Class: StixX509V3Extensions

The standard X.509 v3 extensions of a certificate.

URI: attack:StixX509V3Extensions

 classDiagram
    class StixX509V3Extensions
    click StixX509V3Extensions href "../StixX509V3Extensions/"
      StixX509V3Extensions : authority_key_identifier
        
      StixX509V3Extensions : basic_constraints
        
      StixX509V3Extensions : certificate_policies
        
      StixX509V3Extensions : crl_distribution_points
        
      StixX509V3Extensions : extended_key_usage
        
      StixX509V3Extensions : inhibit_any_policy
        
      StixX509V3Extensions : issuer_alternative_name
        
      StixX509V3Extensions : key_usage
        
      StixX509V3Extensions : name_constraints
        
      StixX509V3Extensions : policy_constraints
        
      StixX509V3Extensions : policy_mappings
        
      StixX509V3Extensions : private_key_usage_period_not_after
        
      StixX509V3Extensions : private_key_usage_period_not_before
        
      StixX509V3Extensions : subject_alternative_name
        
      StixX509V3Extensions : subject_directory_attributes
        
      StixX509V3Extensions : subject_key_identifier
        
      

Slots

Name	Cardinality and Range	Description	Inheritance
basic_constraints	0..1 String	Specifies a multi-valued extension which indicates whether a certificate is a…	direct
name_constraints	0..1 String	Specifies a namespace within which all subject names in subsequent certificat…	direct
policy_constraints	0..1 String	Specifies any constraints on path validation for certificates issued to CAs	direct
key_usage	0..1 String	Specifies a multi-valued extension consisting of a list of names of the permi…	direct
extended_key_usage	0..1 String	Specifies a list of usages indicating purposes for which the certificate publ…	direct
subject_key_identifier	0..1 String	Specifies the identifier that provides a means of identifying certificates th…	direct
authority_key_identifier	0..1 String	Specifies the identifier that provides a means of identifying the public key …	direct
subject_alternative_name	0..1 String	Specifies the additional identities to be bound to the subject of the certifi…	direct
issuer_alternative_name	0..1 String	Specifies the additional identities to be bound to the issuer of the certific…	direct
subject_directory_attributes	0..1 String	The identification attributes of the subject, such as nationality	direct
crl_distribution_points	0..1 String	Specifies how CRL information is obtained	direct
inhibit_any_policy	0..1 String	Specifies the number of additional certificates that may appear in the path b…	direct
private_key_usage_period_not_before	0..1 StixTimestamp	Specifies the date on which the validity period begins for the private key, i…	direct
private_key_usage_period_not_after	0..1 StixTimestamp	Specifies the date on which the validity period ends for the private key, if …	direct
certificate_policies	0..1 String	Specifies a sequence of one or more policy information terms, each of which c…	direct
policy_mappings	0..1 String	Specifies one or more pairs of OIDs; each pair includes an issuerDomainPolicy…	direct

Expressions & Logic

Any Of

The class must satisfy at least one of:

• AnonymousClassExpression({ ‘slot_conditions’: {‘basic_constraints’: SlotDefinition({‘name’: ‘basic_constraints’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘name_constraints’: SlotDefinition({‘name’: ‘name_constraints’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘policy_constraints’: SlotDefinition({‘name’: ‘policy_constraints’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘key_usage’: SlotDefinition({‘name’: ‘key_usage’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘extended_key_usage’: SlotDefinition({‘name’: ‘extended_key_usage’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘subject_key_identifier’: SlotDefinition({‘name’: ‘subject_key_identifier’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘authority_key_identifier’: SlotDefinition({‘name’: ‘authority_key_identifier’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘subject_alternative_name’: SlotDefinition({‘name’: ‘subject_alternative_name’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘issuer_alternative_name’: SlotDefinition({‘name’: ‘issuer_alternative_name’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘subject_directory_attributes’: SlotDefinition({‘name’: ‘subject_directory_attributes’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘crl_distribution_points’: SlotDefinition({‘name’: ‘crl_distribution_points’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘inhibit_any_policy’: SlotDefinition({‘name’: ‘inhibit_any_policy’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘private_key_usage_period_not_before’: SlotDefinition({‘name’: ‘private_key_usage_period_not_before’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘private_key_usage_period_not_after’: SlotDefinition({‘name’: ‘private_key_usage_period_not_after’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘certificate_policies’: SlotDefinition({‘name’: ‘certificate_policies’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘policy_mappings’: SlotDefinition({‘name’: ‘policy_mappings’, ‘required’: True})} })

Usages

used by	used in	type	used
StixX509Certificate	x509_v3_extensions	range	StixX509V3Extensions

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	attack:StixX509V3Extensions
native	attack:StixX509V3Extensions
close	uco-observable:X509V3ExtensionsFacet

