tests/nist-pkits/gnutls-nist-tests.html

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"><title>PKITS Test Matrix</title></head><body>
   2 <div style="text-align: center;">
   3 <h1>Enterprise PVM</h1>
   4 <div style="text-align: left;">In addtion to the minimum requirements
   5 for an Enterprise Path Validation Module, these tests assume that the
   6 PWM implements the following features:<br>
   7 <br>
   8 <table style="text-align: left; width: 100%;" border="0" cellspacing="2" cellpadding="2">
   9   <tbody>
  10     <tr>
  11       <td style="vertical-align: top;">DSA:<br>
  12
  13       <div style="margin-left: 40px;">DSA signature verification<br>
  14 <span style="text-decoration: line-through;">DSA parameter inheritance</span><br>
  15       </div>
  16
  17       <br>
  18
  19 Name Constraints:<br>
  20
  21       <div style="margin-left: 40px;"><span style="text-decoration: line-through;">directoryName</span><br>
  22
  23 <span style="text-decoration: line-through;">rfc822Name</span><br>
  24
  25 <span style="text-decoration: line-through;">dNSname</span><br>
  26
  27 <span style="text-decoration: line-through;">uniformResourceIdentifier</span><br>
  28       </div>
  29
  30       <br>
  31
  32 Distribution Points:<br>
  33
  34       <div style="margin-left: 40px;"><span style="text-decoration: line-through;">onlySomeReasons</span><br>
  35 <span style="text-decoration: line-through;">nameRelativeToIssuer</span><br>
  36 <span style="text-decoration: line-through;">indirect CRLs</span><br>
  37       </div>
  38
  39       </td>
  40       <td style="vertical-align: top;">
  41       <div style="margin-left: 40px;"><span style="text-decoration: line-through;">delta-CRLs</span><br>
  42       <br>
  43 Policy Processing:<br>
  44 <div style="margin-left: 40px;"><span style="text-decoration: line-through;">anyPolicy OID</span><br>
  45 <span style="text-decoration: line-through;">inhibitAnyPolicy</span><br>
  46 <span style="text-decoration: line-through;">initial-inhibit-any-policy</span><br>
  47 <span style="text-decoration: line-through;">policyMappings</span><br>
  48 <span style="text-decoration: line-through;">inhibitPolicyMapping</span><br>
  49 <span style="text-decoration: line-through;">initial-inhibit-policy-mapping</span><br>
  50 </div>
  51       </div>
  52
  53       </td>
  54     </tr>
  55   </tbody>
  56 </table>
  57 <br>
  58 <br>
  59 </div>
  60 <br>
  61
  62 </div>
  63 <br>
  64 <table cellpadding="2" cellspacing="2" border="1" style="text-align: left; width: 100%;">
  65   <tbody>
  66     <tr>
  67       <td style="vertical-align: top;"><span style="font-weight: bold;">Test</span><br>
  68       </td>
  69       <td style="vertical-align: top;"><span style="font-weight: bold;">Expected Result</span><br>
  70       </td>
  71       <td style="vertical-align: top;"><span style="font-weight: bold;">Actual Result</span><br>
  72       </td>
  73     </tr>
  74     <tr>
  75       <td style="vertical-align: top;">4.1.1 Valid Signatures Test1<br>
  76       </td>
  77       <td style="vertical-align: top;">Validate Successfully<br>
  78       </td>
  79       <td style="vertical-align: top;"><br>
  80 <font color=green>Success</font>
  81
  82       </td>
  83     </tr>
  84     <tr>
  85       <td style="vertical-align: top;">4.1.2 Invalid CA Signature Test2<br>
  86       </td>
  87       <td style="vertical-align: top;">Reject - Invalid signature on intermediate certificate<br>
  88       </td>
  89       <td style="vertical-align: top;"><br>
  90 <font color=green>Reject</font>
  91
  92       </td>
  93     </tr>
  94     <tr>
  95       <td style="vertical-align: top;">4.1.3 Invalid EE Signature Test3<br>
  96       </td>
  97       <td style="vertical-align: top;">Reject - Invalid signature on end entity certificate<br>
  98       </td>
  99       <td style="vertical-align: top;"><br>
 100 <font color=green>Reject</font>
 101
 102       </td>
 103     </tr>
 104     <tr>
 105       <td style="vertical-align: top;">4.1.4 Valid DSA Signatures Test4<br>
 106       </td>
 107       <td style="vertical-align: top;">Validate Successfully<br>
 108       </td>
 109       <td style="vertical-align: top;"><br>
 110 <font color=green>Success</font>
 111
 112       </td>
 113     </tr>
 114     <tr>
 115       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.1.5 Valid DSA Parameter Inheritance Test5</span><br>
 116       </td>
 117       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject</span><br>
 118       </td>
 119       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
 120       </td>
 121     </tr>
 122     <tr>
 123       <td style="vertical-align: top;">4.1.6 Invalid DSA Signature Test6<br>
 124       </td>
 125       <td style="vertical-align: top;">Reject - Invalid signature on end entity certificate<br>
 126       </td>
 127       <td style="vertical-align: top;"><br>
 128 <font color=green>Reject</font>
 129
 130       </td>
 131     </tr>
 132     <tr>
 133       <td style="vertical-align: top;">4.2.1 Invalid CA notBefore Date Test1<br>
 134       </td>
 135       <td style="vertical-align: top;">Reject - notBefore date in intermediate certificate is after the current date<br>
 136       </td>
 137       <td style="vertical-align: top;"><br>
 138 <font color=red>Unexpected success</font>
 139
 140       </td>
 141     </tr>
 142     <tr>
 143       <td style="vertical-align: top;">4.2.2 Invalid EE notBefore Date Test2<br>
 144       </td>
 145       <td style="vertical-align: top;">Reject - notBefore date in end entity certificate is after the current date<br>
 146       </td>
 147       <td style="vertical-align: top;"><br>
 148 <font color=red>Unexpected success</font>
 149
 150       </td>
 151     </tr>
 152     <tr>
 153       <td style="vertical-align: top;">4.2.3 Valid pre2000 UTC notBefore Date Test3<br>
 154       </td>
 155       <td style="vertical-align: top;">Validate Successfully<br>
 156       </td>
 157       <td style="vertical-align: top;"><br>
 158 <font color=green>Success</font>
 159
 160       </td>
 161     </tr>
 162     <tr>
 163       <td style="vertical-align: top;">4.2.4 Valid GeneralizedTime notBefore Date Test4<br>
 164       </td>
 165       <td style="vertical-align: top;">Validate Successfully<br>
 166       </td>
 167       <td style="vertical-align: top;"><br>
 168 <font color=green>Success</font>
 169
 170       </td>
 171     </tr>
 172     <tr>
 173       <td style="vertical-align: top;">4.2.5 Invalid CA notAfter Date Test5<br>
 174       </td>
 175       <td style="vertical-align: top;">Reject - notAfter date in intermediate certificate is before the current date<br>
 176       </td>
 177       <td style="vertical-align: top;"><br>
 178 <font color=red>Unexpected success</font>
 179
 180       </td>
 181     </tr>
 182     <tr>
 183       <td style="vertical-align: top;">4.2.6 Invalid EE notAfter Date Test6<br>
 184       </td>
 185       <td style="vertical-align: top;">Reject - notAfter date in end entity certificate is before the current date<br>
 186       </td>
 187       <td style="vertical-align: top;"><br>
 188 <font color=red>Unexpected success</font>
 189
 190       </td>
 191     </tr>
 192     <tr>
 193       <td style="vertical-align: top;">4.2.7 Invalid pre2000 UTC EE notAfter Date Test7<br>
 194       </td>
 195       <td style="vertical-align: top;">Reject - notAfter date in end entity certificate is before the current date<br>
 196       </td>
 197       <td style="vertical-align: top;"><br>
 198 <font color=red>Unexpected success</font>
 199
 200       </td>
 201     </tr>
 202     <tr>
 203       <td style="vertical-align: top;">4.2.8 Valid GeneralizedTime notAfter Date Test8<br>
 204       </td>
 205       <td style="vertical-align: top;">Validate Successfully<br>
 206       </td>
 207       <td style="vertical-align: top;"><br>
 208 <font color=green>Success</font>
 209
 210       </td>
 211     </tr>
 212     <tr>
 213       <td style="vertical-align: top;">4.3.1 Invalid Name Chaining EE Test1<br>
 214       </td>
 215       <td style="vertical-align: top;">Reject - names do not chain<br>
 216       </td>
 217       <td style="vertical-align: top;"><br>
 218
 219       </td>
 220     </tr>
 221     <tr>
 222       <td style="vertical-align: top;">4.3.2 Invalid Name Chaining Order Test2<br>
 223       </td>
 224       <td style="vertical-align: top;">Reject - names do not chain<br>
 225       </td>
 226       <td style="vertical-align: top;"><br>
 227
 228       </td>
 229     </tr>
 230     <tr>
 231       <td style="vertical-align: top;">4.3.3 Valid Name Chaining Whitespace Test3<br>
 232       </td>
 233       <td style="vertical-align: top;">Validate Successfully<br>
 234       </td>
 235       <td style="vertical-align: top;"><br>
 236
 237       </td>
 238     </tr>
 239     <tr>
 240       <td style="vertical-align: top;">4.3.4 Valid Name Chaining Whitespace Test4<br>
 241       </td>
 242       <td style="vertical-align: top;">Validate Successfully<br>
 243       </td>
 244       <td style="vertical-align: top;"><br>
 245
 246       </td>
 247     </tr>
 248     <tr>
 249       <td style="vertical-align: top;">4.3.5 Valid Name Chaining Capitalization Test5<br>
 250       </td>
 251       <td style="vertical-align: top;">Validate Successfully<br>
 252       </td>
 253       <td style="vertical-align: top;"><br>
 254
 255       </td>
 256     </tr>
 257     <tr>
 258       <td style="vertical-align: top;">4.3.6 Valid Name Chaining UIDs Test6<br>
 259       </td>
 260       <td style="vertical-align: top;">Validate Successfully<br>
 261       </td>
 262       <td style="vertical-align: top;"><br>
 263 <font color=green>Success</font>
 264
 265       </td>
 266     </tr>
 267     <tr>
 268       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.3.7 Valid RFC3280 Mandatory Attribute Types Test7</span><br>
 269       </td>
 270       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully</span><br>
 271       </td>
 272       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
 273       </td>
 274     </tr>
 275     <tr>
 276       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.3.8 Valid RFC3280 Optional Attribute Types Test8</span><br>
 277       </td>
 278       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully</span><br>
 279       </td>
 280       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
 281       </td>
 282     </tr>
 283     <tr>
 284       <td style="vertical-align: top;">4.3.9 Valid UTF8String Encoded Names Test9<br>
 285       </td>
 286       <td style="vertical-align: top;">Validate Successfully<br>
 287       </td>
 288       <td style="vertical-align: top;"><br>
 289 <font color=green>Success</font>
 290
 291       </td>
 292     </tr>
 293     <tr>
 294       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.3.10 Valid Rollover from PrintableString to UTF8String Test10</span><br>
 295       </td>
