KEY_USAGE_PERIOD
CERT_EXTENSION UNSUPPORTED

# RFC 2459:
#
# id-ce-subjectAltName OBJECT IDENTIFIER ::=  { id-ce 17 }
OID 2.5.29.17
TAG id-ce-subjectAltName
EXPL "Certificate Subject Alternate Name"
NAME NSS_OID_X509_SUBJECT_ALT_NAME
CERT_EXTENSION SUPPORTED

# RFC 2459:
#
# id-ce-issuerAltName OBJECT IDENTIFIER ::=  { id-ce 18 }
OID 2.5.29.18
TAG id-ce-issuerAltName
EXPL "Certificate Issuer Alternate Name"
NAME NSS_OID_X509_ISSUER_ALT_NAME
CERT_EXTENSION UNSUPPORTED

# RFC 2459:
#
# id-ce-basicConstraints OBJECT IDENTIFIER ::=  { id-ce 19 }
OID 2.5.29.19
TAG id-ce-basicConstraints
EXPL "Certificate Basic Constraints"
NAME NSS_OID_X509_BASIC_CONSTRAINTS
CERT_EXTENSION SUPPORTED

# RFC 2459:
#
# id-ce-cRLNumber OBJECT IDENTIFIER ::= { id-ce 20 }
OID 2.5.29.20
TAG id-ce-cRLNumber
EXPL "CRL Number"
NAME NSS_OID_X509_CRL_NUMBER
CERT_EXTENSION SUPPORTED

# RFC 2459:
#
# id-ce-cRLReasons OBJECT IDENTIFIER ::= { id-ce 21 }
OID 2.5.29.21
TAG id-ce-cRLReasons
EXPL "CRL Reason Code"
NAME NSS_OID_X509_REASON_CODE
CERT_EXTENSION SUPPORTED

# RFC 2459:
#
# id-ce-holdInstructionCode OBJECT IDENTIFIER ::= { id-ce 23 }
OID 2.5.29.23
TAG id-ce-holdInstructionCode
EXPL "Hold Instruction Code"
NAME NSS_OID_X509_HOLD_INSTRUCTION_CODE
CERT_EXTENSION UNSUPPORTED

# RFC 2459:
#
# id-ce-invalidityDate OBJECT IDENTIFIER ::= { id-ce 24 }
OID 2.5.29.24
TAG id-ce-invalidityDate
EXPL "Invalid Date"
NAME NSS_OID_X509_INVALID_DATE
CERT_EXTENSION SUPPORTED

# RFC 2459:
#
# id-ce-deltaCRLIndicator OBJECT IDENTIFIER ::= { id-ce 27 }
OID 2.5.29.27
TAG id-ce-deltaCRLIndicator
EXPL "Delta CRL Indicator"
NAME NSS_OID_X509_DELTA_CRL_INDICATOR
CERT_EXTENSION UNSUPPORTED

# RFC 2459:
#
# id-ce-issuingDistributionPoint OBJECT IDENTIFIER ::= { id-ce 28 }
OID 2.5.29.28
TAG id-ce-issuingDistributionPoint
EXPL "Issuing Distribution Point"
NAME NSS_OID_X509_ISSUING_DISTRIBUTION_POINT
CERT_EXTENSION UNSUPPORTED

# RFC 2459:
#
# id-ce-certificateIssuer OBJECT IDENTIFIER ::= { id-ce 29 }
OID 2.5.29.29
TAG id-ce-certificateIssuer
EXPL "Certificate Issuer"
NAME NSS_OID_X509_CERTIFICATE_ISSUER
CERT_EXTENSION UNSUPPORTED

# RFC 2459:
#
# id-ce-nameConstraints OBJECT IDENTIFIER ::=  { id-ce 30 }
OID 2.5.29.30
TAG id-ce-nameConstraints
EXPL "Certificate Name Constraints"
NAME NSS_OID_X509_NAME_CONSTRAINTS
CERT_EXTENSION SUPPORTED

# RFC 2459:
#
# id-ce-cRLDistributionPoints     OBJECT IDENTIFIER  ::=  {id-ce 31}
OID 2.5.29.31
TAG id-ce-cRLDistributionPoints
EXPL "CRL Distribution Points"
NAME NSS_OID_X509_CRL_DIST_POINTS
CERT_EXTENSION UNSUPPORTED

# RFC 2459:
#
# id-ce-certificatePolicies OBJECT IDENTIFIER ::=  { id-ce 32 }
OID 2.5.29.32
TAG id-ce-certificatePolicies
EXPL "Certificate Policies"
NAME NSS_OID_X509_CERTIFICATE_POLICIES
CERT_EXTENSION UNSUPPORTED

