pkix-3----Page:7
1  2  3  4  5  6  7  8  9  10  11  12  13 

Example with current syntax
A validation policy is supporting several trust anchors, each one with its own certificate policy, path length and naming constrains, but the client may request to have a QCstatement equal to a specific value.
There would be the need to have two OIDs:
one for the validation policy, and another
one for the validation algorithm,
while the specific parameter to support the QCstatement would be a parameter of the validation algorithm (instead of a parameter from a validation policy) :
ValidationPolicy ::= SEQUENCE {
validationPolRef ValidationPolRef,
validationAlg [0] ValidationAlg OPTIONAL,
}
PPT Version