 296       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">The certification path is valid. However, a PVM that implements the minimum name comparison rules in RFC 3280 will reject the certification path since it will not recognize that names chain correctly</span><br>
 297       </td>
 298       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
 299       </td>
 300     </tr>
 301     <tr>
 302       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.3.11 Valid UTF8String Case Insensitive Match Test11</span><br>
 303       </td>
 304       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">The certification path is valid. However, a PVM that implements the minimum name comparison rules in RFC 3280 will reject the certification path since it will not recognize that names chain correctly</span><br>
 305       </td>
 306       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
 307       </td>
 308     </tr>
 309     <tr>
 310       <td style="vertical-align: top;">4.4.1 Missing CRL Test1<br>
 311       </td>
 312       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
 313       </td>
 314       <td style="vertical-align: top;"><br>
 315 <font color=green>Success</font>
 316
 317       </td>
 318     </tr>
 319     <tr>
 320       <td style="vertical-align: top;">4.4.2 Invalid Revoked CA Test2<br>
 321       </td>
 322       <td style="vertical-align: top;">Reject - an intermediate certificate has been revoked.<br>
 323       </td>
 324       <td style="vertical-align: top;"><br>
 325 <font color=green>Success</font>
 326
 327       </td>
 328     </tr>
 329     <tr>
 330       <td style="vertical-align: top;">4.4.3 Invalid Revoked EE Test3<br>
 331       </td>
 332       <td style="vertical-align: top;">Reject - the end entity certificate has been revoked<br>
 333       </td>
 334       <td style="vertical-align: top;"><br>
 335 <font color=green>Success</font>
 336
 337       </td>
 338     </tr>
 339     <tr>
 340       <td style="vertical-align: top;">4.4.4. Invalid Bad CRL Signature Test4<br>
 341       </td>
 342       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
 343       </td>
 344       <td style="vertical-align: top;"><br>
 345 <font color=green>Success</font>
 346
 347       </td>
 348     </tr>
 349     <tr>
 350       <td style="vertical-align: top;">4.4.5 Invalid Bad CRL Issuer Name Test5<br>
 351       </td>
 352       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
 353       </td>
 354       <td style="vertical-align: top;"><br>
 355 <font color=green>Success</font>
 356
 357       </td>
 358     </tr>
 359     <tr>
 360       <td style="vertical-align: top;">4.4.6 Invalid Wrong CRL Test6<br>
 361       </td>
 362       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
 363       </td>
 364       <td style="vertical-align: top;"><br>
 365 <font color=green>Success</font>
 366
 367       </td>
 368     </tr>
 369     <tr>
 370       <td style="vertical-align: top;">4.4.7 Valid Two CRLs Test7<br>
 371       </td>
 372       <td style="vertical-align: top;">Validate Successfully<br>
 373       </td>
 374       <td style="vertical-align: top;"><br>
 375 <font color=green>Success</font>
 376
 377       </td>
 378     </tr>
 379     <tr>
 380       <td style="vertical-align: top;">4.4.8 Invalid Unknown CRL Entry Extension Test8<br>
 381       </td>
 382       <td style="vertical-align: top;">Reject - the end entity certificate has been revoked<br>
 383       </td>
 384       <td style="vertical-align: top;"><br>
 385 <font color=green>Success</font>
 386
 387       </td>
 388     </tr>
 389     <tr>
 390       <td style="vertical-align: top;">4.4.9 Invalid Unknown CRL Extension Test9<br>
 391       </td>
 392       <td style="vertical-align: top;">Reject - the end entity certificate has been revoked<br>
 393       </td>
 394       <td style="vertical-align: top;"><br>
 395 <font color=green>Success</font>
 396
 397       </td>
 398     </tr>
 399     <tr>
 400       <td style="vertical-align: top;">4.4.10 Invalid Unknown CRL Extension Test10<br>
 401       </td>
 402       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
 403       </td>
 404       <td style="vertical-align: top;"><br>
 405 <font color=green>Success</font>
 406
 407       </td>
 408     </tr>
 409     <tr>
 410       <td style="vertical-align: top;">4.4.11 Invalid Old CRL nextUpdate Test11<br>
 411       </td>
 412       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
 413       </td>
 414       <td style="vertical-align: top;"><br>
 415 <font color=green>Success</font>
 416
 417       </td>
 418     </tr>
 419     <tr>
 420       <td style="vertical-align: top;">4.4.12 Invalid pre2000 CRL nextUpdate Tesst12<br>
 421       </td>
 422       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
 423       </td>
 424       <td style="vertical-align: top;"><br>
 425 <font color=green>Success</font>
 426
 427       </td>
 428     </tr>
 429     <tr>
 430       <td style="vertical-align: top;">4.4.13 Valid GeneralizedTime CRL nextUpdate Test13<br>
 431       </td>
 432       <td style="vertical-align: top;">Validate Successfully<br>
 433       </td>
 434       <td style="vertical-align: top;"><br>
 435 <font color=green>Success</font>
 436
 437       </td>
 438     </tr>
 439     <tr>
 440       <td style="vertical-align: top;">4.4.14 Valid Negative Serial Number Test14<br>
 441       </td>
 442       <td style="vertical-align: top;">Validate Successfully<br>
 443       </td>
 444       <td style="vertical-align: top;"><br>
 445 <font color=green>Success</font>
 446
 447       </td>
 448     </tr>
 449     <tr>
 450       <td style="vertical-align: top;">4.4.15 Invalid Negative Serial Number Test15<br>
 451       </td>
 452       <td style="vertical-align: top;">Reject - the end entity certificate has been revoked<br>
 453       </td>
 454       <td style="vertical-align: top;"><br>
 455 <font color=green>Success</font>
 456
 457       </td>
 458     </tr>
 459     <tr>
 460       <td style="vertical-align: top;">4.4.16 Valid Long Serial Number Test16<br>
 461       </td>
 462       <td style="vertical-align: top;">Validate Successfully<br>
 463       </td>
 464       <td style="vertical-align: top;"><br>
 465 <font color=green>Success</font>
 466
 467       </td>
 468     </tr>
 469     <tr>
 470       <td style="vertical-align: top;">4.4.17 Valid Long Serial Number Test17<br>
 471       </td>
 472       <td style="vertical-align: top;">Validate Successfully<br>
 473       </td>
 474       <td style="vertical-align: top;"><br>
 475 <font color=green>Success</font>
 476
 477       </td>
 478     </tr>
 479     <tr>
 480       <td style="vertical-align: top;">4.4.18 Invalid Long Serial Number Test18<br>
 481       </td>
 482       <td style="vertical-align: top;">Reject - the end entity certificate has been revoked<br>
 483       </td>
 484       <td style="vertical-align: top;"><br>
 485 <font color=green>Success</font>
 486
 487       </td>
 488     </tr>
 489     <tr>
 490       <td style="vertical-align: top;">4.4.19 Valid Separate Certificate and CRL Keys Test19<br>
 491       </td>
 492       <td style="vertical-align: top;">Validate Successfully<br>
 493       </td>
 494       <td style="vertical-align: top;"><br>
 495 <font color=green>Success</font>
 496
 497       </td>
 498     </tr>
 499     <tr>
 500       <td style="vertical-align: top;">4.4.20 Invalid Separate Certificate and CRL Keys Test20<br>
 501       </td>
 502       <td style="vertical-align: top;">Reject - the end entity certificate has been revoked<br>
 503       </td>
 504       <td style="vertical-align: top;"><br>
 505 <font color=green>Success</font>
 506
 507       </td>
 508     </tr>
 509     <tr>
 510       <td style="vertical-align: top;">4.4.21 Invalid Separate Certificate and CRL Keys Test21<br>
 511       </td>
 512       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
 513       </td>
 514       <td style="vertical-align: top;"><br>
 515 <font color=green>Success</font>
 516
 517       </td>
 518     </tr>
 519     <tr>
 520       <td style="vertical-align: top;">4.5.1 Valid Basic Self-Issued Old With New Test1<br>
 521       </td>
 522       <td style="vertical-align: top;">Validate Successfully<br>
 523       </td>
 524       <td style="vertical-align: top;"><br>
 525 <font color=green>Success</font>
 526
 527       </td>
 528     </tr>
 529     <tr>
 530       <td style="vertical-align: top;">4.5.2 Invalid Basic Self-Issued Old With New Test2<br>
 531       </td>
 532       <td style="vertical-align: top;">Reject - the end entity certificate has been revoked<br>
 533       </td>
 534       <td style="vertical-align: top;"><br>
 535 <font color=green>Success</font>
 536
 537       </td>
 538     </tr>
 539     <tr>
 540       <td style="vertical-align: top;">4.5.3 Valid Basic Self-Issued New With Old Test3<br>
 541       </td>
 542       <td style="vertical-align: top;">Validate Successfully<br>
 543       </td>
 544       <td style="vertical-align: top;"><br>
 545 <font color=green>Success</font>
 546
 547       </td>
 548     </tr>
 549     <tr>
 550       <td style="vertical-align: top;">4.5.4 Valid Basic Self-Issued New With Old Test4<br>
 551       </td>
 552       <td style="vertical-align: top;">Validate Successfully<br>
 553       </td>
 554       <td style="vertical-align: top;"><br>
 555 <font color=green>Success</font>
 556
 557       </td>
 558     </tr>
 559     <tr>
 560       <td style="vertical-align: top;">4.5.5 Invalid Basic Self-Issued New With Old Test5<br>
 561       </td>
 562       <td style="vertical-align: top;">Reject - the end entity certificate has been revoked<br>
 563       </td>
 564       <td style="vertical-align: top;"><br>
 565 <font color=green>Success</font>
 566
 567       </td>
 568     </tr>
 569     <tr>
 570       <td style="vertical-align: top;">4.5.6 Valid Basic Self-Issued CRL Signing Key Test6<br>
 571       </td>
 572       <td style="vertical-align: top;">Validate Successfully<br>
 573       </td>
 574       <td style="vertical-align: top;"><br>
 575 <font color=green>Success</font>
 576
 577       </td>
 578     </tr>
 579     <tr>
 580       <td style="vertical-align: top;">4.5.7 Invalid Basic Self-Issued CRL Signing Key Test7<br>
 581       </td>
 582       <td style="vertical-align: top;">Reject - the end entity certificate has been revoked<br>
 583       </td>
 584       <td style="vertical-align: top;"><br>
 585 <font color=green>Success</font>
 586
 587       </td>
 588     </tr>
 589     <tr>
 590       <td style="vertical-align: top;">4.5.8 Invalid Basic Self-Issued CRL Signing Key Test8<br>
 591       </td>
 592       <td style="vertical-align: top;">Reject - invalid certification path<br>
 593       </td>
 594       <td style="vertical-align: top;"><br>
 595 <font color=green>Reject</font>
 596
 597       </td>
 598     </tr>
 599     <tr>
 600       <td style="vertical-align: top;">4.6.1 Invalid Missing basicConstraints Test1<br>
 601       </td>
 602       <td style="vertical-align: top;">Reject - invalid certification path<br>
