Class: X509V3ExtensionsType

name: X509V3ExtensionsType
description: Specifies any standard X.509 v3 extensions that may be used in the certificate.
comments:
- 'jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/x509-certificate.json#/definitions/x509-v3-extensions-type'
in_subset:
- common
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slots:
- basic_constraints
- name_constraints
- policy_constraints
- key_usage
- extended_key_usage
- subject_key_identifier
- authority_key_identifier
- subject_alternative_name
- issuer_alternative_name
- subject_directory_attributes
- crl_distribution_points
- inhibit_any_policy
- private_key_usage_period_not_before
- private_key_usage_period_not_after
- certificate_policies
- policy_mappings

name: X509V3ExtensionsType
description: Specifies any standard X.509 v3 extensions that may be used in the certificate.
comments:
- 'jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/x509-certificate.json#/definitions/x509-v3-extensions-type'
in_subset:
- common
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
attributes:
  basic_constraints:
    name: basic_constraints
    description: Specifies a multi-valued extension which indicates whether a certificate
      is a CA certificate.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: basic_constraints
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  name_constraints:
    name: name_constraints
    description: Specifies a namespace within which all subject names in subsequent
      certificates in a certification path must be located.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: name_constraints
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  policy_constraints:
    name: policy_constraints
    description: Specifies any constraints on path validation for certificates issued
      to CAs.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: policy_constraints
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  key_usage:
    name: key_usage
    description: Specifies a multi-valued extension consisting of a list of names
      of the permitted key usages.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: key_usage
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  extended_key_usage:
    name: extended_key_usage
    description: Specifies a list of usages indicating purposes for which the certificate
      public key can be used.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: extended_key_usage
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  subject_key_identifier:
    name: subject_key_identifier
    description: Specifies the identifier that provides a means of identifying certificates
      that contain a particular public key.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: subject_key_identifier
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  authority_key_identifier:
    name: authority_key_identifier
    description: Specifies the identifier that provides a means of identifying the
      public key corresponding to the private key used to sign a certificate.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: authority_key_identifier
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  subject_alternative_name:
    name: subject_alternative_name
    description: Specifies the additional identities to be bound to the subject of
      the certificate.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: subject_alternative_name
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  issuer_alternative_name:
    name: issuer_alternative_name
    description: Specifies the additional identities to be bound to the issuer of
      the certificate.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: issuer_alternative_name
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  subject_directory_attributes:
    name: subject_directory_attributes
    description: Specifies the identification attributes (e.g., nationality) of the
      subject.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: subject_directory_attributes
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  crl_distribution_points:
    name: crl_distribution_points
    description: Specifies how CRL information is obtained.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: crl_distribution_points
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  inhibit_any_policy:
    name: inhibit_any_policy
    description: Specifies the number of additional certificates that may appear in
      the path before anyPolicy is no longer permitted.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: inhibit_any_policy
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  private_key_usage_period_not_before:
    name: private_key_usage_period_not_before
    description: Specifies the date on which the validity period begins for the private
      key, if it is different from the validity period of the certificate.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: private_key_usage_period_not_before
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: datetime
  private_key_usage_period_not_after:
    name: private_key_usage_period_not_after
    description: Specifies the date on which the validity period ends for the private
      key, if it is different from the validity period of the certificate.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: private_key_usage_period_not_after
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: datetime
  certificate_policies:
    name: certificate_policies
    description: Specifies a sequence of one or more policy information terms, each
      of which consists of an object identifier (OID) and optional qualifiers.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: certificate_policies
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  policy_mappings:
    name: policy_mappings
    description: Specifies one or more pairs of OIDs; each pair includes an issuerDomainPolicy
      and a subjectDomainPolicy.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: policy_mappings
    owner: X509V3ExtensionsType
    domain_of:
    - X509V3ExtensionsType
    range: string
  id:
    name: id
    description: STIX object identifier.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:externalReference
    rank: 1000
    alias: id
    owner: X509V3ExtensionsType
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_identifier
  type:
    name: type
    description: STIX object type.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:state
    rank: 1000
    alias: type
    owner: X509V3ExtensionsType
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_type_name
  name:
    name: name
    description: Human-readable name.
    from_schema: https://w3id.org/lmodel/attack
    exact_mappings:
    - unified_cyber_ontology:name
    rank: 1000
    alias: name
    owner: X509V3ExtensionsType
    domain_of:
    - RelatedAsset
    - StixEntity
    - ExtensionDefinition
    - MarkingDefinition
    - AutonomousSystem
    - File
    range: string
  description:
    name: description
    description: Human-readable description.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - unified_cyber_ontology:description
    rank: 1000
    alias: description
    owner: X509V3ExtensionsType
    domain_of:
    - RelatedAsset
    - MutableElement
    - StixEntity
    - ExtensionDefinition
    - ExternalReference
    range: string