# RFC 2459:
#
# id-ce-policyMappings OBJECT IDENTIFIER ::=  { id-ce 33 }
OID 2.5.29.33
TAG id-ce-policyMappings
EXPL "Certificate Policy Mappings"
NAME NSS_OID_X509_POLICY_MAPPINGS
CERT_EXTENSION UNSUPPORTED

OID 2.5.29.34
TAG policy-constraints
EXPL "Certificate Policy Constraints (old)"
CERT_EXTENSION UNSUPPORTED

# RFC 2459:
#
# id-ce-authorityKeyIdentifier OBJECT IDENTIFIER ::=  { id-ce 35 }
OID 2.5.29.35
TAG id-ce-authorityKeyIdentifier
EXPL "Certificate Authority Key Identifier"
NAME NSS_OID_X509_AUTH_KEY_ID
CERT_EXTENSION SUPPORTED

# RFC 2459:
#
# id-ce-policyConstraints OBJECT IDENTIFIER ::=  { id-ce 36 }
OID 2.5.29.36
TAG id-ce-policyConstraints
EXPL "Certificate Policy Constraints"
NAME NSS_OID_X509_POLICY_CONSTRAINTS
CERT_EXTENSION SUPPORTED

# RFC 2459:
#
# id-ce-extKeyUsage OBJECT IDENTIFIER ::= {id-ce 37}
OID 2.5.29.37
TAG id-ce-extKeyUsage
EXPL "Extended Key Usage"
NAME NSS_OID_X509_EXT_KEY_USAGE
CERT_EXTENSION SUPPORTED

OID 2.5.30
TAG id-mgt
EXPL "X.500 Management Object"

OID 2.6
TAG x400
EXPL "X.400 MHS"

OID 2.7
TAG ccr
EXPL "Committment, Concurrency and Recovery"

OID 2.8
TAG oda
EXPL "Office Document Architecture"

OID 2.9
TAG osi-management
EXPL "OSI management"

OID 2.10
TAG tp
EXPL "Transaction Processing"

OID 2.11
TAG dor
EXPL "Distinguished Object Reference"

OID 2.12
TAG rdt
EXPL "Referenced Data Transfer"

OID 2.13
TAG nlm
EXPL "Network Layer Management"

OID 2.14
TAG tlm
EXPL "Transport Layer Management"

OID 2.15
TAG llm
EXPL "Link Layer Management"

OID 2.16
TAG country
EXPL "Country Assignments"

OID 2.16.124 
TAG canada
EXPL "Canada"

OID 2.16.158
TAG taiwan
EXPL "Taiwan"

OID 2.16.578 
TAG norway
EXPL "Norway"

OID 2.16.756 
TAG switzerland
EXPL "Switzerland"

OID 2.16.840 
TAG us
EXPL "United States"

OID 2.16.840.1 
TAG us-company
EXPL "United States Company"

OID 2.16.840.1.101 
TAG us-government
EXPL "United States Government (1.101)"

OID 2.16.840.1.101.2 
TAG us-dod
EXPL "United States Department of Defense"

OID 2.16.840.1.101.2.1 
TAG id-infosec
EXPL "US DOD Infosec"

OID 2.16.840.1.101.2.1.0 
TAG id-modules
EXPL "US DOD Infosec modules"

OID 2.16.840.1.101.2.1.1 
TAG id-algorithms
EXPL "US DOD Infosec algorithms (MISSI)"

OID 2.16.840.1.101.2.1.1.2  
TAG old-dss
EXPL "MISSI DSS Algorithm (Old)"
NAME NSS_OID_MISSI_DSS_OLD

# This is labeled as "### mwelch temporary"
# Is it official?? XXX fgmr
OID 2.16.840.1.101.2.1.1.4
TAG skipjack-cbc-64
EXPL "Skipjack CBC64"
NAME NSS_OID_FORTEZZA_SKIPJACK
CKM CKM_SKIPJACK_CBC64

OID 2.16.840.1.101.2.1.1.10
TAG kea
EXPL "MISSI KEA Algorithm"
NAME NSS_OID_MISSI_KEA

OID 2.16.840.1.101.2.1.1.12
TAG old-kea-dss
EXPL "MISSI KEA and DSS Algorithm (Old)"
NAME NSS_OID_MISSI_KEA_DSS_OLD

OID 2.16.840.1.101.2.1.1.19
TAG dss
EXPL "MISSI DSS Algorithm"
NAME NSS_OID_MISSI_DSS