 603       </td>
 604       <td style="vertical-align: top;"><br>
 605 <font color=green>Reject</font>
 606
 607       </td>
 608     </tr>
 609     <tr>
 610       <td style="vertical-align: top;">4.6.2 Invalid cA False Test2<br>
 611       </td>
 612       <td style="vertical-align: top;">Reject - invalid certification path<br>
 613       </td>
 614       <td style="vertical-align: top;"><br>
 615 <font color=green>Reject</font>
 616
 617       </td>
 618     </tr>
 619     <tr>
 620       <td style="vertical-align: top;">4.6.3 Invalid cA False Test3<br>
 621       </td>
 622       <td style="vertical-align: top;">Reject - invalid certification path<br>
 623       </td>
 624       <td style="vertical-align: top;"><br>
 625 <font color=green>Reject</font>
 626
 627       </td>
 628     </tr>
 629     <tr>
 630       <td style="vertical-align: top;">4.6.4 Valid basicConstraints Not Critical Test4<br>
 631       </td>
 632       <td style="vertical-align: top;">Validate Successfully<br>
 633       </td>
 634       <td style="vertical-align: top;"><br>
 635 <font color=green>Success</font>
 636
 637       </td>
 638     </tr>
 639     <tr>
 640       <td style="vertical-align: top;">4.6.5 Invalid pathLenConstraint Test5<br>
 641       </td>
 642       <td style="vertical-align: top;">Reject - invalid certification path<br>
 643       </td>
 644       <td style="vertical-align: top;"><br>
 645 <font color=red>Unexpected success</font>
 646
 647       </td>
 648     </tr>
 649     <tr>
 650       <td style="vertical-align: top;">4.6.6 Invalid pathLenConstraint Test6<br>
 651       </td>
 652       <td style="vertical-align: top;">Reject - invalid certification path<br>
 653       </td>
 654       <td style="vertical-align: top;"><br>
 655 <font color=red>Unexpected success</font>
 656
 657       </td>
 658     </tr>
 659     <tr>
 660       <td style="vertical-align: top;">4.6.7 Valid pathLenConstraint Test7<br>
 661       </td>
 662       <td style="vertical-align: top;">Validate Successfully<br>
 663       </td>
 664       <td style="vertical-align: top;"><br>
 665 <font color=green>Success</font>
 666
 667       </td>
 668     </tr>
 669     <tr>
 670       <td style="vertical-align: top;">4.6.8 Valid pathLenConstraint Test8<br>
 671       </td>
 672       <td style="vertical-align: top;">Validate Successfully<br>
 673       </td>
 674       <td style="vertical-align: top;"><br>
 675 <font color=green>Success</font>
 676
 677       </td>
 678     </tr>
 679     <tr>
 680       <td style="vertical-align: top;">4.6.9 Invalid pathLenConstraint Test9<br>
 681       </td>
 682       <td style="vertical-align: top;">Reject - invalid certification path<br>
 683       </td>
 684       <td style="vertical-align: top;"><br>
 685 <font color=red>Unexpected success</font>
 686
 687       </td>
 688     </tr>
 689     <tr>
 690       <td style="vertical-align: top;">4.6.10 Invalid pathLenConstraint Test10<br>
 691       </td>
 692       <td style="vertical-align: top;">Reject - invalid certification path<br>
 693       </td>
 694       <td style="vertical-align: top;"><br>
 695 <font color=red>Unexpected success</font>
 696
 697       </td>
 698     </tr>
 699     <tr>
 700       <td style="vertical-align: top;">4.6.11 Invalid pathLenConstraint Test11<br>
 701       </td>
 702       <td style="vertical-align: top;">Reject - invalid certification path<br>
 703       </td>
 704       <td style="vertical-align: top;"><br>
 705 <font color=red>Unexpected success</font>
 706
 707       </td>
 708     </tr>
 709     <tr>
 710       <td style="vertical-align: top;">4.6.12 Invalid pathLenConstraint Test12<br>
 711       </td>
 712       <td style="vertical-align: top;">Reject - invalid certification path<br>
 713       </td>
 714       <td style="vertical-align: top;"><br>
 715 <font color=red>Unexpected success</font>
 716
 717       </td>
 718     </tr>
 719     <tr>
 720       <td style="vertical-align: top;">4.6.13 Valid pathLenConstraint Test13<br>
 721       </td>
 722       <td style="vertical-align: top;">Validate Successfully<br>
 723       </td>
 724       <td style="vertical-align: top;"><br>
 725 <font color=green>Success</font>
 726
 727       </td>
 728     </tr>
 729     <tr>
 730       <td style="vertical-align: top;">4.6.14 Valid pathLenConstraint Test14<br>
 731       </td>
 732       <td style="vertical-align: top;">Validate Successfully<br>
 733       </td>
 734       <td style="vertical-align: top;"><br>
 735 <font color=green>Success</font>
 736
 737       </td>
 738     </tr>
 739     <tr>
 740       <td style="vertical-align: top;">4.6.15 Valid Self-Issued pathLenConstraint Test15<br>
 741       </td>
 742       <td style="vertical-align: top;">Validate Successfully<br>
 743       </td>
 744       <td style="vertical-align: top;"><br>
 745 <font color=green>Success</font>
 746
 747       </td>
 748     </tr>
 749     <tr>
 750       <td style="vertical-align: top;">4.6.16 Invalid Self-Issued pathLenConstraint Test16<br>
 751       </td>
 752       <td style="vertical-align: top;">Reject - invalid certification path<br>
 753       </td>
 754       <td style="vertical-align: top;"><br>
 755 <font color=red>Unexpected success</font>
 756
 757       </td>
 758     </tr>
 759     <tr>
 760       <td style="vertical-align: top;">4.6.17 Valid Self-Issued pathLenConstraint Test17<br>
 761       </td>
 762       <td style="vertical-align: top;">Validate Successfully<br>
 763       </td>
 764       <td style="vertical-align: top;"><br>
 765 <font color=green>Success</font>
 766
 767       </td>
 768     </tr>
 769     <tr>
 770       <td style="vertical-align: top;">4.7.1 Invalid keyUsage Critical keyCertSign False Test1<br>
 771       </td>
 772       <td style="vertical-align: top;">Reject - invalid certification path<br>
 773       </td>
 774       <td style="vertical-align: top;"><br>
 775 <font color=red>Unexpected success</font>
 776
 777       </td>
 778     </tr>
 779     <tr>
 780       <td style="vertical-align: top;">4.7.2 Invalid keyUsage Not Critical keyCertSign False Test2<br>
 781       </td>
 782       <td style="vertical-align: top;">Reject - invalid certification path<br>
 783       </td>
 784       <td style="vertical-align: top;"><br>
 785 <font color=red>Unexpected success</font>
 786
 787       </td>
 788     </tr>
 789     <tr>
 790       <td style="vertical-align: top;">4.7.3 Valid keyUsage Not Critical Test3<br>
 791       </td>
 792       <td style="vertical-align: top;">Validate Successfully<br>
 793       </td>
 794       <td style="vertical-align: top;"><br>
 795 <font color=green>Success</font>
 796
 797       </td>
 798     </tr>
 799     <tr>
 800       <td style="vertical-align: top;">4.7.4 Invalid keyUsage Critical cRLSign False Test4<br>
 801       </td>
 802       <td style="vertical-align: top;">Reject - invalid certification path<br>
 803       </td>
 804       <td style="vertical-align: top;"><br>
 805 <font color=red>Unexpected success</font>
 806
 807       </td>
 808     </tr>
 809     <tr>
 810       <td style="vertical-align: top;">4.7.5 Invalid keyUsage Not Critical cRLSign False Test5<br>
 811       </td>
 812       <td style="vertical-align: top;">Reject - invalid certification path<br>
 813       </td>
 814       <td style="vertical-align: top;"><br>
 815 <font color=red>Unexpected success</font>
 816
 817       </td>
 818     </tr>
 819     <tr>
 820       <td style="vertical-align: top;">4.8.1 All Certificates Same Policy Test1, subtest 1<br>
 821       </td>
 822       <td style="vertical-align: top;">Validate Successfully [Run if application can be configured as specified (i.e., if <i>initial-policy-set</i> can be <i>any-policy</i> when <i>initial-explicit-policy</i> is set). Otherwise indicate that test could not be run.]<br>
 823       </td>
 824       <td style="vertical-align: top;"><br>
 825 <font color=green>Success</font>
 826
 827       </td>
 828     </tr>
 829     <tr>
 830       <td style="vertical-align: top;">4.8.1 All Certificates Same Policy Test1, subtest 2<br>
 831       </td>
 832       <td style="vertical-align: top;">Validate Successfully<br>
 833       </td>
 834       <td style="vertical-align: top;"><br>
 835 <font color=green>Success</font>
 836
 837       </td>
 838     </tr>
 839     <tr>
 840       <td style="vertical-align: top;">4.8.1 All Certificates Same Policy Test1, subtest 3<br>
 841       </td>
 842       <td style="vertical-align: top;">Reject - no acceptable policy<br>
 843       </td>
 844       <td style="vertical-align: top;"><br>
 845 <font color=red>Unexpected success</font>
 846
 847       </td>
 848     </tr>
 849     <tr>
 850       <td style="vertical-align: top;">4.8.1 All Certificates Same Policy Test1, subtest 4<br>
 851       </td>
 852       <td style="vertical-align: top;">Validate Successfully<br>
 853       </td>
 854       <td style="vertical-align: top;"><br>
 855 <font color=green>Success</font>
 856
 857       </td>
 858     </tr>
 859     <tr>
 860       <td style="vertical-align: top;">4.8.2 All Certificates No Policies Test2, subtest 1<br>
 861       </td>
 862       <td style="vertical-align: top;">Validate Successfully<br>
 863       </td>
 864       <td style="vertical-align: top;"><br>
 865 <font color=green>Success</font>
 866
 867       </td>
 868     </tr>
 869     <tr>
 870       <td style="vertical-align: top;">4.8.2 All Certificates No Policies Test2, subtest 2<br>
 871       </td>
 872       <td style="vertical-align: top;">Reject - no acceptable policy [<i>initial-policy-set</i> may be set to {NIST-test-policy-1, NIST-test-policy-2, NIST-test-policy-3, NIST-test-policy-4, NIST-test-policy-5, NIST-test-policy-6} if it can not be set to <i>any-policy</i>]<br>
 873       </td>
 874       <td style="vertical-align: top;"><br>
 875 <font color=red>Unexpected success</font>
 876
 877       </td>
 878     </tr>
 879     <tr>
 880       <td style="vertical-align: top;">4.8.3 Different Policies Test3, subtest 1<br>
 881       </td>
 882       <td style="vertical-align: top;">Validate Successfully<br>
 883       </td>
 884       <td style="vertical-align: top;"><br>
 885 <font color=green>Success</font>
 886
 887       </td>
 888     </tr>
 889     <tr>
 890       <td style="vertical-align: top;">4.8.3 Different Policies Test3, subtest 2<br>
 891       </td>
 892       <td style="vertical-align: top;">Reject - no acceptable policy [Run if application can be configured as specified (i.e., if <i>initial-policy-set</i> can be <i>any-policy</i> when <i>initial-explicit-policy</i> is set). Otherwise indicate that test could not be run.]<br>
 893       </td>
 894       <td style="vertical-align: top;"><br>
 895 <font color=red>Unexpected success</font>
 896
 897       </td>
 898     </tr>
 899     <tr>
 900       <td style="vertical-align: top;">4.8.3 Different Policies Test3, subtest 3<br>
 901       </td>
 902       <td style="vertical-align: top;">Reject - no acceptable policy<br>
 903       </td>
