Example with current syntax A validation policy is supporting several trust anchors, each one with its own certificate policy, path length and naming constrains, but the client may request to have a QCstatement equal to a specific value. There would be the need to have two OIDs: one for the validation policy, and another one for the validation algorithm, while the specific parameter to support the QCstatement would be a parameter of the validation algorithm (instead of a parameter from a validation policy) : ValidationPolicy ::= SEQUENCE { validationPolRef ValidationPolRef, validationAlg [0] ValidationAlg OPTIONAL, } |