This class defines the certificate policies extension which specifies the policies under which the certificate has been issued and the purposes for which the certificate may be used.
Applications with specific policy requirements are expected to have a list of those policies which they will accept and to compare the policy OIDs in the certificate to that list. If this extension is critical, the path validation software MUST be able to interpret this extension (including the optional qualifier), or MUST reject the certificate.
Optional qualifiers are not supported in this implementation, as they are not recommended by RFC2459. The ASN.1 syntax for this is (IMPLICIT tagging is defined in the module definition):
id-ce-certificatePolicies OBJECT IDENTIFIER ::= { id-ce 32 } certificatePolicies ::= SEQUENCE SIZE (1..MAX) OF PolicyInformation PolicyInformation ::= SEQUENCE { policyIdentifier CertPolicyId, policyQualifiers SEQUENCE SIZE (1..MAX) OF PolicyQualifierInfo OPTIONAL } CertPolicyId ::= OBJECT IDENTIFIER
@author Anne Anderson
@since 1.4
@see Extension
@see CertAttrSet