Adding upstream version 4.2.2.upstream/4.2.2

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 3084 insertions, 0 deletions

diff --git a/epan/dissectors/packet-x509ce.c b/epan/dissectors/packet-x509ce.c
new file mode 100644
index 00000000..fac6a43e
--- /dev/null
+++ b/epan/dissectors/packet-x509ce.c
@@ -0,0 +1,3084 @@
+/* Do not modify this file. Changes will be overwritten.                      */
+/* Generated automatically by the ASN.1 to Wireshark dissector compiler       */
+/* packet-x509ce.c                                                            */
+/* asn2wrs.py -b -L -p x509ce -c ./x509ce.cnf -s ./packet-x509ce-template -D . -O ../.. CertificateExtensions.asn CertificateExtensionsRFC9310.asn CertificateExtensionsCiplus.asn */
+
+/* packet-x509ce.c
+ * Routines for X.509 Certificate Extensions packet dissection
+ *  Ronnie Sahlberg 2004
+ *
+ * Wireshark - Network traffic analyzer
+ * By Gerald Combs <gerald@wireshark.org>
+ * Copyright 1998 Gerald Combs
+ *
+ * SPDX-License-Identifier: GPL-2.0-or-later
+ */
+
+#include "config.h"
+
+#include <epan/packet.h>
+#include <epan/asn1.h>
+#include <epan/oids.h>
+
+#include "packet-ber.h"
+#include "packet-x509ce.h"
+#include "packet-x509af.h"
+#include "packet-x509if.h"
+#include "packet-x509sat.h"
+#include "packet-p1.h"
+
+#define PNAME  "X.509 Certificate Extensions"
+#define PSNAME "X509CE"
+#define PFNAME "x509ce"
+
+void proto_register_x509ce(void);
+void proto_reg_handoff_x509ce(void);
+
+/* Initialize the protocol and registered fields */
+static int proto_x509ce = -1;
+static int hf_x509ce_id_ce_invalidityDate = -1;
+static int hf_x509ce_id_ce_baseUpdateTime = -1;
+static int hf_x509ce_object_identifier_id = -1;
+static int hf_x509ce_IPAddress_ipv4 = -1;
+static int hf_x509ce_IPAddress_ipv6 = -1;
+static int hf_x509ce_AuthorityKeyIdentifier_PDU = -1;  /* AuthorityKeyIdentifier */
+static int hf_x509ce_SubjectKeyIdentifier_PDU = -1;  /* SubjectKeyIdentifier */
+static int hf_x509ce_KeyUsage_PDU = -1;           /* KeyUsage */
+static int hf_x509ce_KeyPurposeIDs_PDU = -1;      /* KeyPurposeIDs */
+static int hf_x509ce_PrivateKeyUsagePeriod_PDU = -1;  /* PrivateKeyUsagePeriod */
+static int hf_x509ce_CertificatePoliciesSyntax_PDU = -1;  /* CertificatePoliciesSyntax */
+static int hf_x509ce_PolicyMappingsSyntax_PDU = -1;  /* PolicyMappingsSyntax */
+static int hf_x509ce_GeneralNames_PDU = -1;       /* GeneralNames */
+static int hf_x509ce_AttributesSyntax_PDU = -1;   /* AttributesSyntax */
+static int hf_x509ce_BasicConstraintsSyntax_PDU = -1;  /* BasicConstraintsSyntax */
+static int hf_x509ce_NameConstraintsSyntax_PDU = -1;  /* NameConstraintsSyntax */
+static int hf_x509ce_PolicyConstraintsSyntax_PDU = -1;  /* PolicyConstraintsSyntax */
+static int hf_x509ce_SkipCerts_PDU = -1;          /* SkipCerts */
+static int hf_x509ce_CRLNumber_PDU = -1;          /* CRLNumber */
+static int hf_x509ce_CRLReason_PDU = -1;          /* CRLReason */
+static int hf_x509ce_HoldInstruction_PDU = -1;    /* HoldInstruction */
+static int hf_x509ce_CRLScopeSyntax_PDU = -1;     /* CRLScopeSyntax */
+static int hf_x509ce_StatusReferrals_PDU = -1;    /* StatusReferrals */
+static int hf_x509ce_CRLStreamIdentifier_PDU = -1;  /* CRLStreamIdentifier */
+static int hf_x509ce_OrderedListSyntax_PDU = -1;  /* OrderedListSyntax */
+static int hf_x509ce_DeltaInformation_PDU = -1;   /* DeltaInformation */
+static int hf_x509ce_CRLDistPointsSyntax_PDU = -1;  /* CRLDistPointsSyntax */
+static int hf_x509ce_IssuingDistPointSyntax_PDU = -1;  /* IssuingDistPointSyntax */
+static int hf_x509ce_BaseCRLNumber_PDU = -1;      /* BaseCRLNumber */
+static int hf_x509ce_ToBeRevokedSyntax_PDU = -1;  /* ToBeRevokedSyntax */
+static int hf_x509ce_RevokedGroupsSyntax_PDU = -1;  /* RevokedGroupsSyntax */
+static int hf_x509ce_ExpiredCertsOnCRL_PDU = -1;  /* ExpiredCertsOnCRL */
+static int hf_x509ce_AAIssuingDistPointSyntax_PDU = -1;  /* AAIssuingDistPointSyntax */
+static int hf_x509ce_CertificateAssertion_PDU = -1;  /* CertificateAssertion */
+static int hf_x509ce_CertificatePairExactAssertion_PDU = -1;  /* CertificatePairExactAssertion */
+static int hf_x509ce_CertificatePairAssertion_PDU = -1;  /* CertificatePairAssertion */
+static int hf_x509ce_CertificateListExactAssertion_PDU = -1;  /* CertificateListExactAssertion */
+static int hf_x509ce_CertificateListAssertion_PDU = -1;  /* CertificateListAssertion */
+static int hf_x509ce_PkiPathMatchSyntax_PDU = -1;  /* PkiPathMatchSyntax */
+static int hf_x509ce_EnhancedCertificateAssertion_PDU = -1;  /* EnhancedCertificateAssertion */
+static int hf_x509ce_CertificateTemplate_PDU = -1;  /* CertificateTemplate */
+static int hf_x509ce_NtdsCaSecurity_PDU = -1;     /* NtdsCaSecurity */
+static int hf_x509ce_NtdsObjectSid_PDU = -1;      /* NtdsObjectSid */
+static int hf_x509ce_EntrustVersionInfo_PDU = -1;  /* EntrustVersionInfo */
+static int hf_x509ce_NFTypes_PDU = -1;            /* NFTypes */
+static int hf_x509ce_ScramblerCapabilities_PDU = -1;  /* ScramblerCapabilities */
+static int hf_x509ce_CiplusInfo_PDU = -1;         /* CiplusInfo */
+static int hf_x509ce_CicamBrandId_PDU = -1;       /* CicamBrandId */
+static int hf_x509ce_SecurityLevel_PDU = -1;      /* SecurityLevel */
+static int hf_x509ce_keyIdentifier = -1;          /* KeyIdentifier */
+static int hf_x509ce_authorityCertIssuer = -1;    /* GeneralNames */
+static int hf_x509ce_authorityCertSerialNumber = -1;  /* CertificateSerialNumber */
+static int hf_x509ce_KeyPurposeIDs_item = -1;     /* KeyPurposeId */
+static int hf_x509ce_notBefore = -1;              /* GeneralizedTime */
+static int hf_x509ce_notAfter = -1;               /* GeneralizedTime */
+static int hf_x509ce_CertificatePoliciesSyntax_item = -1;  /* PolicyInformation */
+static int hf_x509ce_policyIdentifier = -1;       /* CertPolicyId */
+static int hf_x509ce_policyQualifiers = -1;       /* SEQUENCE_SIZE_1_MAX_OF_PolicyQualifierInfo */
+static int hf_x509ce_policyQualifiers_item = -1;  /* PolicyQualifierInfo */
+static int hf_x509ce_policyQualifierId = -1;      /* T_policyQualifierId */
+static int hf_x509ce_qualifier = -1;              /* T_qualifier */
+static int hf_x509ce_PolicyMappingsSyntax_item = -1;  /* PolicyMappingsSyntax_item */
+static int hf_x509ce_issuerDomainPolicy = -1;     /* CertPolicyId */
+static int hf_x509ce_subjectDomainPolicy = -1;    /* CertPolicyId */
+static int hf_x509ce_GeneralNames_item = -1;      /* GeneralName */
+static int hf_x509ce_otherName = -1;              /* OtherName */
+static int hf_x509ce_rfc822Name = -1;             /* IA5String */
+static int hf_x509ce_dNSName = -1;                /* IA5String */
+static int hf_x509ce_x400Address = -1;            /* ORAddress */
+static int hf_x509ce_directoryName = -1;          /* Name */
+static int hf_x509ce_ediPartyName = -1;           /* EDIPartyName */
+static int hf_x509ce_uniformResourceIdentifier = -1;  /* T_uniformResourceIdentifier */
+static int hf_x509ce_iPAddress = -1;              /* T_iPAddress */
+static int hf_x509ce_registeredID = -1;           /* OBJECT_IDENTIFIER */
+static int hf_x509ce_type_id = -1;                /* OtherNameType */
+static int hf_x509ce_value = -1;                  /* OtherNameValue */
+static int hf_x509ce_nameAssigner = -1;           /* DirectoryString */
+static int hf_x509ce_partyName = -1;              /* DirectoryString */
+static int hf_x509ce_AttributesSyntax_item = -1;  /* Attribute */
+static int hf_x509ce_cA = -1;                     /* BOOLEAN */
+static int hf_x509ce_pathLenConstraint = -1;      /* INTEGER_0_MAX */
+static int hf_x509ce_permittedSubtrees = -1;      /* GeneralSubtrees */
+static int hf_x509ce_excludedSubtrees = -1;       /* GeneralSubtrees */
+static int hf_x509ce_GeneralSubtrees_item = -1;   /* GeneralSubtree */
+static int hf_x509ce_base = -1;                   /* GeneralName */
+static int hf_x509ce_minimum = -1;                /* BaseDistance */
+static int hf_x509ce_maximum = -1;                /* BaseDistance */
+static int hf_x509ce_requireExplicitPolicy = -1;  /* SkipCerts */
+static int hf_x509ce_inhibitPolicyMapping = -1;   /* SkipCerts */
+static int hf_x509ce_CRLScopeSyntax_item = -1;    /* PerAuthorityScope */
+static int hf_x509ce_authorityName = -1;          /* GeneralName */
+static int hf_x509ce_distributionPoint = -1;      /* DistributionPointName */
+static int hf_x509ce_onlyContains = -1;           /* OnlyCertificateTypes */
+static int hf_x509ce_onlySomeReasons = -1;        /* ReasonFlags */
+static int hf_x509ce_serialNumberRange = -1;      /* NumberRange */
+static int hf_x509ce_subjectKeyIdRange = -1;      /* NumberRange */
+static int hf_x509ce_nameSubtrees = -1;           /* GeneralNames */
+static int hf_x509ce_baseRevocationInfo = -1;     /* BaseRevocationInfo */
+static int hf_x509ce_startingNumber = -1;         /* INTEGER */
+static int hf_x509ce_endingNumber = -1;           /* INTEGER */
+static int hf_x509ce_modulus = -1;                /* INTEGER */
+static int hf_x509ce_cRLStreamIdentifier = -1;    /* CRLStreamIdentifier */
+static int hf_x509ce_cRLNumber = -1;              /* CRLNumber */
+static int hf_x509ce_baseThisUpdate = -1;         /* GeneralizedTime */
+static int hf_x509ce_StatusReferrals_item = -1;   /* StatusReferral */
+static int hf_x509ce_cRLReferral = -1;            /* CRLReferral */
+static int hf_x509ce_crlr_issuer = -1;            /* GeneralName */
+static int hf_x509ce_location = -1;               /* GeneralName */
+static int hf_x509ce_deltaRefInfo = -1;           /* DeltaRefInfo */
+static int hf_x509ce_cRLScope = -1;               /* CRLScopeSyntax */
+static int hf_x509ce_lastUpdate = -1;             /* GeneralizedTime */
+static int hf_x509ce_lastChangedCRL = -1;         /* GeneralizedTime */
+static int hf_x509ce_deltaLocation = -1;          /* GeneralName */
+static int hf_x509ce_lastDelta = -1;              /* GeneralizedTime */
+static int hf_x509ce_nextDelta = -1;              /* GeneralizedTime */
+static int hf_x509ce_CRLDistPointsSyntax_item = -1;  /* DistributionPoint */
+static int hf_x509ce_reasons = -1;                /* ReasonFlags */
