Criticality shall be set to FALSE. Subject Key Identifier Extension Table 9 shows the extension settings for AeroMACS CA certificates and specifies that all subjectKeyIdentifier AeroMACS Root and CA certificates: Shall include the extension subjectKeyIdentifier Shall set the criticality of the extension to FALSE subjectKeyIdentifier calculate the of the per Method 1 keyIdentifier subjectKeyIdentifier Table 9: subjectKeyIdentifier Extension for AeroMACS CA Certificates Field Format Criticality Value Comment subjectKeyIdentifier FALSE { id-ce 14 } Included in all CA certificates keyIdentifier OCTET <key identifier> Calculated per Method 1. STRING Device Certificates shall not include the extension. subjectKeyIdentifier Basic Constraints Extension Table 10 shows the extension settings for AeroMACS Root CA certificates and specifies that all basicConstraints AeroMACS Root CA certificates: include the extension basicConstraints Shall set the criticality of the extension to TRUE basicConstraints Shall set the cA field of the extension to TRUE basicConstraints Table 10: basicConstraints Extension for AeroMACS Root CA Certificates Field Format Criticality Value Comment basicConstraints TRUE { id-ce 19 } Included in all Root certificates cA BOOLEAN TRUE Set pathLenConstraint INTEGER Not Set Table 11 shows the extension settings for AeroMACS CA certificates and specifies that all basicConstraints AeroMACS CA certificates: include the extension basicConstraints Shall set the criticality of the extension to TRUE basicConstraints Shall set the cA field of the extension set to TRUE basicConstraints Shall set the field of the to (zero) pathLenConstraint basicConstraints “0” Table 11: basicConstraints Extension for AeroMACS CA Certificates Format Criticality Value Comment
Criticality shall be set to FALSE. Subject Key Identifier Extension Table 9 shows the subjectKeyIdentifier extension settings for AeroMACS CA certificates and specifies that all AeroMACS Root and CA certificates: Shall include the subjectKeyIdentifier extension Shall set the criticality of the subjectKeyIdentifier extension to FALSE calculate the keyIdentifier of the subjectKeyIdentifier per Method 1 Table 9: subjectKeyIdentifier Extension for AeroMACS CA Certificates Field Format Criticality Value Comment subjectKeyIdentifier FALSE { id-ce 14 } Included in all CA certificates keyIdentifier OCTET STRING <key identifier> Calculated per Method 1. Device Certificates shall not include the subjectKeyIdentifier extension. Basic Constraints Extension Table 10 shows the basicConstraints extension settings for AeroMACS Root CA certificates and specifies that all AeroMACS Root CA certificates: include the basicConstraints extension Shall set the criticality of the basicConstraints extension to TRUE Shall set the cA field of the basicConstraints extension to TRUE Table 10: basicConstraints Extension for AeroMACS Root CA Certificates Field Format Criticality Value Comment basicConstraints TRUE { id-ce 19 } Included in all Root certificates cA BOOLEAN TRUE Set pathLenConstraint INTEGER Not Set Table 11 shows the basicConstraints extension settings for AeroMACS CA certificates and specifies that all AeroMACS CA certificates: include the basicConstraints extension Shall set the criticality of the basicConstraints extension to TRUE Shall set the cA field of the basicConstraints extension set to TRUE Shall set the pathLenConstraint field of the basicConstraints to “0” (zero) Table 11: basicConstraints Extension for AeroMACS CA Certificates Format Criticality Value Comment
WP05.1%20Attachment%20to%20WP05%20DRAFT_AeroMACS%20PKI%20Certificate%20Policy.docx