 904       <td style="vertical-align: top;"><br>
 905 <font color=red>Unexpected success</font>
 906
 907       </td>
 908     </tr>
 909     <tr>
 910       <td style="vertical-align: top;">4.8.4 Different Policies Test4<br>
 911       </td>
 912       <td style="vertical-align: top;">Reject - no acceptable policy<br>
 913       </td>
 914       <td style="vertical-align: top;"><br>
 915 <font color=red>Unexpected success</font>
 916
 917       </td>
 918     </tr>
 919     <tr>
 920       <td style="vertical-align: top;">4.8.5 Different Policies Test5<br>
 921       </td>
 922       <td style="vertical-align: top;">Reject - no acceptable policy<br>
 923       </td>
 924       <td style="vertical-align: top;"><br>
 925 <font color=red>Unexpected success</font>
 926
 927       </td>
 928     </tr>
 929     <tr>
 930       <td style="vertical-align: top;">4.8.6 Overlapping Policies Test6, subtest 1<br>
 931       </td>
 932       <td style="vertical-align: top;">Validate Successfully<br>
 933       </td>
 934       <td style="vertical-align: top;"><br>
 935 <font color=green>Success</font>
 936
 937       </td>
 938     </tr>
 939     <tr>
 940       <td style="vertical-align: top;">4.8.6 Overlapping Policies Test6, subtest 2<br>
 941       </td>
 942       <td style="vertical-align: top;">Validate Successfully<br>
 943       </td>
 944       <td style="vertical-align: top;"><br>
 945 <font color=green>Success</font>
 946
 947       </td>
 948     </tr>
 949     <tr>
 950       <td style="vertical-align: top;">4.8.6 Overlapping Policies Test6, subtest 3<br>
 951       </td>
 952       <td style="vertical-align: top;">Reject - no acceptable policy<br>
 953       </td>
 954       <td style="vertical-align: top;"><br>
 955 <font color=red>Unexpected success</font>
 956
 957       </td>
 958     </tr>
 959     <tr>
 960       <td style="vertical-align: top;">4.8.7 Different Policies Test7<br>
 961       </td>
 962       <td style="vertical-align: top;">Reject - no acceptable policy<br>
 963       </td>
 964       <td style="vertical-align: top;"><br>
 965 <font color=red>Unexpected success</font>
 966
 967       </td>
 968     </tr>
 969     <tr>
 970       <td style="vertical-align: top;">4.8.8 Different Policies Test8<br>
 971       </td>
 972       <td style="vertical-align: top;">Reject - no acceptable policy<br>
 973       </td>
 974       <td style="vertical-align: top;"><br>
 975 <font color=red>Unexpected success</font>
 976
 977       </td>
 978     </tr>
 979     <tr>
 980       <td style="vertical-align: top;">4.8.9 Different Policies Test9<br>
 981       </td>
 982       <td style="vertical-align: top;">Reject - no acceptable policy<br>
 983       </td>
 984       <td style="vertical-align: top;"><br>
 985 <font color=red>Unexpected success</font>
 986
 987       </td>
 988     </tr>
 989     <tr>
 990       <td style="vertical-align: top;">4.8.10 All Certificates Same Policies Test10, subtest 1<br>
 991       </td>
 992       <td style="vertical-align: top;">Validate Successfully<br>
 993       </td>
 994       <td style="vertical-align: top;"><br>
 995 <font color=green>Success</font>
 996
 997       </td>
 998     </tr>
 999     <tr>
1000       <td style="vertical-align: top;">4.8.10 All Certificates Same Policies Test10, subtest 2<br>
1001       </td>
1002       <td style="vertical-align: top;">Validate Successfully<br>
1003       </td>
1004       <td style="vertical-align: top;"><br>
1005 <font color=green>Success</font>
1006
1007       </td>
1008     </tr>
1009     <tr>
1010       <td style="vertical-align: top;">4.8.10 All Certificates Same Policies Test10, subtest 3<br>
1011       </td>
1012       <td style="vertical-align: top;">Validate Successfully<br>
1013       </td>
1014       <td style="vertical-align: top;"><br>
1015 <font color=green>Success</font>
1016
1017       </td>
1018     </tr>
1019     <tr>
1020       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.8.11 All Certificates AnyPolicy Test11, subtest 1</span><br>
1021       </td>
1022       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully</span><br>
1023       </td>
1024       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1025       </td>
1026     </tr>
1027     <tr>
1028       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.8.11 All Certificates AnyPolicy Test11, subtest 2</span><br>
1029       </td>
1030       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - path only valid under anyPolicy OID</span><br>
1031       </td>
1032       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1033       </td>
1034     </tr>
1035     <tr>
1036       <td style="vertical-align: top;">4.8.12 Different Policies Test12<br>
1037       </td>
1038       <td style="vertical-align: top;">Reject - no acceptable policy<br>
1039       </td>
1040       <td style="vertical-align: top;"><br>
1041 <font color=red>Unexpected success</font>
1042
1043       </td>
1044     </tr>
1045     <tr>
1046       <td style="vertical-align: top;">4.8.13 All Certificates Same Policies Test13, subtest 1<br>
1047       </td>
1048       <td style="vertical-align: top;">Validate Successfully<br>
1049       </td>
1050       <td style="vertical-align: top;"><br>
1051 <font color=green>Success</font>
1052
1053       </td>
1054     </tr>
1055     <tr>
1056       <td style="vertical-align: top;">4.8.13 All Certificates Same Policies Test13, subtest 2<br>
1057       </td>
1058       <td style="vertical-align: top;">Validate Successfully<br>
1059       </td>
1060       <td style="vertical-align: top;"><br>
1061 <font color=green>Success</font>
1062
1063       </td>
1064     </tr>
1065     <tr>
1066       <td style="vertical-align: top;">4.8.13 All Certificates Same Policies Test13, subtest 3<br>
1067       </td>
1068       <td style="vertical-align: top;">Validate Successfully<br>
1069       </td>
1070       <td style="vertical-align: top;"><br>
1071 <font color=green>Success</font>
1072
1073       </td>
1074     </tr>
1075     <tr>
1076       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.8.14 AnyPolicy Test14, subtest 1</span><br>
1077       </td>
1078       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - no acceptable policy</span><br>
1079       </td>
1080       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1081       </td>
1082     </tr>
1083     <tr>
1084       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.8.14 AnyPolicy Test14, subtest 2</span><br>
1085       </td>
1086       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - no acceptable policy</span><br>
1087       </td>
1088       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1089       </td>
1090     </tr>
1091     <tr>
1092       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.8.15 User Notice Qualifier Test15</span><br>
1093       </td>
1094       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully</span><br>
1095       </td>
1096       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1097       </td>
1098     </tr>
1099     <tr>
1100       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.8.16 User Notice Qualifier Test16</span><br>
1101       </td>
1102       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully</span><br>
1103       </td>
1104       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1105       </td>
1106     </tr>
1107     <tr>
1108       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.8.17 User Notice Qualifier Test17</span><br>
1109       </td>
1110       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully</span><br>
1111       </td>
1112       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1113       </td>
1114     </tr>
1115     <tr>
1116       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.8.18 User Notice Qualifier Test18, subtest 1</span><br>
1117       </td>
1118       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully</span><br>
1119       </td>
1120       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1121       </td>
1122     </tr>
1123     <tr>
1124       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.8.18 User Notice Qualifier Test18, subtest 2</span><br>
1125       </td>
1126       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully</span><br>
1127       </td>
1128       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1129       </td>
1130     </tr>
1131     <tr>
1132       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.8.19 User Notice Qualifier Test19</span><br>
1133       </td>
1134       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This certification path may be rejected since the end entity certificate contains a policy qualifier with an explicitText string that is longer than 200 characters.  This certification path may be validated successfully if the length violation is ignored.</span><br>
1135       </td>
1136       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1137       </td>
1138     </tr>
1139     <tr>
1140       <td style="vertical-align: top;">4.8.20 CPS Pointer Qualifier Test20<br>
1141       </td>
1142       <td style="vertical-align: top;">Validate Successfully [Test should be run with <i>initial-explicit-policy</i> set (<i>initial-policy-set</i> may be set to {NIST-test-policy-1, NIST-test-policy-2, NIST-test-policy-3, NIST-test-policy-4, NIST-test-policy-5, NIST-test-policy-6} if it can not be set to <i>any-policy</i>).]<br>
1143       </td>
1144       <td style="vertical-align: top;"><br>
1145 <font color=green>Success</font>
1146
1147       </td>
1148     </tr>
1149     <tr>
1150       <td style="vertical-align: top;">4.9.1 Valid RequireExplicitPolicy Test1<br>
1151       </td>
1152       <td style="vertical-align: top;">Validate Successfully<br>
1153       </td>
1154       <td style="vertical-align: top;"><br>
1155 <font color=green>Success</font>
1156
1157       </td>
1158     </tr>
1159     <tr>
1160       <td style="vertical-align: top;">4.9.2 Valid RequireExplicitPolicy Test2<br>
1161       </td>
1162       <td style="vertical-align: top;">Validate Successfully<br>
1163       </td>
1164       <td style="vertical-align: top;"><br>
1165 <font color=green>Success</font>
1166
1167       </td>
1168     </tr>
1169     <tr>
1170       <td style="vertical-align: top;">4.9.3 Invalid RequireExplicitPolicy Test3<br>
1171       </td>
1172       <td style="vertical-align: top;">Reject - no acceptable policy<br>
1173       </td>
1174       <td style="vertical-align: top;"><br>
1175 <font color=red>Unexpected success</font>
1176
1177       </td>
1178     </tr>
1179     <tr>
1180       <td style="vertical-align: top;">4.9.4 Valid RequireExplicitPolicy Test4<br>
1181       </td>
1182       <td style="vertical-align: top;">Validate Successfully<br>
1183       </td>
1184       <td style="vertical-align: top;"><br>
1185 <font color=green>Success</font>
1186
1187       </td>
1188     </tr>
1189     <tr>
1190       <td style="vertical-align: top;">4.9.5 Invalid RequireExplicitPolicy Test5<br>
1191       </td>
