その他令和8年2月27日
付録5 電子証明書に係る証明及びその請求の方式(送受信電文のASN.1構造とオブジェクト識別子)
出典：官報発行サイトの掲載情報を加工しています。AI 抽出や OCR に誤りが含まれる可能性があるため、 重要な確認は公式原文を基準にしてください。
本文と原文の対照
まず左側の本文を読み、必要な箇所だけ原文ページで確認できる構成です。
← 同日の官報に戻る
原文対照の表示オプション
付録5 電子証明書に係る証明及びその請求の方式(送受信電文のASN.1構造とオブジェクト識別子)
本文はAI抽出です。左の段落を選ぶと、右側の官報原文画像で該当箇所を照合できます。
-- The max size of Suspendata is 84Bytes. (Max64Bytes + 20Bytes).
GempSuspResContent ::= SEQUENCE {
status
PKIStatusInfo,
-- status information of suspension results
revCert
CertId
-- IDs for which revocation was requested (same order as status)
}
GemInfoReqContent ::= SEQUENCE OF NegotiationKey
NegotiationKey ::= SEQUENCE {
symmAlg AlgorithmIdentifier,
pubAlg AlgorithmIdentifier,
hashAlg AlgorithmIdentifier
}
GempInfoResContent ::= SEQUENCE {
status
PKIStatusInfo,
negotiationKeys SEQUENCE OF NegotiationKey OPTIONAL
}
END
2 Implicitly Tagged Module
MOJCRMF-SuspReq { 1 2 392 100300 1 4 22 }
DEFINITIONS IMPLICIT TAGS ::=
BEGIN
IMPORTS
AlgorithmIdentifier
FROM MOJCMPSuspReq { 1 2 392 100300 1 4 21 }
SubjectPublicKeyInfo, Name, RDNSsequence
FROM MOJCorpCertExplicit { 1 2 392 100300 1 4 1 };
CertTemplate ::= SEQUENCE {
serialNumber [1] INTEGER,
issuer [3] Name
}
EncryptedValue ::= SEQUENCE {
keyAlg [3] AlgorithmIdentifier,
encValue BIT STRING
}
CertId ::= SEQUENCE {
issuer
GeneralName,
serialNumber INTEGER
}
GeneralName ::= CHOICE {
directoryName [4] Name
}
ReasonFlags ::= BIT STRING {
certificateHold (6)
}
END
付録5 電子証明書に係る証明及びその請求の方式(送受信電文のASN.1構造とオブジェクト識別子)
MOJOCSP { 1 2 392 100300 1 4 31 }
DEFINITIONS EXPLICIT TAGS ::=
BEGIN
IMPORTS
Certificate
FROM MOJCorpCertExplicit { 1 2 392 100300 1 4 1 };
OCSPRequest ::= SEQUENCE {
tbsRequest TBSRequest
}
TBSRequest ::= SEQUENCE {
version [0] EXPLICIT Version DEFAULT v1,
requestList SEQUENCE OF Request,
requestExtensions [2] EXPLICIT Extensions -- nonce
}
Version ::= INTEGER { v1(0) }
Request ::= SEQUENCE {
reqCert CertID,
singleRequestExtensions [0] EXPLICIT Extensions OPTIONAL -- confirmationTime
CertID ::= SEQUENCE {
hashAlgorithm AlgorithmIdentifier,
issuerNameHash OCTET STRING, -- Hash of Issuer's DN
issuerKeyHash OCTET STRING, -- Hash of Issuer's public key
seriaINumber
CertificateSerialNumber }
CertificateSerialNumber ::= INTEGER
OCSPResponse ::= SEQUENCE {
responseStatus OCSPResponseStatus,
responseBytes [0] EXPLICIT ResponseBytes OPTIONAL }
OCSPResponseStatus ::= ENUMERATED {
successful (0),
malformedRequest (1)
-- Response has valid confirmations
-- Illegal confirmation request
ResponseBytes ::= SEQUENCE {
responseType RESPONSE.&type ({SupportedResponses}),
response RESPONSE.&Value ({SupportedResponses}{@responseType })
}
RESPONSE ::= CLASS {
&type OBJECT IDENTIFIER UNIQUE,
&Value
}
WITH SYNTAX { SYNTAX &Value IDENTIFIED BY &type }
SupportedResponses RESPONSE ::= {
... -- extensible
basicOCSPResponse }
basicOCSPResponse RESPONSE ::= {
SYNTAX BasicOCSPResponse
IDENTIFIED BY id-pkix-ocsp-basic
}
BasicOCSPResponse ::= SEQUENCE {
tbsResponseData ResponseData,
signatureAlgorithm AlgorithmIdentifier,
signature BIT STRING,
certs [0] EXPLICIT SEQUENCE OF Certificate }
ResponseData ::= SEQUENCE {
version [0] EXPLICIT Version DEFAULT v1,
responderID ResponderID,
producedAt GeneralizedTime,
responses SEQUENCE OF SingleResponse,
responseExtensions [1] EXPLICIT Extensions -- nonce
ResponderID ::= CHOICE {
byKey [2] KeyHash }
KeyHash ::= OCTET STRING -- SHA-1 hash of responder's public key
-- (excluding the tag and length fields)
SingleResponse ::= SEQUENCE {
certID CertID,
certStatus CertStatus,
thisUpdate GeneralizedTime,
nextUpdate [0] EXPLICIT GeneralizedTime OPTIONAL,
singleExtensions [1] EXPLICIT Extensions OPTIONAL
-- confirmationTime and ocspStatusCode
CertStatus ::= CHOICE {
good [0] IMPLICIT NULL,
revoked [1] IMPLICIT RevokedInfo,
unknown [2] IMPLICIT UnknownInfo }
RevokedInfo ::= SEQUENCE {
revocationTime GeneralizedTime,
revocationReason [0] EXPLICIT CRLReason }
UnknownInfo ::= NULL
AlgorithmIdentifier ::= SEQUENCE {
algorithm ALGORITHM-ID.&id({SupportedAlgorithms}),
parameters ALGORITHM-ID.&Type({SupportedAlgorithms}
{@algorithm}) }
ALGORITHM-ID ::= CLASS {
&id OBJECT IDENTIFIER UNIQUE,
&Type
}
WITH SYNTAX { OID &id PARAMS &Type }
SupportedAlgorithms ALGORITHM-ID ::= {
... -- extensible
rsaSHA-256 }
rsaSHA-256 ALGORITHM-ID ::= { OID sha256WithRSAEncryption PARAMS NULL }
pkcs-1 OBJECT IDENTIFIER ::= {
iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 1 }
sha256WithRSAEncryption OBJECT IDENTIFIER ::= { pkcs-1 11 }
p.82 / 2
読み込み中...
テキスト領域
選択中
非公開 (PII)