4.17 Subject Alternative Name Types (obsolete, 3/2005)

The subject alternative name type determined which encoding format was used to encode the alternative name and is now deprecated and replaced by Section 4.3, General Name Type Extensions. As specified by the X.509 standard, three of the name types were encoded as IA5String, which is the same as ASCII (rfc822Name, dNSName, and uniformResourceIdentifier). When using any of the three forms specified above, the value must contain the Unicode representation of the IA5String and the length field must contain the number of bytes in the Unicode string including the NULL terminator.

NOTE:The names are specified in Unicode instead of IA5String because all other parameters in the API are Unicode. However, only IA5String characters are supported.

When using any other than the three forms specified above, value field must contain the data structures defined in the X.509 document RFC 2459. (This means that other forms required you to do any ASN.1 encoding.)

Also see Section 5.3, Subject Alternative Names Extension. The following subject alternative name types were defined:

Value

Name

Description

0x0000

X509_SUBJECT_ALT_NAME_OTHER_NAME

The alternative name must be encoded as an OtherName sequence as specified in RFC 2459.

0x0001

X509_SUBJECT_ALT_NAME_RFC822_NAME

The alternative name must be a Unicode representation of an IA5String.

0x0002

X509_SUBJECT_ALT_NAME_DNS_NAME

The alternative name must be a Unicode representation of an IA5String.

0x0003

X509_SUBJECT_ALT_NAME_X400_ADDRESS

The alternative name must be encoded as an ORAddress sequence as specified in RFC 2459.

0x0004

X509_SUBJECT_ALT_NAME_DIRECTORY_NAME

The alternative name must be encoded as a Name choice as specified in RFC 2459.

0x0005

X509_SUBJECT_ALT_NAME_EDI_PARTY_NAME

The alternative name must be encoded as an EDIPartyName sequence as specified in RFC 2459.

0x0006

X509_SUBJECT_ALT_NAME_UNIFORM_RESOURCE_IDENTIFIER

The alternative name must be a Unicode representation of an IA5String.

0x0007

X509_SUBJECT_ALT_NAME_IP_ADDRESS

The alternative name must be an OCTET STRING in "network byte order" as specified in RFC 2459. (network byte order specified in RFC 791).

0x0008

X509_SUBJECT_ALT_NAME_REGISTERED_ID

The alternative name must be encoded as an OBJECT IDENTIFIER as specified in RFC 2459.