Share via

2.23.1 Syntax Option 1

  • Article

Note An alternative scenario for template schema version 4 is defined in section 2.23.2.

If either of the following is true:

  • The template version is 1 or 2.

  • The template version is 4 and the template has the CT_FLAG_USE_LEGACY_PROVIDER bit of the msPKI-Private-Key-Flag attribute set.

Then the msPKI-RA-Application-Policies attribute contains multistring attributes that specify a set of application policy OIDs for the RA certificates. Application policy OIDs are the same as extended key usage OIDs, as specified in [RFC3280] section 4.2.1.13.