OID 2.16.840.1.101.2.1.1.20
TAG kea-dss
EXPL "MISSI KEA and DSS Algorithm"
NAME NSS_OID_MISSI_KEA_DSS

OID 2.16.840.1.101.2.1.1.22
TAG alt-kea
EXPL "MISSI Alternate KEA Algorithm"
NAME NSS_OID_MISSI_ALT_KEY

OID 2.16.840.1.101.2.1.2 
TAG id-formats
EXPL "US DOD Infosec formats"

OID 2.16.840.1.101.2.1.3 
TAG id-policy
EXPL "US DOD Infosec policy"

OID 2.16.840.1.101.2.1.4 
TAG id-object-classes
EXPL "US DOD Infosec object classes"

OID 2.16.840.1.101.2.1.5 
TAG id-attributes
EXPL "US DOD Infosec attributes"

OID 2.16.840.1.101.2.1.6 
TAG id-attribute-syntax
EXPL "US DOD Infosec attribute syntax"

OID 2.16.840.1.113730 
# The Netscape OID space
TAG netscape
EXPL "Netscape Communications Corp."

OID 2.16.840.1.113730.1
TAG cert-ext
EXPL "Netscape Cert Extensions"

OID 2.16.840.1.113730.1.1
TAG cert-type
EXPL "Certificate Type"
NAME NSS_OID_NS_CERT_EXT_CERT_TYPE
CERT_EXTENSION SUPPORTED

OID 2.16.840.1.113730.1.2
TAG base-url
EXPL "Certificate Extension Base URL"
NAME NSS_OID_NS_CERT_EXT_BASE_URL
CERT_EXTENSION SUPPORTED

OID 2.16.840.1.113730.1.3
TAG revocation-url
EXPL "Certificate Revocation URL"
NAME NSS_OID_NS_CERT_EXT_REVOCATION_URL
CERT_EXTENSION SUPPORTED

OID 2.16.840.1.113730.1.4
TAG ca-revocation-url
EXPL "Certificate Authority Revocation URL"
NAME NSS_OID_NS_CERT_EXT_CA_REVOCATION_URL
CERT_EXTENSION SUPPORTED

OID 2.16.840.1.113730.1.5
TAG ca-crl-download-url
EXPL "Certificate Authority CRL Download URL"
NAME NSS_OID_NS_CERT_EXT_CA_CRL_URL
CERT_EXTENSION UNSUPPORTED

OID 2.16.840.1.113730.1.6
TAG ca-cert-url
EXPL "Certificate Authority Certificate Download URL"
NAME NSS_OID_NS_CERT_EXT_CA_CERT_URL
CERT_EXTENSION UNSUPPORTED

OID 2.16.840.1.113730.1.7
TAG renewal-url
EXPL "Certificate Renewal URL"
NAME NSS_OID_NS_CERT_EXT_CERT_RENEWAL_URL
CERT_EXTENSION SUPPORTED

OID 2.16.840.1.113730.1.8
TAG ca-policy-url
EXPL "Certificate Authority Policy URL"
NAME NSS_OID_NS_CERT_EXT_CA_POLICY_URL
CERT_EXTENSION SUPPORTED

OID 2.16.840.1.113730.1.9
TAG homepage-url
EXPL "Certificate Homepage URL"
NAME NSS_OID_NS_CERT_EXT_HOMEPAGE_URL
CERT_EXTENSION UNSUPPORTED

OID 2.16.840.1.113730.1.10
TAG entity-logo
EXPL "Certificate Entity Logo"
NAME NSS_OID_NS_CERT_EXT_ENTITY_LOGO
CERT_EXTENSION UNSUPPORTED

OID 2.16.840.1.113730.1.11
TAG user-picture
EXPL "Certificate User Picture"
NAME NSS_OID_NS_CERT_EXT_USER_PICTURE
CERT_EXTENSION UNSUPPORTED

OID 2.16.840.1.113730.1.12
TAG ssl-server-name
EXPL "Certificate SSL Server Name"
NAME NSS_OID_NS_CERT_EXT_SSL_SERVER_NAME
CERT_EXTENSION SUPPORTED

OID 2.16.840.1.113730.1.13
TAG comment
EXPL "Certificate Comment"
NAME NSS_OID_NS_CERT_EXT_COMMENT
CERT_EXTENSION SUPPORTED

OID 2.16.840.1.113730.1.14
TAG thayes
EXPL ""
NAME NSS_OID_NS_CERT_EXT_THAYES
CERT_EXTENSION SUPPORTED

OID 2.16.840.1.113730.2
TAG data-type
EXPL "Netscape Data Types"

