Cryptography-dev

Download

cryptography-dev@python.org

December 2025

2 participants
1 discussions

Is there a limitation on OIDs for x509.SubjectAlternativeName([x509.RegisteredID(value)])
by rgm＠htt-consult.com Dec. 9, 2025

Dec. 9, 2025

I have been having problems with what OIDs are allowed for RegisteredID. I do not see any limitation on OIDs here in rfc5280, yet an OID like 99.15854644 throws a; ValueError: error parsing asn1 value: ParseError { kind: InvalidValue } 1.15854644 fails but 1.3.15854644 works. Like there is some internal table, that I don't believe is in openssl is limiting what I put in here. Oh, 15854644 is F1EC34 which is a 24-bit Aircraft Number and RegisteredID seems a good place (other than cn=24anF1EC34). thank you

3 2