+static int hf_x509ce_cRLIssuer = -1;              /* GeneralNames */
+static int hf_x509ce_fullName = -1;               /* GeneralNames */
+static int hf_x509ce_nameRelativeToCRLIssuer = -1;  /* RelativeDistinguishedName */
+static int hf_x509ce_onlyContainsUserPublicKeyCerts = -1;  /* BOOLEAN */
+static int hf_x509ce_onlyContainsCACerts = -1;    /* BOOLEAN */
+static int hf_x509ce_indirectCRL = -1;            /* BOOLEAN */
+static int hf_x509ce_ToBeRevokedSyntax_item = -1;  /* ToBeRevokedGroup */
+static int hf_x509ce_certificateIssuer = -1;      /* GeneralName */
+static int hf_x509ce_reasonInfo = -1;             /* ReasonInfo */
+static int hf_x509ce_revocationTime = -1;         /* GeneralizedTime */
+static int hf_x509ce_certificateGroup = -1;       /* CertificateGroup */
+static int hf_x509ce_reasonCode = -1;             /* CRLReason */
+static int hf_x509ce_holdInstructionCode = -1;    /* HoldInstruction */
+static int hf_x509ce_serialNumbers = -1;          /* CertificateSerialNumbers */
+static int hf_x509ce_certificateGroupNumberRange = -1;  /* CertificateGroupNumberRange */
+static int hf_x509ce_nameSubtree = -1;            /* GeneralName */
+static int hf_x509ce_CertificateSerialNumbers_item = -1;  /* CertificateSerialNumber */
+static int hf_x509ce_RevokedGroupsSyntax_item = -1;  /* RevokedGroup */
+static int hf_x509ce_invalidityDate = -1;         /* GeneralizedTime */
+static int hf_x509ce_revokedcertificateGroup = -1;  /* RevokedCertificateGroup */
+static int hf_x509ce_containsUserAttributeCerts = -1;  /* BOOLEAN */
+static int hf_x509ce_containsAACerts = -1;        /* BOOLEAN */
+static int hf_x509ce_containsSOAPublicKeyCerts = -1;  /* BOOLEAN */
+static int hf_x509ce_serialNumber = -1;           /* CertificateSerialNumber */
+static int hf_x509ce_issuer = -1;                 /* Name */
+static int hf_x509ce_subjectKeyIdentifier = -1;   /* SubjectKeyIdentifier */
+static int hf_x509ce_authorityKeyIdentifier = -1;  /* AuthorityKeyIdentifier */
+static int hf_x509ce_certificateValid = -1;       /* Time */
+static int hf_x509ce_privateKeyValid = -1;        /* GeneralizedTime */
+static int hf_x509ce_subjectPublicKeyAlgID = -1;  /* OBJECT_IDENTIFIER */
+static int hf_x509ce_keyUsage = -1;               /* KeyUsage */
+static int hf_x509ce_subjectAltNameType = -1;     /* AltNameType */
+static int hf_x509ce_policy = -1;                 /* CertPolicySet */
+static int hf_x509ce_pathToName = -1;             /* Name */
+static int hf_x509ce_subject = -1;                /* Name */
+static int hf_x509ce_nameConstraints = -1;        /* NameConstraintsSyntax */
+static int hf_x509ce_builtinNameForm = -1;        /* T_builtinNameForm */
+static int hf_x509ce_otherNameForm = -1;          /* OBJECT_IDENTIFIER */
+static int hf_x509ce_CertPolicySet_item = -1;     /* CertPolicyId */
+static int hf_x509ce_cpea_issuedToThisCAAssertion = -1;  /* CertificateExactAssertion */
+static int hf_x509ce_cpea_issuedByThisCAAssertion = -1;  /* CertificateExactAssertion */
+static int hf_x509ce_issuedToThisCAAssertion = -1;  /* CertificateAssertion */
+static int hf_x509ce_issuedByThisCAAssertion = -1;  /* CertificateAssertion */
+static int hf_x509ce_thisUpdate = -1;             /* Time */
+static int hf_x509ce_minCRLNumber = -1;           /* CRLNumber */
+static int hf_x509ce_maxCRLNumber = -1;           /* CRLNumber */
+static int hf_x509ce_reasonFlags = -1;            /* ReasonFlags */
+static int hf_x509ce_dateAndTime = -1;            /* Time */
+static int hf_x509ce_firstIssuer = -1;            /* Name */
+static int hf_x509ce_lastSubject = -1;            /* Name */
+static int hf_x509ce_subjectAltName = -1;         /* AltName */
+static int hf_x509ce_enhancedPathToName = -1;     /* GeneralNames */
+static int hf_x509ce_altnameType = -1;            /* AltNameType */
+static int hf_x509ce_altNameValue = -1;           /* GeneralName */
+static int hf_x509ce_templateID = -1;             /* OBJECT_IDENTIFIER */
+static int hf_x509ce_templateMajorVersion = -1;   /* INTEGER */
+static int hf_x509ce_templateMinorVersion = -1;   /* INTEGER */
+static int hf_x509ce_ntdsObjectSid = -1;          /* NtdsObjectSid */
+static int hf_x509ce_type_id_01 = -1;             /* OBJECT_IDENTIFIER */
+static int hf_x509ce_sid = -1;                    /* PrintableString */
+static int hf_x509ce_entrustVers = -1;            /* GeneralString */
+static int hf_x509ce_entrustVersInfoFlags = -1;   /* EntrustInfoFlags */
+static int hf_x509ce_NFTypes_item = -1;           /* NFType */
+static int hf_x509ce_capability = -1;             /* INTEGER_0_MAX */
+static int hf_x509ce_version = -1;                /* INTEGER_0_MAX */
+/* named bits */
+static int hf_x509ce_KeyUsage_digitalSignature = -1;
+static int hf_x509ce_KeyUsage_contentCommitment = -1;
+static int hf_x509ce_KeyUsage_keyEncipherment = -1;
+static int hf_x509ce_KeyUsage_dataEncipherment = -1;
+static int hf_x509ce_KeyUsage_keyAgreement = -1;
+static int hf_x509ce_KeyUsage_keyCertSign = -1;
+static int hf_x509ce_KeyUsage_cRLSign = -1;
+static int hf_x509ce_KeyUsage_encipherOnly = -1;
+static int hf_x509ce_KeyUsage_decipherOnly = -1;
+static int hf_x509ce_OnlyCertificateTypes_user = -1;
+static int hf_x509ce_OnlyCertificateTypes_authority = -1;
+static int hf_x509ce_OnlyCertificateTypes_attribute = -1;
+static int hf_x509ce_ReasonFlags_unused = -1;
+static int hf_x509ce_ReasonFlags_keyCompromise = -1;
+static int hf_x509ce_ReasonFlags_cACompromise = -1;
+static int hf_x509ce_ReasonFlags_affiliationChanged = -1;
+static int hf_x509ce_ReasonFlags_superseded = -1;
+static int hf_x509ce_ReasonFlags_cessationOfOperation = -1;
+static int hf_x509ce_ReasonFlags_certificateHold = -1;
+static int hf_x509ce_ReasonFlags_privilegeWithdrawn = -1;
+static int hf_x509ce_ReasonFlags_aACompromise = -1;
+static int hf_x509ce_EntrustInfoFlags_keyUpdateAllowed = -1;
+static int hf_x509ce_EntrustInfoFlags_newExtensions = -1;
+static int hf_x509ce_EntrustInfoFlags_pKIXCertificate = -1;
+static int hf_x509ce_EntrustInfoFlags_enterpriseCategory = -1;
+static int hf_x509ce_EntrustInfoFlags_webCategory = -1;
+static int hf_x509ce_EntrustInfoFlags_sETCategory = -1;
+
+/* Initialize the subtree pointers */
+static gint ett_x509ce_AuthorityKeyIdentifier = -1;
+static gint ett_x509ce_KeyUsage = -1;
+static gint ett_x509ce_KeyPurposeIDs = -1;
+static gint ett_x509ce_PrivateKeyUsagePeriod = -1;
+static gint ett_x509ce_CertificatePoliciesSyntax = -1;
+static gint ett_x509ce_PolicyInformation = -1;
+static gint ett_x509ce_SEQUENCE_SIZE_1_MAX_OF_PolicyQualifierInfo = -1;
+static gint ett_x509ce_PolicyQualifierInfo = -1;
+static gint ett_x509ce_PolicyMappingsSyntax = -1;
+static gint ett_x509ce_PolicyMappingsSyntax_item = -1;
+static gint ett_x509ce_GeneralNames = -1;
+static gint ett_x509ce_GeneralName = -1;
+static gint ett_x509ce_OtherName = -1;
+static gint ett_x509ce_EDIPartyName = -1;
+static gint ett_x509ce_AttributesSyntax = -1;
+static gint ett_x509ce_BasicConstraintsSyntax = -1;
+static gint ett_x509ce_NameConstraintsSyntax = -1;
+static gint ett_x509ce_GeneralSubtrees = -1;
+static gint ett_x509ce_GeneralSubtree = -1;
+static gint ett_x509ce_PolicyConstraintsSyntax = -1;
+static gint ett_x509ce_CRLScopeSyntax = -1;
+static gint ett_x509ce_PerAuthorityScope = -1;
+static gint ett_x509ce_OnlyCertificateTypes = -1;
+static gint ett_x509ce_NumberRange = -1;
+static gint ett_x509ce_BaseRevocationInfo = -1;
+static gint ett_x509ce_StatusReferrals = -1;
+static gint ett_x509ce_StatusReferral = -1;
+static gint ett_x509ce_CRLReferral = -1;
+static gint ett_x509ce_DeltaRefInfo = -1;
+static gint ett_x509ce_DeltaInformation = -1;
+static gint ett_x509ce_CRLDistPointsSyntax = -1;
+static gint ett_x509ce_DistributionPoint = -1;
+static gint ett_x509ce_DistributionPointName = -1;
+static gint ett_x509ce_ReasonFlags = -1;
+static gint ett_x509ce_IssuingDistPointSyntax = -1;
+static gint ett_x509ce_ToBeRevokedSyntax = -1;
+static gint ett_x509ce_ToBeRevokedGroup = -1;
+static gint ett_x509ce_ReasonInfo = -1;
+static gint ett_x509ce_CertificateGroup = -1;
+static gint ett_x509ce_CertificateGroupNumberRange = -1;
+static gint ett_x509ce_CertificateSerialNumbers = -1;
+static gint ett_x509ce_RevokedGroupsSyntax = -1;
+static gint ett_x509ce_RevokedGroup = -1;
+static gint ett_x509ce_RevokedCertificateGroup = -1;
+static gint ett_x509ce_AAIssuingDistPointSyntax = -1;
+static gint ett_x509ce_CertificateExactAssertion = -1;
+static gint ett_x509ce_CertificateAssertion = -1;
+static gint ett_x509ce_AltNameType = -1;
+static gint ett_x509ce_CertPolicySet = -1;
+static gint ett_x509ce_CertificatePairExactAssertion = -1;
+static gint ett_x509ce_CertificatePairAssertion = -1;
+static gint ett_x509ce_CertificateListExactAssertion = -1;
+static gint ett_x509ce_CertificateListAssertion = -1;
+static gint ett_x509ce_PkiPathMatchSyntax = -1;
+static gint ett_x509ce_EnhancedCertificateAssertion = -1;
+static gint ett_x509ce_AltName = -1;
+static gint ett_x509ce_CertificateTemplate = -1;
+static gint ett_x509ce_NtdsCaSecurity = -1;
+static gint ett_x509ce_NtdsObjectSid_U = -1;
+static gint ett_x509ce_EntrustVersionInfo = -1;
+static gint ett_x509ce_EntrustInfoFlags = -1;
+static gint ett_x509ce_NFTypes = -1;
+static gint ett_x509ce_ScramblerCapabilities = -1;
+
+
+int
+dissect_x509ce_KeyIdentifier(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_octet_string(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                       NULL);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_OtherNameType(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_object_identifier_str(implicit_tag, actx, tree, tvb, offset, hf_index, &actx->external.direct_reference);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_OtherNameValue(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);
+
+
+  return offset;
+}
+
+
+static const ber_sequence_t OtherName_sequence[] = {
+  { &hf_x509ce_type_id      , BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_x509ce_OtherNameType },