OID 2.16.840.1.113730.2.1 
TAG gif
EXPL "image/gif"
NAME NSS_OID_NS_TYPE_GIF

OID 2.16.840.1.113730.2.2 
TAG jpeg
EXPL "image/jpeg"
NAME NSS_OID_NS_TYPE_JPEG

OID 2.16.840.1.113730.2.3 
TAG url
EXPL "URL"
NAME NSS_OID_NS_TYPE_URL

OID 2.16.840.1.113730.2.4 
TAG html
EXPL "text/html"
NAME NSS_OID_NS_TYPE_HTML

OID 2.16.840.1.113730.2.5 
TAG cert-sequence
EXPL "Certificate Sequence"
NAME NSS_OID_NS_TYPE_CERT_SEQUENCE

OID 2.16.840.1.113730.3
# The Netscape Directory OID space
TAG directory
EXPL "Netscape Directory"

OID 2.16.840.1.113730.4
TAG policy
EXPL "Netscape Policy Type OIDs"

OID 2.16.840.1.113730.4.1
TAG export-approved
EXPL "Strong Crypto Export Approved"
NAME NSS_OID_NS_KEY_USAGE_GOVT_APPROVED
CERT_EXTENSION UNSUPPORTED

OID 2.16.840.1.113730.5
TAG cert-server
EXPL "Netscape Certificate Server"

OID 2.16.840.1.113730.5.1

OID 2.16.840.1.113730.5.1.1
TAG recovery-request
EXPL "Netscape Cert Server Recovery Request"
NAME NSS_OID_NETSCAPE_RECOVERY_REQUEST

OID 2.16.840.1.113730.6
TAG algs
EXPL "Netscape algorithm OIDs"

OID 2.16.840.1.113730.6.1
TAG smime-kea
EXPL "Netscape S/MIME KEA"
NAME NSS_OID_NETSCAPE_SMIME_KEA

OID 2.16.840.1.113730.7
TAG name-components
EXPL "Netscape Name Components"

OID 2.16.840.1.113730.7.1
TAG nickname
EXPL "Netscape Nickname"
NAME NSS_OID_NETSCAPE_NICKNAME

OID 2.16.840.1.113733 
TAG verisign
EXPL "Verisign"

OID 2.16.840.1.113733.1

OID 2.16.840.1.113733.1.7

OID 2.16.840.1.113733.1.7.1

OID 2.16.840.1.113733.1.7.1.1
TAG verisign-user-notices
EXPL "Verisign User Notices"
NAME NSS_OID_VERISIGN_USER_NOTICES

OID 2.16.840.101 
TAG us-government
EXPL "US Government (101)"

OID 2.16.840.102 
TAG us-government2
EXPL "US Government (102)"
 
OID 2.16.840.11370 
TAG old-netscape
EXPL "Netscape Communications Corp. (Old)"

OID 2.16.840.11370.1 
TAG ns-cert-ext
EXPL "Netscape Cert Extensions (Old NS)"

OID 2.16.840.11370.1.1 
TAG netscape-ok
EXPL "Netscape says this cert is ok (Old NS)"
NAME NSS_OID_NS_CERT_EXT_NETSCAPE_OK
CERT_EXTENSION UNSUPPORTED

OID 2.16.840.11370.1.2
TAG issuer-logo
EXPL "Certificate Issuer Logo (Old NS)"
NAME NSS_OID_NS_CERT_EXT_ISSUER_LOGO
CERT_EXTENSION UNSUPPORTED

OID 2.16.840.11370.1.3
TAG subject-logo
EXPL "Certificate Subject Logo (Old NS)"
NAME NSS_OID_NS_CERT_EXT_SUBJECT_LOGO
CERT_EXTENSION UNSUPPORTED

OID 2.16.840.11370.2 
TAG ns-file-type
EXPL "Netscape File Type"

OID 2.16.840.11370.3 
TAG ns-image-type
EXPL "Netscape Image Type"

OID 2.17
TAG registration-procedures
EXPL "Registration procedures"

OID 2.18
TAG physical-layer-management
EXPL "Physical layer Management"

OID 2.19
TAG mheg
EXPL "MHEG"

OID 2.20
TAG guls
EXPL "Generic Upper Layer Security"

OID 2.21
TAG tls
EXPL "Transport Layer Security Protocol"

OID 2.22
TAG nls
EXPL "Network Layer Security Protocol"

OID 2.23
TAG organization
EXPL "International organizations"