Subject: CP & CPS in CertificatePolicies Extension

From: "Oscar Conesa" <[email-masked]>
Date: Wed, 9 Aug 2000 17:15:06 +0200

Hi, 

We are creating templates to certificates and we have some questions about
the CertificatePolicies Extension.  We have a general CPS and several particular
Certificate Policy, one CP for every type of certificate. 
    
        CPS -> http://www.feste.com/rep/cps.html    (Not published yet)
                      OID: 1.3.6.1.4.1.5239.1

            CP1, Personal Certificates
                      http://www.feste.com/rep/cp1.html    (Not published yet)
                      OID: 1.3.6.1.4.1.5239.2.1                 (Why not?)

            CP2, Web Certificates
                      http://www.feste.com/rep/cp2.html   (Not published yet)
                      OID: 1.3.6.1.4.1.5239.2.2                 

             And others CPs .....

We have a hierarchy with a Root CA (version 1) and one Subordinate CA
for every type of certificate. 

What is the best implementation of CertificatePolicies Extension?

This is a good solution?:

---------------------------
 Subordinate CA
---------------------------

 certificatePolicies 
    PolicyInformation 
         policyIdentifier   1.3.6.1.4.1.5239.2.1
         policyQualifiers   
     PolicyQualifierInfo 
          policyQualifierId  id-qt-cps;
          qualifier    
                    cPSuri           http://www.feste.com/rep/cps.html
     PolicyQualifierInfo 
          policyQualifierId  id-qt-cps;
          qualifier    
                    cPSuri           http://www.feste.com/rep/cp1.html

-------------------------
 User
-------------------------

  certificatePolicies 
    PolicyInformation 
         policyIdentifier   1.3.6.1.4.1.5239.1
         policyQualifiers   
     PolicyQualifierInfo 
          policyQualifierId  id-qt-unotice;
          qualifier          
                userNotice
                 "Certificado Reconocido segun el Real Decreto Ley 
                        de Firma Electronica 14/1999 ...... "
     PolicyQualifierInfo 
          policyQualifierId  id-qt-cps;
          qualifier    
                    cPSuri           http://www.feste.com/rep/cps.html
     PolicyQualifierInfo 
          policyQualifierId  id-qt-cps;
          qualifier    
                    cPSuri           http://www.feste.com/rep/cp1.html

Thank you very much for your help

Oscar Conesa
Dtor Tecnico de FESTE