+  { &hf_x509ce_value        , BER_CLASS_CON, 0, 0, dissect_x509ce_OtherNameValue },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_OtherName(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   OtherName_sequence, hf_index, ett_x509ce_OtherName);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_IA5String(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_restricted_string(implicit_tag, BER_UNI_TAG_IA5String,
+                                            actx, tree, tvb, offset, hf_index,
+                                            NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t EDIPartyName_sequence[] = {
+  { &hf_x509ce_nameAssigner , BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509sat_DirectoryString },
+  { &hf_x509ce_partyName    , BER_CLASS_CON, 1, BER_FLAGS_IMPLTAG, dissect_x509sat_DirectoryString },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_EDIPartyName(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   EDIPartyName_sequence, hf_index, ett_x509ce_EDIPartyName);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_T_uniformResourceIdentifier(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_restricted_string(implicit_tag, BER_UNI_TAG_IA5String,
+                                            actx, tree, tvb, offset, hf_index,
+                                            NULL);
+
+
+  proto_item_set_url(actx->created_item);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_T_iPAddress(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  switch (tvb_reported_length(tvb)) {
+  case 4: /* IPv4 */
+    proto_tree_add_item(tree, hf_x509ce_IPAddress_ipv4, tvb, offset, 4, ENC_BIG_ENDIAN);
+    offset += 4;
+    break;
+  case 16: /* IPv6 */
+    proto_tree_add_item(tree, hf_x509ce_IPAddress_ipv6, tvb, offset, 16, ENC_NA);
+    offset += 16;
+    break;
+  }
+
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_OBJECT_IDENTIFIER(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_object_identifier(implicit_tag, actx, tree, tvb, offset, hf_index, NULL);
+
+  return offset;
+}
+
+
+const value_string x509ce_GeneralName_vals[] = {
+  {   0, "otherName" },
+  {   1, "rfc822Name" },
+  {   2, "dNSName" },
+  {   3, "x400Address" },
+  {   4, "directoryName" },
+  {   5, "ediPartyName" },
+  {   6, "uniformResourceIdentifier" },
+  {   7, "iPAddress" },
+  {   8, "registeredID" },
+  { 0, NULL }
+};
+
+static const ber_choice_t GeneralName_choice[] = {
+  {   0, &hf_x509ce_otherName    , BER_CLASS_CON, 0, BER_FLAGS_IMPLTAG, dissect_x509ce_OtherName },
+  {   1, &hf_x509ce_rfc822Name   , BER_CLASS_CON, 1, BER_FLAGS_IMPLTAG, dissect_x509ce_IA5String },
+  {   2, &hf_x509ce_dNSName      , BER_CLASS_CON, 2, BER_FLAGS_IMPLTAG, dissect_x509ce_IA5String },
+  {   3, &hf_x509ce_x400Address  , BER_CLASS_CON, 3, BER_FLAGS_IMPLTAG, dissect_p1_ORAddress },
+  {   4, &hf_x509ce_directoryName, BER_CLASS_CON, 4, BER_FLAGS_IMPLTAG, dissect_x509if_Name },
+  {   5, &hf_x509ce_ediPartyName , BER_CLASS_CON, 5, BER_FLAGS_IMPLTAG, dissect_x509ce_EDIPartyName },
+  {   6, &hf_x509ce_uniformResourceIdentifier, BER_CLASS_CON, 6, BER_FLAGS_IMPLTAG, dissect_x509ce_T_uniformResourceIdentifier },
+  {   7, &hf_x509ce_iPAddress    , BER_CLASS_CON, 7, BER_FLAGS_IMPLTAG, dissect_x509ce_T_iPAddress },
+  {   8, &hf_x509ce_registeredID , BER_CLASS_CON, 8, BER_FLAGS_IMPLTAG, dissect_x509ce_OBJECT_IDENTIFIER },
+  { 0, NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_GeneralName(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_choice(actx, tree, tvb, offset,
+                                 GeneralName_choice, hf_index, ett_x509ce_GeneralName,
+                                 NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t GeneralNames_sequence_of[1] = {
+  { &hf_x509ce_GeneralNames_item, BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_GeneralName },
+};
+
+int
+dissect_x509ce_GeneralNames(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      GeneralNames_sequence_of, hf_index, ett_x509ce_GeneralNames);
+
+  return offset;
+}
+
+
+static const ber_sequence_t AuthorityKeyIdentifier_sequence[] = {
+  { &hf_x509ce_keyIdentifier, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_KeyIdentifier },
+  { &hf_x509ce_authorityCertIssuer, BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralNames },
+  { &hf_x509ce_authorityCertSerialNumber, BER_CLASS_CON, 2, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509af_CertificateSerialNumber },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_AuthorityKeyIdentifier(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   AuthorityKeyIdentifier_sequence, hf_index, ett_x509ce_AuthorityKeyIdentifier);
+
+  return offset;
+}
+
+
+
+int
+dissect_x509ce_SubjectKeyIdentifier(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_x509ce_KeyIdentifier(implicit_tag, tvb, offset, actx, tree, hf_index);
+
+  return offset;
+}
+
+
+static int * const KeyUsage_bits[] = {
+  &hf_x509ce_KeyUsage_digitalSignature,
+  &hf_x509ce_KeyUsage_contentCommitment,
+  &hf_x509ce_KeyUsage_keyEncipherment,
+  &hf_x509ce_KeyUsage_dataEncipherment,
+  &hf_x509ce_KeyUsage_keyAgreement,
+  &hf_x509ce_KeyUsage_keyCertSign,
+  &hf_x509ce_KeyUsage_cRLSign,
+  &hf_x509ce_KeyUsage_encipherOnly,
+  &hf_x509ce_KeyUsage_decipherOnly,
+  NULL
+};
+
+int
+dissect_x509ce_KeyUsage(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_bitstring(implicit_tag, actx, tree, tvb, offset,
+                                    KeyUsage_bits, 9, hf_index, ett_x509ce_KeyUsage,
+                                    NULL);
+
+  return offset;
+}
+
+
+
+int
+dissect_x509ce_KeyPurposeId(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_object_identifier(implicit_tag, actx, tree, tvb, offset, hf_index, NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t KeyPurposeIDs_sequence_of[1] = {
+  { &hf_x509ce_KeyPurposeIDs_item, BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_x509ce_KeyPurposeId },
+};
+
+int
+dissect_x509ce_KeyPurposeIDs(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      KeyPurposeIDs_sequence_of, hf_index, ett_x509ce_KeyPurposeIDs);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_GeneralizedTime(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_GeneralizedTime(implicit_tag, actx, tree, tvb, offset, hf_index);
+
+  return offset;
+}
+
+
+static const ber_sequence_t PrivateKeyUsagePeriod_sequence[] = {
+  { &hf_x509ce_notBefore    , BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralizedTime },
+  { &hf_x509ce_notAfter     , BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralizedTime },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_PrivateKeyUsagePeriod(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   PrivateKeyUsagePeriod_sequence, hf_index, ett_x509ce_PrivateKeyUsagePeriod);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_CertPolicyId(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_object_identifier(implicit_tag, actx, tree, tvb, offset, hf_index, NULL);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_T_policyQualifierId(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_object_identifier_str(implicit_tag, actx, tree, tvb, offset, hf_x509ce_object_identifier_id, &actx->external.direct_reference);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_T_qualifier(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);
+
+
+  return offset;
+}
+
+
+static const ber_sequence_t PolicyQualifierInfo_sequence[] = {
+  { &hf_x509ce_policyQualifierId, BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_x509ce_T_policyQualifierId },
+  { &hf_x509ce_qualifier    , BER_CLASS_ANY, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509ce_T_qualifier },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_PolicyQualifierInfo(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   PolicyQualifierInfo_sequence, hf_index, ett_x509ce_PolicyQualifierInfo);
+
+  return offset;
+}
+
+
+static const ber_sequence_t SEQUENCE_SIZE_1_MAX_OF_PolicyQualifierInfo_sequence_of[1] = {
+  { &hf_x509ce_policyQualifiers_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509ce_PolicyQualifierInfo },
+};
+
+static int
+dissect_x509ce_SEQUENCE_SIZE_1_MAX_OF_PolicyQualifierInfo(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      SEQUENCE_SIZE_1_MAX_OF_PolicyQualifierInfo_sequence_of, hf_index, ett_x509ce_SEQUENCE_SIZE_1_MAX_OF_PolicyQualifierInfo);
+
+  return offset;
+}
+
+
+static const ber_sequence_t PolicyInformation_sequence[] = {
+  { &hf_x509ce_policyIdentifier, BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_x509ce_CertPolicyId },
+  { &hf_x509ce_policyQualifiers, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509ce_SEQUENCE_SIZE_1_MAX_OF_PolicyQualifierInfo },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_PolicyInformation(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   PolicyInformation_sequence, hf_index, ett_x509ce_PolicyInformation);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CertificatePoliciesSyntax_sequence_of[1] = {
+  { &hf_x509ce_CertificatePoliciesSyntax_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509ce_PolicyInformation },
+};
+
+int
+dissect_x509ce_CertificatePoliciesSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      CertificatePoliciesSyntax_sequence_of, hf_index, ett_x509ce_CertificatePoliciesSyntax);
+
+  return offset;
+}
+
+
+static const ber_sequence_t PolicyMappingsSyntax_item_sequence[] = {
+  { &hf_x509ce_issuerDomainPolicy, BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_x509ce_CertPolicyId },
+  { &hf_x509ce_subjectDomainPolicy, BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_x509ce_CertPolicyId },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_PolicyMappingsSyntax_item(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   PolicyMappingsSyntax_item_sequence, hf_index, ett_x509ce_PolicyMappingsSyntax_item);
+
+  return offset;
+}
+
+
+static const ber_sequence_t PolicyMappingsSyntax_sequence_of[1] = {
+  { &hf_x509ce_PolicyMappingsSyntax_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509ce_PolicyMappingsSyntax_item },
+};
+
+int
+dissect_x509ce_PolicyMappingsSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      PolicyMappingsSyntax_sequence_of, hf_index, ett_x509ce_PolicyMappingsSyntax);
