Share via

3.1.4.1.3.21 RARequirements

  • Article

If additional registration authority (RA) key(s) are required in signing enrollment requests for this policy, these keys are defined in an RARequirements object.

 <xs:complexType name="RARequirements">
   <xs:sequence>
     <xs:element name="rASignatures" type="xs:unsignedInt" />
     <xs:element name="rAEKUs" type="xcep:OIDReferenceCollection"
       nillable="true" />
     <xs:element name="rAPolicies" type="xcep:OIDReferenceCollection"
       nillable="true" />
   </xs:sequence>
 </xs:complexType>

rASignatures: Defines an integer indicating the number of additional signatures required. The <rASignatures> element MUST be an integer greater than or equal to 0.

rAEKUs: An instance of an OIDReferenceCollection object as defined in section 3.1.4.1.3.18. The <rAEKUs> element defines the required values in the extended key usage (EKU) extension of the RA certificate.

rAPolicies: An instance of an OIDReferenceCollection object defined in section 3.1.4.1.3.18. The <rAPolicies> element defines the required values in the policy extension of the RA certificate.