1192       <td style="vertical-align: top;">Reject - no acceptable policy<br>
1193       </td>
1194       <td style="vertical-align: top;"><br>
1195 <font color=red>Unexpected success</font>
1196
1197       </td>
1198     </tr>
1199     <tr>
1200       <td style="vertical-align: top;">4.9.6 Valid Self-Issued requireExplicitPolicy Test6<br>
1201       </td>
1202       <td style="vertical-align: top;">Validate Successfully<br>
1203       </td>
1204       <td style="vertical-align: top;"><br>
1205 <font color=green>Success</font>
1206
1207       </td>
1208     </tr>
1209     <tr>
1210       <td style="vertical-align: top;">4.9.7 Invalid Self-Issued requireExplicitPolicy Test7<br>
1211       </td>
1212       <td style="vertical-align: top;">Reject - no acceptable policy<br>
1213       </td>
1214       <td style="vertical-align: top;"><br>
1215 <font color=red>Unexpected success</font>
1216
1217       </td>
1218     </tr>
1219     <tr>
1220       <td style="vertical-align: top;">4.9.8 Invalid Self-Issued requireExplicitPolicy Test8<br>
1221       </td>
1222       <td style="vertical-align: top;">Reject - no acceptable policy<br>
1223       </td>
1224       <td style="vertical-align: top;"><br>
1225 <font color=red>Unexpected success</font>
1226
1227       </td>
1228     </tr>
1229     <tr>
1230       <td style="vertical-align: top;">4.10.1 Valid Policy Mapping Test1, subtest 1<br>
1231       </td>
1232       <td style="vertical-align: top;">Reject - unrecognized critical extension [Test using the default settings (i.e., <i>initial-policy-set</i> = <i>any-policy</i>)<br>
1233       </td>
1234       <td style="vertical-align: top;"><br>
1235 <font color=red>Unexpected success</font>
1236
1237       </td>
1238     </tr>
1239     <tr>
1240       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.1 Valid Policy Mapping Test1, subtest 2</span><br>
1241       </td>
1242       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1243       </td>
1244       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1245       </td>
1246     </tr>
1247     <tr>
1248       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.1 Valid Policy Mapping Test1, subtest 3</span><br>
1249       </td>
1250       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Test can not be run</span><br>
1251       </td>
1252       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1253       </td>
1254     </tr>
1255     <tr>
1256       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.2 Invalid Policy Mapping Test2, subtest 1</span><br>
1257       </td>
1258       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1259       </td>
1260       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1261       </td>
1262     </tr>
1263     <tr>
1264       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.2 Invalid Policy Mapping Test2, subtest 2</span><br>
1265       </td>
1266       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Test can not be run</span><br>
1267       </td>
1268       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1269       </td>
1270     </tr>
1271     <tr>
1272       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.3 Valid Policy Mapping Test3, subtest 1</span><br>
1273       </td>
1274       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1275       </td>
1276       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1277       </td>
1278     </tr>
1279     <tr>
1280       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.3 Valid Policy Mapping Test3, subtest 2</span><br>
1281       </td>
1282       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1283       </td>
1284       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1285       </td>
1286     </tr>
1287     <tr>
1288       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.4 Invalid Policy Mapping Test4</span><br>
1289       </td>
1290       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1291       </td>
1292       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1293       </td>
1294     </tr>
1295     <tr>
1296       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.5 Valid Policy Mapping Test5, subtest 1</span><br>
1297       </td>
1298       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1299       </td>
1300       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1301       </td>
1302     </tr>
1303     <tr>
1304       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.5 Valid Policy Mapping Test5, subtest 2</span><br>
1305       </td>
1306       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1307       </td>
1308       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1309       </td>
1310     </tr>
1311     <tr>
1312       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.6 Valid Policy Mapping Test6, subtest 1</span><br>
1313       </td>
1314       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1315       </td>
1316       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1317       </td>
1318     </tr>
1319     <tr>
1320       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.6 Valid Policy Mapping Test6, subtest 2</span><br>
1321       </td>
1322       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1323       </td>
1324       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1325       </td>
1326     </tr>
1327     <tr>
1328       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.7 Invalid Mapping From anyPolicy Test7</span><br>
1329       </td>
1330       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully if the anyPolicy OID is treated the same as any other policy OID</span><br>
1331       </td>
1332       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1333       </td>
1334     </tr>
1335     <tr>
1336       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.8 Invalid Mapping To anyPolicy Test8</span><br>
1337       </td>
1338       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1339       </td>
1340       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1341       </td>
1342     </tr>
1343     <tr>
1344       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.9 Valid Policy Mapping Test9</span><br>
1345       </td>
1346       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1347       </td>
1348       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1349       </td>
1350     </tr>
1351     <tr>
1352       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.10 Invalid Policy Mapping Test10</span><br>
1353       </td>
1354       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1355       </td>
1356       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1357       </td>
1358     </tr>
1359     <tr>
1360       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.11 Valid Policy Mapping Test11</span><br>
1361       </td>
1362       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1363       </td>
1364       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1365       </td>
1366     </tr>
1367     <tr>
1368       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.12 Valid Policy Mapping Test12, subtest 1</span><br>
1369       </td>
1370       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1371       </td>
1372       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1373       </td>
1374     </tr>
1375     <tr>
1376       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.12 Valid Policy Mapping Test12, subtest 2</span><br>
1377       </td>
1378       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1379       </td>
1380       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1381       </td>
1382     </tr>
1383     <tr>
1384       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.13 Valid Policy Mapping Test13</span><br>
1385       </td>
1386       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1387       </td>
1388       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1389       </td>
1390     </tr>
1391     <tr>
1392       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.10.14 Valid Policy Mapping Test14</span><br>
1393       </td>
1394       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1395       </td>
1396       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1397       </td>
1398     </tr>
1399     <tr>
1400       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.11.1 Invalid inhibitPolicyMapping Test1</span><br>
1401       </td>
1402       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1403       </td>
1404       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1405       </td>
1406     </tr>
1407     <tr>
1408       <td style="vertical-align: top;">4.11.2 Valid inhibitPolicyMapping Test2<br>
1409       </td>
1410       <td style="vertical-align: top;">Reject - unrecognized critical extension<br>
1411       </td>
1412       <td style="vertical-align: top;"><br>
1413 <font color=red>Unexpected success</font>
1414
1415       </td>
1416     </tr>
1417     <tr>
1418       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.11.3 Invalid inhibitPolicyMapping Test3</span><br>
1419       </td>
1420       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1421       </td>
1422       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1423       </td>
1424     </tr>
1425     <tr>
1426       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.11.4 Valid inhibitPolicyMapping Test4</span><br>
1427       </td>
1428       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1429       </td>
1430       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1431       </td>
1432     </tr>
1433     <tr>
1434       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.11.5 Invalid inhibitPolicyMapping Test5</span><br>
1435       </td>
1436       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1437       </td>
1438       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1439       </td>
1440     </tr>
1441     <tr>
1442       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.11.6 Invalid inhibitPolicyMapping Test6</span><br>
1443       </td>
1444       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1445       </td>
1446       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1447       </td>
1448     </tr>
1449     <tr>
1450       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.11.7 Valid Self-Issued inhibitPolicyMapping Test7</span><br>
1451       </td>
1452       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1453       </td>
1454       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1455       </td>
1456     </tr>
1457     <tr>
1458       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.11.8 Invalid Self-Issued inhibitPolicyMapping Test8</span><br>
1459       </td>
1460       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1461       </td>
1462       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1463       </td>
1464     </tr>
1465     <tr>
1466       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.11.9 Invalid Self-Issued inhibitPolicyMapping Test9</span><br>