+
+  return offset;
+}
+
+
+static const ber_sequence_t AttributesSyntax_sequence_of[1] = {
+  { &hf_x509ce_AttributesSyntax_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509if_Attribute },
+};
+
+int
+dissect_x509ce_AttributesSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      AttributesSyntax_sequence_of, hf_index, ett_x509ce_AttributesSyntax);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_BOOLEAN(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_boolean(implicit_tag, actx, tree, tvb, offset, hf_index, NULL);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_INTEGER_0_MAX(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer64(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                                NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t BasicConstraintsSyntax_sequence[] = {
+  { &hf_x509ce_cA           , BER_CLASS_UNI, BER_UNI_TAG_BOOLEAN, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509ce_BOOLEAN },
+  { &hf_x509ce_pathLenConstraint, BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509ce_INTEGER_0_MAX },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_BasicConstraintsSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   BasicConstraintsSyntax_sequence, hf_index, ett_x509ce_BasicConstraintsSyntax);
+
+  return offset;
+}
+
+
+
+int
+dissect_x509ce_BaseDistance(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer64(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                                NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t GeneralSubtree_sequence[] = {
+  { &hf_x509ce_base         , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_GeneralName },
+  { &hf_x509ce_minimum      , BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_BaseDistance },
+  { &hf_x509ce_maximum      , BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_BaseDistance },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_GeneralSubtree(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   GeneralSubtree_sequence, hf_index, ett_x509ce_GeneralSubtree);
+
+  return offset;
+}
+
+
+static const ber_sequence_t GeneralSubtrees_sequence_of[1] = {
+  { &hf_x509ce_GeneralSubtrees_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509ce_GeneralSubtree },
+};
+
+int
+dissect_x509ce_GeneralSubtrees(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      GeneralSubtrees_sequence_of, hf_index, ett_x509ce_GeneralSubtrees);
+
+  return offset;
+}
+
+
+static const ber_sequence_t NameConstraintsSyntax_sequence[] = {
+  { &hf_x509ce_permittedSubtrees, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralSubtrees },
+  { &hf_x509ce_excludedSubtrees, BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralSubtrees },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_NameConstraintsSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   NameConstraintsSyntax_sequence, hf_index, ett_x509ce_NameConstraintsSyntax);
+
+  return offset;
+}
+
+
+
+int
+dissect_x509ce_SkipCerts(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer64(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                                NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t PolicyConstraintsSyntax_sequence[] = {
+  { &hf_x509ce_requireExplicitPolicy, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_SkipCerts },
+  { &hf_x509ce_inhibitPolicyMapping, BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_SkipCerts },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_PolicyConstraintsSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   PolicyConstraintsSyntax_sequence, hf_index, ett_x509ce_PolicyConstraintsSyntax);
+
+  return offset;
+}
+
+
+
+int
+dissect_x509ce_CRLNumber(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer64(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                                NULL);
+
+  return offset;
+}
+
+
+const value_string x509ce_CRLReason_vals[] = {
+  {   0, "unspecified" },
+  {   1, "keyCompromise" },
+  {   2, "cACompromise" },
+  {   3, "affiliationChanged" },
+  {   4, "superseded" },
+  {   5, "cessationOfOperation" },
+  {   6, "certificateHold" },
+  {   8, "removeFromCRL" },
+  {   9, "privilegeWithdrawn" },
+  {  10, "aaCompromise" },
+  { 0, NULL }
+};
+
+
+int
+dissect_x509ce_CRLReason(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                  NULL);
+
+  return offset;
+}
+
+
+
+int
+dissect_x509ce_HoldInstruction(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_object_identifier(implicit_tag, actx, tree, tvb, offset, hf_index, NULL);
+
+  return offset;
+}
+
+
+const value_string x509ce_DistributionPointName_vals[] = {
+  {   0, "fullName" },
+  {   1, "nameRelativeToCRLIssuer" },
+  { 0, NULL }
+};
+
+static const ber_choice_t DistributionPointName_choice[] = {
+  {   0, &hf_x509ce_fullName     , BER_CLASS_CON, 0, BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralNames },
+  {   1, &hf_x509ce_nameRelativeToCRLIssuer, BER_CLASS_CON, 1, BER_FLAGS_IMPLTAG, dissect_x509if_RelativeDistinguishedName },
+  { 0, NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_DistributionPointName(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_choice(actx, tree, tvb, offset,
+                                 DistributionPointName_choice, hf_index, ett_x509ce_DistributionPointName,
+                                 NULL);
+
+  return offset;
+}
+
+
+static int * const OnlyCertificateTypes_bits[] = {
+  &hf_x509ce_OnlyCertificateTypes_user,
+  &hf_x509ce_OnlyCertificateTypes_authority,
+  &hf_x509ce_OnlyCertificateTypes_attribute,
+  NULL
+};
+
+int
+dissect_x509ce_OnlyCertificateTypes(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_bitstring(implicit_tag, actx, tree, tvb, offset,
+                                    OnlyCertificateTypes_bits, 3, hf_index, ett_x509ce_OnlyCertificateTypes,
+                                    NULL);
+
+  return offset;
+}
+
+
+static int * const ReasonFlags_bits[] = {
+  &hf_x509ce_ReasonFlags_unused,
+  &hf_x509ce_ReasonFlags_keyCompromise,
+  &hf_x509ce_ReasonFlags_cACompromise,
+  &hf_x509ce_ReasonFlags_affiliationChanged,
+  &hf_x509ce_ReasonFlags_superseded,
+  &hf_x509ce_ReasonFlags_cessationOfOperation,
+  &hf_x509ce_ReasonFlags_certificateHold,
+  &hf_x509ce_ReasonFlags_privilegeWithdrawn,
+  &hf_x509ce_ReasonFlags_aACompromise,
+  NULL
+};
+
+int
+dissect_x509ce_ReasonFlags(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_bitstring(implicit_tag, actx, tree, tvb, offset,
+                                    ReasonFlags_bits, 9, hf_index, ett_x509ce_ReasonFlags,
+                                    NULL);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_INTEGER(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                                NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t NumberRange_sequence[] = {
+  { &hf_x509ce_startingNumber, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_INTEGER },
+  { &hf_x509ce_endingNumber , BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_INTEGER },
+  { &hf_x509ce_modulus      , BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509ce_INTEGER },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_NumberRange(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   NumberRange_sequence, hf_index, ett_x509ce_NumberRange);
+
+  return offset;
+}
+
+
+
+int
+dissect_x509ce_CRLStreamIdentifier(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer64(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                                NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t BaseRevocationInfo_sequence[] = {
+  { &hf_x509ce_cRLStreamIdentifier, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_CRLStreamIdentifier },
+  { &hf_x509ce_cRLNumber    , BER_CLASS_CON, 1, BER_FLAGS_IMPLTAG, dissect_x509ce_CRLNumber },
+  { &hf_x509ce_baseThisUpdate, BER_CLASS_CON, 2, BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralizedTime },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_BaseRevocationInfo(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   BaseRevocationInfo_sequence, hf_index, ett_x509ce_BaseRevocationInfo);
+
+  return offset;
+}
+
+
+static const ber_sequence_t PerAuthorityScope_sequence[] = {
+  { &hf_x509ce_authorityName, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_GeneralName },
+  { &hf_x509ce_distributionPoint, BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_DistributionPointName },
+  { &hf_x509ce_onlyContains , BER_CLASS_CON, 2, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_OnlyCertificateTypes },
+  { &hf_x509ce_onlySomeReasons, BER_CLASS_CON, 4, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_ReasonFlags },
+  { &hf_x509ce_serialNumberRange, BER_CLASS_CON, 5, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_NumberRange },
+  { &hf_x509ce_subjectKeyIdRange, BER_CLASS_CON, 6, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_NumberRange },
+  { &hf_x509ce_nameSubtrees , BER_CLASS_CON, 7, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralNames },
+  { &hf_x509ce_baseRevocationInfo, BER_CLASS_CON, 9, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_BaseRevocationInfo },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_PerAuthorityScope(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   PerAuthorityScope_sequence, hf_index, ett_x509ce_PerAuthorityScope);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CRLScopeSyntax_sequence_of[1] = {
+  { &hf_x509ce_CRLScopeSyntax_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509ce_PerAuthorityScope },
+};
+
+int
+dissect_x509ce_CRLScopeSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      CRLScopeSyntax_sequence_of, hf_index, ett_x509ce_CRLScopeSyntax);
+
+  return offset;
+}
+
+
+static const ber_sequence_t DeltaRefInfo_sequence[] = {
+  { &hf_x509ce_deltaLocation, BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_GeneralName },