LinkML Source

Direct

name: StixX509V3Extensions
description: The standard X.509 v3 extensions of a certificate.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:X509V3ExtensionsFacet
slots:
- basic_constraints
- name_constraints
- policy_constraints
- key_usage
- extended_key_usage
- subject_key_identifier
- authority_key_identifier
- subject_alternative_name
- issuer_alternative_name
- subject_directory_attributes
- crl_distribution_points
- inhibit_any_policy
- private_key_usage_period_not_before
- private_key_usage_period_not_after
- certificate_policies
- policy_mappings
any_of:
- slot_conditions:
    basic_constraints:
      name: basic_constraints
      required: true
- slot_conditions:
    name_constraints:
      name: name_constraints
      required: true
- slot_conditions:
    policy_constraints:
      name: policy_constraints
      required: true
- slot_conditions:
    key_usage:
      name: key_usage
      required: true
- slot_conditions:
    extended_key_usage:
      name: extended_key_usage
      required: true
- slot_conditions:
    subject_key_identifier:
      name: subject_key_identifier
      required: true
- slot_conditions:
    authority_key_identifier:
      name: authority_key_identifier
      required: true
- slot_conditions:
    subject_alternative_name:
      name: subject_alternative_name
      required: true
- slot_conditions:
    issuer_alternative_name:
      name: issuer_alternative_name
      required: true
- slot_conditions:
    subject_directory_attributes:
      name: subject_directory_attributes
      required: true
- slot_conditions:
    crl_distribution_points:
      name: crl_distribution_points
      required: true
- slot_conditions:
    inhibit_any_policy:
      name: inhibit_any_policy
      required: true
- slot_conditions:
    private_key_usage_period_not_before:
      name: private_key_usage_period_not_before
      required: true
- slot_conditions:
    private_key_usage_period_not_after:
      name: private_key_usage_period_not_after
      required: true
- slot_conditions:
    certificate_policies:
      name: certificate_policies
      required: true
- slot_conditions:
    policy_mappings:
      name: policy_mappings
      required: true

Induced

name: StixX509V3Extensions
description: The standard X.509 v3 extensions of a certificate.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:X509V3ExtensionsFacet
attributes:
  basic_constraints:
    name: basic_constraints
    description: Specifies a multi-valued extension which indicates whether a certificate
      is a CA certificate.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:basic_constraints
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  name_constraints:
    name: name_constraints
    description: Specifies a namespace within which all subject names in subsequent
      certificates in a certification path MUST be located.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:name_constraints
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  policy_constraints:
    name: policy_constraints
    description: Specifies any constraints on path validation for certificates issued
      to CAs.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:policy_constraints
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  key_usage:
    name: key_usage
    description: Specifies a multi-valued extension consisting of a list of names
      of the permitted key usages.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:key_usage
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  extended_key_usage:
    name: extended_key_usage
    description: Specifies a list of usages indicating purposes for which the certificate
      public key can be used for.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:extended_key_usage
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  subject_key_identifier:
    name: subject_key_identifier
    description: Specifies the identifier that provides a means of identifying certificates
      that contain a particular public key.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:subject_key_identifier
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  authority_key_identifier:
    name: authority_key_identifier
    description: Specifies the identifier that provides a means of identifying the
      public key corresponding to the private key used to sign a certificate.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:authority_key_identifier
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  subject_alternative_name:
    name: subject_alternative_name
    description: Specifies the additional identities to be bound to the subject of
      the certificate.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:subject_alternative_name
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  issuer_alternative_name:
    name: issuer_alternative_name
    description: Specifies the additional identities to be bound to the issuer of
      the certificate.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:issuer_alternative_name
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  subject_directory_attributes:
    name: subject_directory_attributes
    description: The identification attributes of the subject, such as nationality.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:subject_directory_attributes
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  crl_distribution_points:
    name: crl_distribution_points
    description: Specifies how CRL information is obtained.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:crl_distribution_points
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  inhibit_any_policy:
    name: inhibit_any_policy
    description: Specifies the number of additional certificates that may appear in
      the path before anyPolicy is no longer permitted.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:inhibit_any_policy
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  private_key_usage_period_not_before:
    name: private_key_usage_period_not_before
    description: Specifies the date on which the validity period begins for the private
      key, if it is different from the validity period of the certificate.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:private_key_usage_period_not_before
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: stix_timestamp
  private_key_usage_period_not_after:
    name: private_key_usage_period_not_after
    description: Specifies the date on which the validity period ends for the private
      key, if it is different from the validity period of the certificate.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:private_key_usage_period_not_after
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: stix_timestamp
  certificate_policies:
    name: certificate_policies
    description: Specifies a sequence of one or more policy information terms, each
      of which consists of an object identifier (OID) and optional qualifiers.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:certificate_policies
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
  policy_mappings:
    name: policy_mappings
    description: Specifies one or more pairs of OIDs; each pair includes an issuerDomainPolicy
      and a subjectDomainPolicy.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:policy_mappings
    owner: StixX509V3Extensions
    domain_of:
    - StixX509V3Extensions
    range: string
any_of:
- slot_conditions:
    basic_constraints:
      name: basic_constraints
      required: true
- slot_conditions:
    name_constraints:
      name: name_constraints
      required: true
- slot_conditions:
    policy_constraints:
      name: policy_constraints
      required: true
- slot_conditions:
    key_usage:
      name: key_usage
      required: true
- slot_conditions:
    extended_key_usage:
      name: extended_key_usage
      required: true
- slot_conditions:
    subject_key_identifier:
      name: subject_key_identifier
      required: true
- slot_conditions:
    authority_key_identifier:
      name: authority_key_identifier
      required: true
- slot_conditions:
    subject_alternative_name:
      name: subject_alternative_name
      required: true
- slot_conditions:
    issuer_alternative_name:
      name: issuer_alternative_name
      required: true
- slot_conditions:
    subject_directory_attributes:
      name: subject_directory_attributes
      required: true
- slot_conditions:
    crl_distribution_points:
      name: crl_distribution_points
      required: true
- slot_conditions:
    inhibit_any_policy:
      name: inhibit_any_policy
      required: true
- slot_conditions:
    private_key_usage_period_not_before:
      name: private_key_usage_period_not_before
      required: true
- slot_conditions:
    private_key_usage_period_not_after:
      name: private_key_usage_period_not_after
      required: true
- slot_conditions:
    certificate_policies:
      name: certificate_policies
      required: true
- slot_conditions:
    policy_mappings:
      name: policy_mappings
      required: true