1467       </td>
1468       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1469       </td>
1470       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1471       </td>
1472     </tr>
1473     <tr>
1474       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.11.10 Invalid Self-Issued inhibitPolicyMapping Test10</span><br>
1475       </td>
1476       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1477       </td>
1478       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1479       </td>
1480     </tr>
1481     <tr>
1482       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.11.11 Invalid Self-Issued inhibitPolicyMapping Test11</span><br>
1483       </td>
1484       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1485       </td>
1486       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1487       </td>
1488     </tr>
1489     <tr>
1490       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.12.1 Invalid inhibitAnyPolicy Test1</span><br>
1491       </td>
1492       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1493       </td>
1494       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1495       </td>
1496     </tr>
1497     <tr>
1498       <td style="vertical-align: top;">4.12.2 Valid inhibitAnyPolicy Test2<br>
1499       </td>
1500       <td style="vertical-align: top;">Reject - unrecognized critical extension<br>
1501       </td>
1502       <td style="vertical-align: top;"><br>
1503 <font color=red>Unexpected success</font>
1504
1505       </td>
1506     </tr>
1507     <tr>
1508       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.12.3 inhibitAnyPolicy Test3, subtest 1</span><br>
1509       </td>
1510       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1511       </td>
1512       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1513       </td>
1514     </tr>
1515     <tr>
1516       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.12.3 inhibitAnyPolicy Test3, subtest 2</span><br>
1517       </td>
1518       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Test can not be run</span><br>
1519       </td>
1520       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1521       </td>
1522     </tr>
1523     <tr>
1524       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.12.4 Invalid inhibitAnyPolicy Test4</span><br>
1525       </td>
1526       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1527       </td>
1528       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1529       </td>
1530     </tr>
1531     <tr>
1532       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.12.5 Invalid inhibitAnyPolicy Test5</span><br>
1533       </td>
1534       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1535       </td>
1536       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1537       </td>
1538     </tr>
1539     <tr>
1540       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.12.6 Invalid inhibitAnyPolicy Test6</span><br>
1541       </td>
1542       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1543       </td>
1544       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1545       </td>
1546     </tr>
1547     <tr>
1548       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.12.7 Valid Self-Issued inhibitAnyPolicy Test7</span><br>
1549       </td>
1550       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1551       </td>
1552       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1553       </td>
1554     </tr>
1555     <tr>
1556       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.12.8 Invalid Self-Issued inhibitAnyPolicy Test8</span><br>
1557       </td>
1558       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1559       </td>
1560       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1561       </td>
1562     </tr>
1563     <tr>
1564       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.12.9 Valid Self-Issued inhibitAnyPolicy Test9</span><br>
1565       </td>
1566       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1567       </td>
1568       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1569       </td>
1570     </tr>
1571     <tr>
1572       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.12.10 Invalid Self-Issued inhibitAnyPolicy Test10</span><br>
1573       </td>
1574       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1575       </td>
1576       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1577       </td>
1578     </tr>
1579     <tr>
1580       <td style="vertical-align: top;">4.13.1 Valid DN nameConstraints Test1<br>
1581       </td>
1582       <td style="vertical-align: top;">Reject - unrecognized critical extension<br>
1583       </td>
1584       <td style="vertical-align: top;"><br>
1585 <font color=red>Unexpected success</font>
1586
1587       </td>
1588     </tr>
1589     <tr>
1590       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.2 Invalid DN nameConstraints Test2</span><br>
1591       </td>
1592       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1593       </td>
1594       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1595       </td>
1596     </tr>
1597     <tr>
1598       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.3 Invalid DN nameConstraints Test3</span><br>
1599       </td>
1600       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1601       </td>
1602       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1603       </td>
1604     </tr>
1605     <tr>
1606       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.4 Valid DN nameConstraints Test4</span><br>
1607       </td>
1608       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1609       </td>
1610       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1611       </td>
1612     </tr>
1613     <tr>
1614       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.5 Valid DN nameConstraints Test5</span><br>
1615       </td>
1616       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1617       </td>
1618       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1619       </td>
1620     </tr>
1621     <tr>
1622       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.6 Valid DN nameConstraints Test6</span><br>
1623       </td>
1624       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1625       </td>
1626       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1627       </td>
1628     </tr>
1629     <tr>
1630       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.7 Invalid DN nameConstraints Test7</span><br>
1631       </td>
1632       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1633       </td>
1634       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1635       </td>
1636     </tr>
1637     <tr>
1638       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.8 Invalid DN nameConstraints Test8</span><br>
1639       </td>
1640       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1641       </td>
1642       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1643       </td>
1644     </tr>
1645     <tr>
1646       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.9 Invalid DN nameConstraints Test9</span><br>
1647       </td>
1648       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1649       </td>
1650       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1651       </td>
1652     </tr>
1653     <tr>
1654       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.10 Invalid DN nameConstraints Test10</span><br>
1655       </td>
1656       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1657       </td>
1658       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1659       </td>
1660     </tr>
1661     <tr>
1662       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.11 Valid DN nameConstraints Test11</span><br>
1663       </td>
1664       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1665       </td>
1666       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1667       </td>
1668     </tr>
1669     <tr>
1670       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.12 Invalid DN nameConstraints Test12</span><br>
1671       </td>
1672       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1673       </td>
1674       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1675       </td>
1676     </tr>
1677     <tr>
1678       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.13 Invalid DN nameConstraints Test13</span><br>
1679       </td>
1680       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1681       </td>
1682       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1683       </td>
1684     </tr>
1685     <tr>
1686       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.14 Valid DN nameConstraints Test14</span><br>
1687       </td>
1688       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1689       </td>
1690       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1691       </td>
1692     </tr>
1693     <tr>
1694       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.15 Invalid DN nameConstraints Test15</span><br>
1695       </td>
1696       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1697       </td>
1698       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1699       </td>
1700     </tr>
1701     <tr>
1702       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.16 Invalid DN nameConstraints Test16</span><br>
1703       </td>
1704       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1705       </td>
1706       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1707       </td>
1708     </tr>
1709     <tr>
1710       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.17 Invalid DN nameConstraints Test17</span><br>
1711       </td>
1712       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1713       </td>
1714       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1715       </td>
1716     </tr>
1717     <tr>
1718       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.18 Valid DN nameConstraints Test18</span><br>
1719       </td>
1720       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1721       </td>
1722       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1723       </td>
1724     </tr>
1725     <tr>
1726       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.19 Valid Self-Issued DN nameConstraints Test19</span><br>
1727       </td>
1728       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1729       </td>
1730       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1731       </td>
1732     </tr>
1733     <tr>
1734       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.20 Invalid Self-Issued DN nameConstraints Test20</span><br>
1735       </td>
1736       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1737       </td>
1738       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1739       </td>
1740     </tr>
1741     <tr>
1742       <td style="vertical-align: top;">4.13.21 Valid RFC822 nameConstraints Test21<br>