+  { &hf_x509ce_lastDelta    , BER_CLASS_UNI, BER_UNI_TAG_GeneralizedTime, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509ce_GeneralizedTime },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_DeltaRefInfo(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   DeltaRefInfo_sequence, hf_index, ett_x509ce_DeltaRefInfo);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CRLReferral_sequence[] = {
+  { &hf_x509ce_crlr_issuer  , BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_GeneralName },
+  { &hf_x509ce_location     , BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_GeneralName },
+  { &hf_x509ce_deltaRefInfo , BER_CLASS_CON, 2, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_DeltaRefInfo },
+  { &hf_x509ce_cRLScope     , BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509ce_CRLScopeSyntax },
+  { &hf_x509ce_lastUpdate   , BER_CLASS_CON, 3, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralizedTime },
+  { &hf_x509ce_lastChangedCRL, BER_CLASS_CON, 4, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralizedTime },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_CRLReferral(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   CRLReferral_sequence, hf_index, ett_x509ce_CRLReferral);
+
+  return offset;
+}
+
+
+const value_string x509ce_StatusReferral_vals[] = {
+  {   0, "cRLReferral" },
+  { 0, NULL }
+};
+
+static const ber_choice_t StatusReferral_choice[] = {
+  {   0, &hf_x509ce_cRLReferral  , BER_CLASS_CON, 0, BER_FLAGS_IMPLTAG, dissect_x509ce_CRLReferral },
+  { 0, NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_StatusReferral(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_choice(actx, tree, tvb, offset,
+                                 StatusReferral_choice, hf_index, ett_x509ce_StatusReferral,
+                                 NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t StatusReferrals_sequence_of[1] = {
+  { &hf_x509ce_StatusReferrals_item, BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_StatusReferral },
+};
+
+int
+dissect_x509ce_StatusReferrals(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      StatusReferrals_sequence_of, hf_index, ett_x509ce_StatusReferrals);
+
+  return offset;
+}
+
+
+const value_string x509ce_OrderedListSyntax_vals[] = {
+  {   0, "ascSerialNum" },
+  {   1, "ascRevDate" },
+  { 0, NULL }
+};
+
+
+int
+dissect_x509ce_OrderedListSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                  NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t DeltaInformation_sequence[] = {
+  { &hf_x509ce_deltaLocation, BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_GeneralName },
+  { &hf_x509ce_nextDelta    , BER_CLASS_UNI, BER_UNI_TAG_GeneralizedTime, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509ce_GeneralizedTime },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_DeltaInformation(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   DeltaInformation_sequence, hf_index, ett_x509ce_DeltaInformation);
+
+  return offset;
+}
+
+
+static const ber_sequence_t DistributionPoint_sequence[] = {
+  { &hf_x509ce_distributionPoint, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_DistributionPointName },
+  { &hf_x509ce_reasons      , BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_ReasonFlags },
+  { &hf_x509ce_cRLIssuer    , BER_CLASS_CON, 2, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralNames },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_DistributionPoint(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   DistributionPoint_sequence, hf_index, ett_x509ce_DistributionPoint);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CRLDistPointsSyntax_sequence_of[1] = {
+  { &hf_x509ce_CRLDistPointsSyntax_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509ce_DistributionPoint },
+};
+
+int
+dissect_x509ce_CRLDistPointsSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      CRLDistPointsSyntax_sequence_of, hf_index, ett_x509ce_CRLDistPointsSyntax);
+
+  return offset;
+}
+
+
+static const ber_sequence_t IssuingDistPointSyntax_sequence[] = {
+  { &hf_x509ce_distributionPoint, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_DistributionPointName },
+  { &hf_x509ce_onlyContainsUserPublicKeyCerts, BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_BOOLEAN },
+  { &hf_x509ce_onlyContainsCACerts, BER_CLASS_CON, 2, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_BOOLEAN },
+  { &hf_x509ce_onlySomeReasons, BER_CLASS_CON, 3, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_ReasonFlags },
+  { &hf_x509ce_indirectCRL  , BER_CLASS_CON, 4, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_BOOLEAN },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_IssuingDistPointSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   IssuingDistPointSyntax_sequence, hf_index, ett_x509ce_IssuingDistPointSyntax);
+
+  return offset;
+}
+
+
+
+int
+dissect_x509ce_BaseCRLNumber(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_x509ce_CRLNumber(implicit_tag, tvb, offset, actx, tree, hf_index);
+
+  return offset;
+}
+
+
+static const ber_sequence_t ReasonInfo_sequence[] = {
+  { &hf_x509ce_reasonCode   , BER_CLASS_UNI, BER_UNI_TAG_ENUMERATED, BER_FLAGS_NOOWNTAG, dissect_x509ce_CRLReason },
+  { &hf_x509ce_holdInstructionCode, BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509ce_HoldInstruction },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_ReasonInfo(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   ReasonInfo_sequence, hf_index, ett_x509ce_ReasonInfo);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CertificateSerialNumbers_sequence_of[1] = {
+  { &hf_x509ce_CertificateSerialNumbers_item, BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_NOOWNTAG, dissect_x509af_CertificateSerialNumber },
+};
+
+static int
+dissect_x509ce_CertificateSerialNumbers(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      CertificateSerialNumbers_sequence_of, hf_index, ett_x509ce_CertificateSerialNumbers);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CertificateGroupNumberRange_sequence[] = {
+  { &hf_x509ce_startingNumber, BER_CLASS_CON, 0, BER_FLAGS_IMPLTAG, dissect_x509ce_INTEGER },
+  { &hf_x509ce_endingNumber , BER_CLASS_CON, 1, BER_FLAGS_IMPLTAG, dissect_x509ce_INTEGER },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_CertificateGroupNumberRange(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   CertificateGroupNumberRange_sequence, hf_index, ett_x509ce_CertificateGroupNumberRange);
+
+  return offset;
+}
+
+
+static const value_string x509ce_CertificateGroup_vals[] = {
+  {   0, "serialNumbers" },
+  {   1, "serialNumberRange" },
+  {   2, "nameSubtree" },
+  { 0, NULL }
+};
+
+static const ber_choice_t CertificateGroup_choice[] = {
+  {   0, &hf_x509ce_serialNumbers, BER_CLASS_CON, 0, BER_FLAGS_IMPLTAG, dissect_x509ce_CertificateSerialNumbers },
+  {   1, &hf_x509ce_certificateGroupNumberRange, BER_CLASS_CON, 1, BER_FLAGS_IMPLTAG, dissect_x509ce_CertificateGroupNumberRange },
+  {   2, &hf_x509ce_nameSubtree  , BER_CLASS_CON, 2, BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralName },
+  { 0, NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_CertificateGroup(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_choice(actx, tree, tvb, offset,
+                                 CertificateGroup_choice, hf_index, ett_x509ce_CertificateGroup,
+                                 NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t ToBeRevokedGroup_sequence[] = {
+  { &hf_x509ce_certificateIssuer, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_GeneralName },
+  { &hf_x509ce_reasonInfo   , BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_ReasonInfo },
+  { &hf_x509ce_revocationTime, BER_CLASS_UNI, BER_UNI_TAG_GeneralizedTime, BER_FLAGS_NOOWNTAG, dissect_x509ce_GeneralizedTime },
+  { &hf_x509ce_certificateGroup, BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_CertificateGroup },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_ToBeRevokedGroup(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   ToBeRevokedGroup_sequence, hf_index, ett_x509ce_ToBeRevokedGroup);
+
+  return offset;
+}
+
+
+static const ber_sequence_t ToBeRevokedSyntax_sequence_of[1] = {
+  { &hf_x509ce_ToBeRevokedSyntax_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509ce_ToBeRevokedGroup },
+};
+
+static int
+dissect_x509ce_ToBeRevokedSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      ToBeRevokedSyntax_sequence_of, hf_index, ett_x509ce_ToBeRevokedSyntax);
+
+  return offset;
+}
+
+
+static const value_string x509ce_RevokedCertificateGroup_vals[] = {
+  {   0, "serialNumberRange" },
+  {   1, "nameSubtree" },
+  { 0, NULL }
+};
+
+static const ber_choice_t RevokedCertificateGroup_choice[] = {
+  {   0, &hf_x509ce_serialNumberRange, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509ce_NumberRange },
+  {   1, &hf_x509ce_nameSubtree  , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG, dissect_x509ce_GeneralName },
+  { 0, NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_RevokedCertificateGroup(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_choice(actx, tree, tvb, offset,
+                                 RevokedCertificateGroup_choice, hf_index, ett_x509ce_RevokedCertificateGroup,
+                                 NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t RevokedGroup_sequence[] = {
+  { &hf_x509ce_certificateIssuer, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_GeneralName },
+  { &hf_x509ce_reasonInfo   , BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_ReasonInfo },
+  { &hf_x509ce_invalidityDate, BER_CLASS_CON, 2, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralizedTime },
+  { &hf_x509ce_revokedcertificateGroup, BER_CLASS_CON, 3, BER_FLAGS_IMPLTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_RevokedCertificateGroup },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_RevokedGroup(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   RevokedGroup_sequence, hf_index, ett_x509ce_RevokedGroup);
+
+  return offset;
+}
+
+
+static const ber_sequence_t RevokedGroupsSyntax_sequence_of[1] = {
+  { &hf_x509ce_RevokedGroupsSyntax_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509ce_RevokedGroup },
+};
+
+static int