1743       </td>
1744       <td style="vertical-align: top;">Reject - unrecognized critical extension<br>
1745       </td>
1746       <td style="vertical-align: top;"><br>
1747 <font color=red>Unexpected success</font>
1748
1749       </td>
1750     </tr>
1751     <tr>
1752       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.22 Invalid RFC822 nameConstraints Test22</span><br>
1753       </td>
1754       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1755       </td>
1756       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1757       </td>
1758     </tr>
1759     <tr>
1760       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.23 Valid RFC822 nameConstraints Test23</span><br>
1761       </td>
1762       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1763       </td>
1764       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1765       </td>
1766     </tr>
1767     <tr>
1768       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.24 Invalid RFC822 nameConstraints Test24</span><br>
1769       </td>
1770       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1771       </td>
1772       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1773       </td>
1774     </tr>
1775     <tr>
1776       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.25 Valid RFC822 nameConstraints Test25</span><br>
1777       </td>
1778       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1779       </td>
1780       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1781       </td>
1782     </tr>
1783     <tr>
1784       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.26 Invalid RFC822 nameConstraints Test26</span><br>
1785       </td>
1786       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1787       </td>
1788       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1789       </td>
1790     </tr>
1791     <tr>
1792       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.27 Valid DN and  RFC822 nameConstraints Test27</span><br>
1793       </td>
1794       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1795       </td>
1796       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1797       </td>
1798     </tr>
1799     <tr>
1800       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.28 Invalid DN and  RFC822 nameConstraints Test28</span><br>
1801       </td>
1802       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1803       </td>
1804       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1805       </td>
1806     </tr>
1807     <tr>
1808       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.29 Invalid DN and  RFC822 nameConstraints Test29</span><br>
1809       </td>
1810       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1811       </td>
1812       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1813       </td>
1814     </tr>
1815     <tr>
1816       <td style="vertical-align: top;">4.13.30 Valid DNS nameConstraints Test30<br>
1817       </td>
1818       <td style="vertical-align: top;">Reject - unrecognized critical extension<br>
1819       </td>
1820       <td style="vertical-align: top;"><br>
1821 <font color=red>Unexpected success</font>
1822
1823       </td>
1824     </tr>
1825     <tr>
1826       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.31 Invalid DNS nameConstraints Test31</span><br>
1827       </td>
1828       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1829       </td>
1830       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1831       </td>
1832     </tr>
1833     <tr>
1834       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.32 Valid DNS nameConstraints Test32</span><br>
1835       </td>
1836       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1837       </td>
1838       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1839       </td>
1840     </tr>
1841     <tr>
1842       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.33 Invalid DNS nameConstraints Test33</span><br>
1843       </td>
1844       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1845       </td>
1846       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1847       </td>
1848     </tr>
1849     <tr>
1850       <td style="vertical-align: top;">4.13.34 Valid URI nameConstraints Test34<br>
1851       </td>
1852       <td style="vertical-align: top;">Reject - unrecognized critical extension<br>
1853       </td>
1854       <td style="vertical-align: top;"><br>
1855 <font color=red>Unexpected success</font>
1856
1857       </td>
1858     </tr>
1859     <tr>
1860       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.35 Invalid URI nameConstraints Test35</span><br>
1861       </td>
1862       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1863       </td>
1864       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1865       </td>
1866     </tr>
1867     <tr>
1868       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.36 Valid URI nameConstraints Test36</span><br>
1869       </td>
1870       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1871       </td>
1872       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1873       </td>
1874     </tr>
1875     <tr>
1876       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.37 Invalid URI nameConstraints Test37</span><br>
1877       </td>
1878       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1879       </td>
1880       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1881       </td>
1882     </tr>
1883     <tr>
1884       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.13.38 Invalid DNS nameConstraints Test38</span><br>
1885       </td>
1886       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - unrecognized critical extension</span><br>
1887       </td>
1888       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1889       </td>
1890     </tr>
1891     <tr>
1892       <td style="vertical-align: top;">4.14.1 Valid distributionPoint Test1<br>
1893       </td>
1894       <td style="vertical-align: top;">Validate Successfully<br>
1895       </td>
1896       <td style="vertical-align: top;"><br>
1897 <font color=green>Success</font>
1898
1899       </td>
1900     </tr>
1901     <tr>
1902       <td style="vertical-align: top;">4.14.2 Invalid distributionPoint Test2<br>
1903       </td>
1904       <td style="vertical-align: top;">Reject - end entity certificate has been revoked<br>
1905       </td>
1906       <td style="vertical-align: top;"><br>
1907 <font color=green>Success</font>
1908
1909       </td>
1910     </tr>
1911     <tr>
1912       <td style="vertical-align: top;">4.14.3 Invalid distributionPoint Test3<br>
1913       </td>
1914       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
1915       </td>
1916       <td style="vertical-align: top;"><br>
1917 <font color=green>Success</font>
1918
1919       </td>
1920     </tr>
1921     <tr>
1922       <td style="vertical-align: top;">4.14.4 Valid distributionPoint Test4<br>
1923       </td>
1924       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
1925       </td>
1926       <td style="vertical-align: top;"><br>
1927 <font color=green>Success</font>
1928
1929       </td>
1930     </tr>
1931     <tr>
1932       <td style="vertical-align: top;">4.14.5 Valid distributionPoint Test5<br>
1933       </td>
1934       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
1935       </td>
1936       <td style="vertical-align: top;"><br>
1937 <font color=green>Success</font>
1938
1939       </td>
1940     </tr>
1941     <tr>
1942       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.6 Invalid distributionPoint Test6</span><br>
1943       </td>
1944       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
1945       </td>
1946       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1947       </td>
1948     </tr>
1949     <tr>
1950       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.7 Valid distributionPoint Test7</span><br>
1951       </td>
1952       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
1953       </td>
1954       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1955       </td>
1956     </tr>
1957     <tr>
1958       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.8 Invalid distributionPoint Test8</span><br>
1959       </td>
1960       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
1961       </td>
1962       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
1963       </td>
1964     </tr>
1965     <tr>
1966       <td style="vertical-align: top;">4.14.9 Invalid distributionPoint Test9<br>
1967       </td>
1968       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
1969       </td>
1970       <td style="vertical-align: top;"><br>
1971 <font color=green>Success</font>
1972
1973       </td>
1974     </tr>
1975     <tr>
1976       <td style="vertical-align: top;">4.14.10 Valid No issuingDistributionPoint Test10<br>
1977       </td>
1978       <td style="vertical-align: top;">Validate Successfully<br>
1979       </td>
1980       <td style="vertical-align: top;"><br>
1981 <font color=green>Success</font>
1982
1983       </td>
1984     </tr>
1985     <tr>
1986       <td style="vertical-align: top;">4.14.11 Invalid onlyContainsUserCerts CRL Test11<br>
1987       </td>
1988       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
1989       </td>
1990       <td style="vertical-align: top;"><br>
1991 <font color=green>Success</font>
1992
1993       </td>
1994     </tr>
1995     <tr>
1996       <td style="vertical-align: top;">4.14.12 Invalid onlyContainsCACerts CRL Test12<br>
1997       </td>
1998       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
1999       </td>
2000       <td style="vertical-align: top;"><br>
2001 <font color=green>Success</font>
2002
2003       </td>
2004     </tr>
2005     <tr>
2006       <td style="vertical-align: top;">4.14.13 Valid onlyContainsCACerts CRL Test13<br>
2007       </td>
2008       <td style="vertical-align: top;">Validate Successfully<br>
2009       </td>
2010       <td style="vertical-align: top;"><br>
2011 <font color=green>Success</font>
2012
2013       </td>
2014     </tr>
2015     <tr>
2016       <td style="vertical-align: top;">4.14.14 Invalid onlyContainsAttributeCerts Test14<br>
2017       </td>
2018       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
2019       </td>
2020       <td style="vertical-align: top;"><br>
2021 <font color=green>Success</font>
2022
2023       </td>
2024     </tr>
2025     <tr>
2026       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.15 Invalid onlySomeReasons Test15</span><br>
2027       </td>
2028       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2029       </td>
2030       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2031       </td>
2032     </tr>
2033     <tr>
2034       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.16 Invalid onlySomeReasons Test16</span><br>
2035       </td>
2036       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2037       </td>