+dissect_x509ce_RevokedGroupsSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      RevokedGroupsSyntax_sequence_of, hf_index, ett_x509ce_RevokedGroupsSyntax);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_ExpiredCertsOnCRL(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_GeneralizedTime(implicit_tag, actx, tree, tvb, offset, hf_index);
+
+  return offset;
+}
+
+
+static const ber_sequence_t AAIssuingDistPointSyntax_sequence[] = {
+  { &hf_x509ce_distributionPoint, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_DistributionPointName },
+  { &hf_x509ce_onlySomeReasons, BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_ReasonFlags },
+  { &hf_x509ce_indirectCRL  , BER_CLASS_CON, 2, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_BOOLEAN },
+  { &hf_x509ce_containsUserAttributeCerts, BER_CLASS_CON, 3, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_BOOLEAN },
+  { &hf_x509ce_containsAACerts, BER_CLASS_CON, 4, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_BOOLEAN },
+  { &hf_x509ce_containsSOAPublicKeyCerts, BER_CLASS_CON, 5, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_BOOLEAN },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_AAIssuingDistPointSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   AAIssuingDistPointSyntax_sequence, hf_index, ett_x509ce_AAIssuingDistPointSyntax);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CertificateExactAssertion_sequence[] = {
+  { &hf_x509ce_serialNumber , BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_NOOWNTAG, dissect_x509af_CertificateSerialNumber },
+  { &hf_x509ce_issuer       , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG, dissect_x509if_Name },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_CertificateExactAssertion(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   CertificateExactAssertion_sequence, hf_index, ett_x509ce_CertificateExactAssertion);
+
+  return offset;
+}
+
+
+static const value_string x509ce_T_builtinNameForm_vals[] = {
+  {   1, "rfc822Name" },
+  {   2, "dNSName" },
+  {   3, "x400Address" },
+  {   4, "directoryName" },
+  {   5, "ediPartyName" },
+  {   6, "uniformResourceIdentifier" },
+  {   7, "iPAddress" },
+  {   8, "registeredId" },
+  { 0, NULL }
+};
+
+
+static int
+dissect_x509ce_T_builtinNameForm(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                  NULL);
+
+  return offset;
+}
+
+
+const value_string x509ce_AltNameType_vals[] = {
+  {   0, "builtinNameForm" },
+  {   1, "otherNameForm" },
+  { 0, NULL }
+};
+
+static const ber_choice_t AltNameType_choice[] = {
+  {   0, &hf_x509ce_builtinNameForm, BER_CLASS_UNI, BER_UNI_TAG_ENUMERATED, BER_FLAGS_NOOWNTAG, dissect_x509ce_T_builtinNameForm },
+  {   1, &hf_x509ce_otherNameForm, BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_x509ce_OBJECT_IDENTIFIER },
+  { 0, NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_AltNameType(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_choice(actx, tree, tvb, offset,
+                                 AltNameType_choice, hf_index, ett_x509ce_AltNameType,
+                                 NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CertPolicySet_sequence_of[1] = {
+  { &hf_x509ce_CertPolicySet_item, BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_x509ce_CertPolicyId },
+};
+
+int
+dissect_x509ce_CertPolicySet(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      CertPolicySet_sequence_of, hf_index, ett_x509ce_CertPolicySet);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CertificateAssertion_sequence[] = {
+  { &hf_x509ce_serialNumber , BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509af_CertificateSerialNumber },
+  { &hf_x509ce_issuer       , BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509if_Name },
+  { &hf_x509ce_subjectKeyIdentifier, BER_CLASS_CON, 2, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_SubjectKeyIdentifier },
+  { &hf_x509ce_authorityKeyIdentifier, BER_CLASS_CON, 3, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_AuthorityKeyIdentifier },
+  { &hf_x509ce_certificateValid, BER_CLASS_CON, 4, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509af_Time },
+  { &hf_x509ce_privateKeyValid, BER_CLASS_CON, 5, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralizedTime },
+  { &hf_x509ce_subjectPublicKeyAlgID, BER_CLASS_CON, 6, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_OBJECT_IDENTIFIER },
+  { &hf_x509ce_keyUsage     , BER_CLASS_CON, 7, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_KeyUsage },
+  { &hf_x509ce_subjectAltNameType, BER_CLASS_CON, 8, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_AltNameType },
+  { &hf_x509ce_policy       , BER_CLASS_CON, 9, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_CertPolicySet },
+  { &hf_x509ce_pathToName   , BER_CLASS_CON, 10, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509if_Name },
+  { &hf_x509ce_subject      , BER_CLASS_CON, 11, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509if_Name },
+  { &hf_x509ce_nameConstraints, BER_CLASS_CON, 12, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_NameConstraintsSyntax },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_CertificateAssertion(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   CertificateAssertion_sequence, hf_index, ett_x509ce_CertificateAssertion);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CertificatePairExactAssertion_sequence[] = {
+  { &hf_x509ce_cpea_issuedToThisCAAssertion, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_CertificateExactAssertion },
+  { &hf_x509ce_cpea_issuedByThisCAAssertion, BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_CertificateExactAssertion },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_CertificatePairExactAssertion(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   CertificatePairExactAssertion_sequence, hf_index, ett_x509ce_CertificatePairExactAssertion);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CertificatePairAssertion_sequence[] = {
+  { &hf_x509ce_issuedToThisCAAssertion, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_CertificateAssertion },
+  { &hf_x509ce_issuedByThisCAAssertion, BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_CertificateAssertion },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_CertificatePairAssertion(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   CertificatePairAssertion_sequence, hf_index, ett_x509ce_CertificatePairAssertion);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CertificateListExactAssertion_sequence[] = {
+  { &hf_x509ce_issuer       , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG, dissect_x509if_Name },
+  { &hf_x509ce_thisUpdate   , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG, dissect_x509af_Time },
+  { &hf_x509ce_distributionPoint, BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_DistributionPointName },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_CertificateListExactAssertion(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   CertificateListExactAssertion_sequence, hf_index, ett_x509ce_CertificateListExactAssertion);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CertificateListAssertion_sequence[] = {
+  { &hf_x509ce_issuer       , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509if_Name },
+  { &hf_x509ce_minCRLNumber , BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_CRLNumber },
+  { &hf_x509ce_maxCRLNumber , BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_CRLNumber },
+  { &hf_x509ce_reasonFlags  , BER_CLASS_UNI, BER_UNI_TAG_BITSTRING, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509ce_ReasonFlags },
+  { &hf_x509ce_dateAndTime  , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509af_Time },
+  { &hf_x509ce_distributionPoint, BER_CLASS_CON, 2, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_DistributionPointName },
+  { &hf_x509ce_authorityKeyIdentifier, BER_CLASS_CON, 3, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_AuthorityKeyIdentifier },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_CertificateListAssertion(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   CertificateListAssertion_sequence, hf_index, ett_x509ce_CertificateListAssertion);
+
+  return offset;
+}
+
+
+static const ber_sequence_t PkiPathMatchSyntax_sequence[] = {
+  { &hf_x509ce_firstIssuer  , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG, dissect_x509if_Name },
+  { &hf_x509ce_lastSubject  , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG, dissect_x509if_Name },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_PkiPathMatchSyntax(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   PkiPathMatchSyntax_sequence, hf_index, ett_x509ce_PkiPathMatchSyntax);
+
+  return offset;
+}
+
+
+static const ber_sequence_t AltName_sequence[] = {
+  { &hf_x509ce_altnameType  , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_AltNameType },
+  { &hf_x509ce_altNameValue , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG|BER_FLAGS_NOTCHKTAG, dissect_x509ce_GeneralName },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_AltName(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   AltName_sequence, hf_index, ett_x509ce_AltName);
+
+  return offset;
+}
+
+
+static const ber_sequence_t EnhancedCertificateAssertion_sequence[] = {
+  { &hf_x509ce_serialNumber , BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509af_CertificateSerialNumber },
+  { &hf_x509ce_issuer       , BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509if_Name },
+  { &hf_x509ce_subjectKeyIdentifier, BER_CLASS_CON, 2, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_SubjectKeyIdentifier },
+  { &hf_x509ce_authorityKeyIdentifier, BER_CLASS_CON, 3, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_AuthorityKeyIdentifier },
+  { &hf_x509ce_certificateValid, BER_CLASS_CON, 4, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509af_Time },
+  { &hf_x509ce_privateKeyValid, BER_CLASS_CON, 5, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralizedTime },
+  { &hf_x509ce_subjectPublicKeyAlgID, BER_CLASS_CON, 6, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_OBJECT_IDENTIFIER },