2038       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2039       </td>
2040     </tr>
2041     <tr>
2042       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.17 Invalid onlySomeReasons Test17</span><br>
2043       </td>
2044       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2045       </td>
2046       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2047       </td>
2048     </tr>
2049     <tr>
2050       <td style="vertical-align: top;">4.14.18 Valid onlySomeReasons Test18<br>
2051       </td>
2052       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
2053       </td>
2054       <td style="vertical-align: top;"><br>
2055 <font color=green>Success</font>
2056
2057       </td>
2058     </tr>
2059     <tr>
2060       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.19 Valid onlySomeReasons Test19</span><br>
2061       </td>
2062       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2063       </td>
2064       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2065       </td>
2066     </tr>
2067     <tr>
2068       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.20 Invalid onlySomeReasons Test20</span><br>
2069       </td>
2070       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2071       </td>
2072       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2073       </td>
2074     </tr>
2075     <tr>
2076       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.21 Invalid onlySomeReasons Test21</span><br>
2077       </td>
2078       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2079       </td>
2080       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2081       </td>
2082     </tr>
2083     <tr>
2084       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.22 Valid IDP with indirectCRL Test22</span><br>
2085       </td>
2086       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Application may validate successfully. However, if the application treats an issuingDistributionPoint extension with indirectCRL set to TRUE as an unrecognized critical extension then the application should reject the path or issue a warning that the status of end entity certificate can not be determined</span><br>
2087       </td>
2088       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2089       </td>
2090     </tr>
2091     <tr>
2092       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.23 Invalid IDP with indirectCRL Test23</span><br>
2093       </td>
2094       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - end entity certificate has been revoked</span><br>
2095       </td>
2096       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2097       </td>
2098     </tr>
2099     <tr>
2100       <td style="vertical-align: top;">4.14.24 Valid IDP with indirectCRL Test24<br>
2101       </td>
2102       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
2103       </td>
2104       <td style="vertical-align: top;"><br>
2105 <font color=green>Success</font>
2106
2107       </td>
2108     </tr>
2109     <tr>
2110       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.25 Valid IDP with indirectCRL Test25</span><br>
2111       </td>
2112       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2113       </td>
2114       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2115       </td>
2116     </tr>
2117     <tr>
2118       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.26 Invalid IDP with indirectCRL Test26</span><br>
2119       </td>
2120       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2121       </td>
2122       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2123       </td>
2124     </tr>
2125     <tr>
2126       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.27 Invalid cRLIssuer Test27</span><br>
2127       </td>
2128       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2129       </td>
2130       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2131       </td>
2132     </tr>
2133     <tr>
2134       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.28 Valid cRLIssuer Test28</span><br>
2135       </td>
2136       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2137       </td>
2138       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2139       </td>
2140     </tr>
2141     <tr>
2142       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.29 Valid cRLIssuer Test29</span><br>
2143       </td>
2144       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2145       </td>
2146       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2147       </td>
2148     </tr>
2149     <tr>
2150       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.30 Valid cRLIssuer Test30</span><br>
2151       </td>
2152       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2153       </td>
2154       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2155       </td>
2156     </tr>
2157     <tr>
2158       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.31 Invalid cRLIssuer Test31</span><br>
2159       </td>
2160       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2161       </td>
2162       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2163       </td>
2164     </tr>
2165     <tr>
2166       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.32 Invalid cRLIssuer Test32</span><br>
2167       </td>
2168       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2169       </td>
2170       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2171       </td>
2172     </tr>
2173     <tr>
2174       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.33 Valid cRLIssuer Test33</span><br>
2175       </td>
2176       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2177       </td>
2178       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2179       </td>
2180     </tr>
2181     <tr>
2182       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.34 Invalid cRLIssuer Test34</span><br>
2183       </td>
2184       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - end entity certificate has been revoked</span><br>
2185       </td>
2186       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2187       </td>
2188     </tr>
2189     <tr>
2190       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.14.35 Invalid cRLIssuer Test35</span><br>
2191       </td>
2192       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2193       </td>
2194       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2195       </td>
2196     </tr>
2197     <tr>
2198       <td style="vertical-align: top;">4.15.1 Invalid deltaCRLIndicator No Base Test1<br>
2199       </td>
2200       <td style="vertical-align: top;">Reject or Warn - status of end entity certificate can not be determined<br>
2201       </td>
2202       <td style="vertical-align: top;"><br>
2203 <font color=green>Success</font>
2204
2205       </td>
2206     </tr>
2207     <tr>
2208       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.15.2 Valid delta-CRL Test2</span><br>
2209       </td>
2210       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully</span><br>
2211       </td>
2212       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2213       </td>
2214     </tr>
2215     <tr>
2216       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.15.3 Invalid delta-CRL Test3</span><br>
2217       </td>
2218       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - end entity certificate has been revoked</span><br>
2219       </td>
2220       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2221       </td>
2222     </tr>
2223     <tr>
2224       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.15.4 Invalid delta-CRL Test4</span><br>
2225       </td>
2226       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully</span><br>
2227       </td>
2228       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2229       </td>
2230     </tr>
2231     <tr>
2232       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.15.5 Valid delta-CRL Test5</span><br>
2233       </td>
2234       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - end entity certificate is on hold</span><br>
2235       </td>
2236       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2237       </td>
2238     </tr>
2239     <tr>
2240       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.15.6 Invalid delta-CRL Test6</span><br>
2241       </td>
2242       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - end entity certificate is on hold</span><br>
2243       </td>
2244       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2245       </td>
2246     </tr>
2247     <tr>
2248       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.15.7 Valid delta-CRL Test7</span><br>
2249       </td>
2250       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully</span><br>
2251       </td>
2252       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2253       </td>
2254     </tr>
2255     <tr>
2256       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.15.8 Valid delta-CRL Test8</span><br>
2257       </td>
2258       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Validate Successfully</span><br>
2259       </td>
2260       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2261       </td>
2262     </tr>
2263     <tr>
2264       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.15.9 Invalid delta-CRL Test9</span><br>
2265       </td>
2266       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject - end entity certificate has been revoked</span><br>
2267       </td>
2268       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2269       </td>
2270     </tr>
2271     <tr>
2272       <td style="vertical-align: top;"><span style="color: rgb(153, 153, 153); font-style: italic;">4.15.10 Invalid delta-CRL Test10</span><br>
2273       </td>
2274       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">Reject or Warn - status of end entity certificate can not be determined</span><br>
2275       </td>
2276       <td style="vertical-align: top;"><span style="font-style: italic; color: rgb(153, 153, 153);">This test does not need to be run</span><br>
2277       </td>
2278     </tr>
2279     <tr>
2280       <td style="vertical-align: top;">4.16.1 Valid Unknown Not Critical Certificate Extension Test1<br>
2281       </td>
2282       <td style="vertical-align: top;">Validate Successfully<br>
2283       </td>
2284       <td style="vertical-align: top;"><br>
2285 <font color=green>Success</font>
2286
2287       </td>
2288     </tr>
2289     <tr>
2290       <td style="vertical-align: top;">4.16.2 Invalid Unknown Critical Certificate Extension Test2<br>
2291       </td>
2292       <td style="vertical-align: top;">Reject - unrecognized critical extension<br>
2293       </td>
2294       <td style="vertical-align: top;"><br>
2295 <font color=red>Unexpected success</font>
2296
2297       </td>
2298     </tr>
2299   </tbody>
2300 </table>
2301 <br>
2302 </body></html>