+  { &hf_x509ce_keyUsage     , BER_CLASS_CON, 7, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_KeyUsage },
+  { &hf_x509ce_subjectAltName, BER_CLASS_CON, 8, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_AltName },
+  { &hf_x509ce_policy       , BER_CLASS_CON, 9, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_CertPolicySet },
+  { &hf_x509ce_enhancedPathToName, BER_CLASS_CON, 10, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralNames },
+  { &hf_x509ce_subject      , BER_CLASS_CON, 11, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509if_Name },
+  { &hf_x509ce_nameConstraints, BER_CLASS_CON, 12, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_NameConstraintsSyntax },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_EnhancedCertificateAssertion(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   EnhancedCertificateAssertion_sequence, hf_index, ett_x509ce_EnhancedCertificateAssertion);
+
+  return offset;
+}
+
+
+static const ber_sequence_t CertificateTemplate_sequence[] = {
+  { &hf_x509ce_templateID   , BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_x509ce_OBJECT_IDENTIFIER },
+  { &hf_x509ce_templateMajorVersion, BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_NOOWNTAG, dissect_x509ce_INTEGER },
+  { &hf_x509ce_templateMinorVersion, BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509ce_INTEGER },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_CertificateTemplate(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   CertificateTemplate_sequence, hf_index, ett_x509ce_CertificateTemplate);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_PrintableString(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_restricted_string(implicit_tag, BER_UNI_TAG_PrintableString,
+                                            actx, tree, tvb, offset, hf_index,
+                                            NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t NtdsObjectSid_U_sequence[] = {
+  { &hf_x509ce_type_id_01   , BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_x509ce_OBJECT_IDENTIFIER },
+  { &hf_x509ce_sid          , BER_CLASS_CON, 0, BER_FLAGS_IMPLTAG, dissect_x509ce_PrintableString },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_NtdsObjectSid_U(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   NtdsObjectSid_U_sequence, hf_index, ett_x509ce_NtdsObjectSid_U);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_NtdsObjectSid(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_tagged_type(implicit_tag, actx, tree, tvb, offset,
+                                      hf_index, BER_CLASS_CON, 0, TRUE, dissect_x509ce_NtdsObjectSid_U);
+
+  return offset;
+}
+
+
+static const ber_sequence_t NtdsCaSecurity_sequence[] = {
+  { &hf_x509ce_ntdsObjectSid, BER_CLASS_CON, 0, BER_FLAGS_NOOWNTAG, dissect_x509ce_NtdsObjectSid },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_NtdsCaSecurity(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   NtdsCaSecurity_sequence, hf_index, ett_x509ce_NtdsCaSecurity);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_GeneralString(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_restricted_string(implicit_tag, BER_UNI_TAG_GeneralString,
+                                            actx, tree, tvb, offset, hf_index,
+                                            NULL);
+
+  return offset;
+}
+
+
+static int * const EntrustInfoFlags_bits[] = {
+  &hf_x509ce_EntrustInfoFlags_keyUpdateAllowed,
+  &hf_x509ce_EntrustInfoFlags_newExtensions,
+  &hf_x509ce_EntrustInfoFlags_pKIXCertificate,
+  &hf_x509ce_EntrustInfoFlags_enterpriseCategory,
+  &hf_x509ce_EntrustInfoFlags_webCategory,
+  &hf_x509ce_EntrustInfoFlags_sETCategory,
+  NULL
+};
+
+static int
+dissect_x509ce_EntrustInfoFlags(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_bitstring(implicit_tag, actx, tree, tvb, offset,
+                                    EntrustInfoFlags_bits, 6, hf_index, ett_x509ce_EntrustInfoFlags,
+                                    NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t EntrustVersionInfo_sequence[] = {
+  { &hf_x509ce_entrustVers  , BER_CLASS_UNI, BER_UNI_TAG_GeneralString, BER_FLAGS_NOOWNTAG, dissect_x509ce_GeneralString },
+  { &hf_x509ce_entrustVersInfoFlags, BER_CLASS_UNI, BER_UNI_TAG_BITSTRING, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509ce_EntrustInfoFlags },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_x509ce_EntrustVersionInfo(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   EntrustVersionInfo_sequence, hf_index, ett_x509ce_EntrustVersionInfo);
+
+  return offset;
+}
+
+
+
+static int
+dissect_x509ce_NFType(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_restricted_string(implicit_tag, BER_UNI_TAG_IA5String,
+                                            actx, tree, tvb, offset, hf_index,
+                                            NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t NFTypes_sequence_of[1] = {
+  { &hf_x509ce_NFTypes_item , BER_CLASS_UNI, BER_UNI_TAG_IA5String, BER_FLAGS_NOOWNTAG, dissect_x509ce_NFType },
+};
+
+static int
+dissect_x509ce_NFTypes(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      NFTypes_sequence_of, hf_index, ett_x509ce_NFTypes);
+
+  return offset;
+}
+
+
+static const ber_sequence_t ScramblerCapabilities_sequence[] = {
+  { &hf_x509ce_capability   , BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_NOOWNTAG, dissect_x509ce_INTEGER_0_MAX },
+  { &hf_x509ce_version      , BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_NOOWNTAG, dissect_x509ce_INTEGER_0_MAX },
+  { NULL, 0, 0, 0, NULL }
+};
+
+int
+dissect_x509ce_ScramblerCapabilities(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   ScramblerCapabilities_sequence, hf_index, ett_x509ce_ScramblerCapabilities);
+
+  return offset;
+}
+
+
+
+int
+dissect_x509ce_CiplusInfo(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_bitstring(implicit_tag, actx, tree, tvb, offset,
+                                    NULL, 0, hf_index, -1,
+                                    NULL);
+
+  return offset;
+}
+
+
+
+int
+dissect_x509ce_CicamBrandId(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                                NULL);
+
+  return offset;
+}
+
+
+
+int
+dissect_x509ce_SecurityLevel(bool implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer64(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                                NULL);
+
+  return offset;
+}
+
+/*--- PDUs ---*/
+
+static int dissect_AuthorityKeyIdentifier_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_AuthorityKeyIdentifier(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_AuthorityKeyIdentifier_PDU);
+  return offset;
+}
+static int dissect_SubjectKeyIdentifier_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_SubjectKeyIdentifier(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_SubjectKeyIdentifier_PDU);
+  return offset;
+}
+static int dissect_KeyUsage_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_KeyUsage(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_KeyUsage_PDU);
+  return offset;
+}
+static int dissect_KeyPurposeIDs_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_KeyPurposeIDs(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_KeyPurposeIDs_PDU);
+  return offset;
+}
+static int dissect_PrivateKeyUsagePeriod_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_PrivateKeyUsagePeriod(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_PrivateKeyUsagePeriod_PDU);
+  return offset;
+}
+static int dissect_CertificatePoliciesSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CertificatePoliciesSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CertificatePoliciesSyntax_PDU);
+  return offset;
+}
+static int dissect_PolicyMappingsSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_PolicyMappingsSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_PolicyMappingsSyntax_PDU);
+  return offset;
+}
+static int dissect_GeneralNames_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_GeneralNames(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_GeneralNames_PDU);
+  return offset;
+}
+static int dissect_AttributesSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_AttributesSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_AttributesSyntax_PDU);
+  return offset;
+}
+static int dissect_BasicConstraintsSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_BasicConstraintsSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_BasicConstraintsSyntax_PDU);
+  return offset;
+}
+static int dissect_NameConstraintsSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_NameConstraintsSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_NameConstraintsSyntax_PDU);
+  return offset;
+}
+static int dissect_PolicyConstraintsSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_PolicyConstraintsSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_PolicyConstraintsSyntax_PDU);
+  return offset;
+}
+static int dissect_SkipCerts_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_SkipCerts(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_SkipCerts_PDU);
+  return offset;
+}
+static int dissect_CRLNumber_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CRLNumber(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CRLNumber_PDU);
+  return offset;
+}
+static int dissect_CRLReason_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CRLReason(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CRLReason_PDU);
+  return offset;
+}
+static int dissect_HoldInstruction_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_HoldInstruction(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_HoldInstruction_PDU);
+  return offset;
+}
+static int dissect_CRLScopeSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CRLScopeSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CRLScopeSyntax_PDU);
+  return offset;
+}
+static int dissect_StatusReferrals_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_StatusReferrals(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_StatusReferrals_PDU);
+  return offset;
+}
+static int dissect_CRLStreamIdentifier_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CRLStreamIdentifier(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CRLStreamIdentifier_PDU);
+  return offset;
+}
+static int dissect_OrderedListSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_OrderedListSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_OrderedListSyntax_PDU);
+  return offset;
+}
+static int dissect_DeltaInformation_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_DeltaInformation(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_DeltaInformation_PDU);
+  return offset;
+}
+static int dissect_CRLDistPointsSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CRLDistPointsSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CRLDistPointsSyntax_PDU);
+  return offset;
+}
+static int dissect_IssuingDistPointSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_IssuingDistPointSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_IssuingDistPointSyntax_PDU);
+  return offset;
+}
+static int dissect_BaseCRLNumber_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_BaseCRLNumber(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_BaseCRLNumber_PDU);
+  return offset;
+}
+static int dissect_ToBeRevokedSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_ToBeRevokedSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_ToBeRevokedSyntax_PDU);
+  return offset;
+}
+static int dissect_RevokedGroupsSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_RevokedGroupsSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_RevokedGroupsSyntax_PDU);
+  return offset;
+}
+static int dissect_ExpiredCertsOnCRL_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_ExpiredCertsOnCRL(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_ExpiredCertsOnCRL_PDU);
+  return offset;
+}
+static int dissect_AAIssuingDistPointSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_AAIssuingDistPointSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_AAIssuingDistPointSyntax_PDU);
+  return offset;
+}
+static int dissect_CertificateAssertion_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CertificateAssertion(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CertificateAssertion_PDU);
+  return offset;
+}
+static int dissect_CertificatePairExactAssertion_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CertificatePairExactAssertion(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CertificatePairExactAssertion_PDU);
+  return offset;
+}
+static int dissect_CertificatePairAssertion_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CertificatePairAssertion(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CertificatePairAssertion_PDU);
+  return offset;
+}
+static int dissect_CertificateListExactAssertion_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CertificateListExactAssertion(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CertificateListExactAssertion_PDU);
+  return offset;
+}
+static int dissect_CertificateListAssertion_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CertificateListAssertion(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CertificateListAssertion_PDU);
+  return offset;
+}
+static int dissect_PkiPathMatchSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_PkiPathMatchSyntax(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_PkiPathMatchSyntax_PDU);
+  return offset;
+}
+static int dissect_EnhancedCertificateAssertion_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_EnhancedCertificateAssertion(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_EnhancedCertificateAssertion_PDU);
+  return offset;
+}
+static int dissect_CertificateTemplate_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CertificateTemplate(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CertificateTemplate_PDU);
+  return offset;
+}
+static int dissect_NtdsCaSecurity_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_NtdsCaSecurity(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_NtdsCaSecurity_PDU);
+  return offset;
+}
+static int dissect_NtdsObjectSid_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_NtdsObjectSid(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_NtdsObjectSid_PDU);
+  return offset;
+}
+static int dissect_EntrustVersionInfo_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_EntrustVersionInfo(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_EntrustVersionInfo_PDU);
+  return offset;
+}
+static int dissect_NFTypes_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_NFTypes(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_NFTypes_PDU);
+  return offset;
+}
+static int dissect_ScramblerCapabilities_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_ScramblerCapabilities(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_ScramblerCapabilities_PDU);
+  return offset;
+}
+static int dissect_CiplusInfo_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CiplusInfo(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CiplusInfo_PDU);
+  return offset;
+}
+static int dissect_CicamBrandId_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_CicamBrandId(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_CicamBrandId_PDU);
+  return offset;
+}
+static int dissect_SecurityLevel_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_, void *data _U_) {
+  int offset = 0;
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  offset = dissect_x509ce_SecurityLevel(FALSE, tvb, offset, &asn1_ctx, tree, hf_x509ce_SecurityLevel_PDU);
+  return offset;
+}
+
+
+static const val64_string ciplus_scr_cap[] = {
+    { 0, "DES" },
+    { 1, "DES and AES" },
+    { 0, NULL }
+};
+
+static const val64_string ciplus_security_level[] = {
+    { 0, "Standard Security Level" },
+    { 1, "ECP Security Level" },
+    { 0, NULL }
+};
+
+/* CI+ (www.ci-plus.com) defines some X.509 certificate extensions
+   that use OIDs which are not officially assigned
+   dissection of these extensions can be enabled temporarily using the
+   functions below */
+void
+x509ce_enable_ciplus(void)
+{
+  dissector_handle_t dh25, dh26, dh27, dh50;
+
+  dh25 = create_dissector_handle(dissect_ScramblerCapabilities_PDU, proto_x509ce);
+  dissector_change_string("ber.oid", "1.3.6.1.5.5.7.1.25", dh25);
+  dh26 = create_dissector_handle(dissect_CiplusInfo_PDU, proto_x509ce);
+  dissector_change_string("ber.oid", "1.3.6.1.5.5.7.1.26", dh26);
+  dh27 = create_dissector_handle(dissect_CicamBrandId_PDU, proto_x509ce);
+  dissector_change_string("ber.oid", "1.3.6.1.5.5.7.1.27", dh27);
+  dh50 = create_dissector_handle(dissect_SecurityLevel_PDU, proto_x509ce);
+  dissector_change_string("ber.oid", "1.3.6.1.5.5.7.1.50", dh50);
+}
+
+void
+x509ce_disable_ciplus(void)
+{
+  dissector_reset_string("ber.oid", "1.3.6.1.5.5.7.1.25");
+  dissector_reset_string("ber.oid", "1.3.6.1.5.5.7.1.26");
+  dissector_reset_string("ber.oid", "1.3.6.1.5.5.7.1.27");
+  dissector_reset_string("ber.oid", "1.3.6.1.5.5.7.1.50");
+}
+
+
+static int
+dissect_x509ce_invalidityDate_callback(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
+{
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+
+  return dissect_x509ce_GeneralizedTime(FALSE, tvb, 0, &asn1_ctx, tree, hf_x509ce_id_ce_invalidityDate);
+}
+
+static int
+dissect_x509ce_baseUpdateTime_callback(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
+{
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  return dissect_x509ce_GeneralizedTime(FALSE, tvb, 0, &asn1_ctx, tree, hf_x509ce_id_ce_baseUpdateTime);
+}
+
+/*--- proto_register_x509ce ----------------------------------------------*/
+void proto_register_x509ce(void) {
+
+  /* List of fields */
+  static hf_register_info hf[] = {
+    { &hf_x509ce_id_ce_baseUpdateTime,
+      { "baseUpdateTime", "x509ce.id_ce_baseUpdateTime",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_id_ce_invalidityDate,
+      { "invalidityDate", "x509ce.id_ce_invalidityDate",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_object_identifier_id,
+      { "Id", "x509ce.id", FT_OID, BASE_NONE, NULL, 0,
+        "Object identifier Id", HFILL }},
+    { &hf_x509ce_IPAddress_ipv4,
+      { "iPAddress", "x509ce.IPAddress.ipv4", FT_IPv4, BASE_NONE, NULL, 0,
+        "IPv4 address", HFILL }},
+    { &hf_x509ce_IPAddress_ipv6,
+      { "iPAddress", "x509ce.IPAddress.ipv6", FT_IPv6, BASE_NONE, NULL, 0,
+        "IPv6 address", HFILL }},
+
+    { &hf_x509ce_AuthorityKeyIdentifier_PDU,
+      { "AuthorityKeyIdentifier", "x509ce.AuthorityKeyIdentifier_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_SubjectKeyIdentifier_PDU,
+      { "SubjectKeyIdentifier", "x509ce.SubjectKeyIdentifier",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_KeyUsage_PDU,
+      { "KeyUsage", "x509ce.KeyUsage",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_KeyPurposeIDs_PDU,
+      { "KeyPurposeIDs", "x509ce.KeyPurposeIDs",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_PrivateKeyUsagePeriod_PDU,
+      { "PrivateKeyUsagePeriod", "x509ce.PrivateKeyUsagePeriod_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CertificatePoliciesSyntax_PDU,
+      { "CertificatePoliciesSyntax", "x509ce.CertificatePoliciesSyntax",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_PolicyMappingsSyntax_PDU,
+      { "PolicyMappingsSyntax", "x509ce.PolicyMappingsSyntax",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_GeneralNames_PDU,
+      { "GeneralNames", "x509ce.GeneralNames",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_AttributesSyntax_PDU,
+      { "AttributesSyntax", "x509ce.AttributesSyntax",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_BasicConstraintsSyntax_PDU,
+      { "BasicConstraintsSyntax", "x509ce.BasicConstraintsSyntax_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_NameConstraintsSyntax_PDU,
+      { "NameConstraintsSyntax", "x509ce.NameConstraintsSyntax_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_PolicyConstraintsSyntax_PDU,
+      { "PolicyConstraintsSyntax", "x509ce.PolicyConstraintsSyntax_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_SkipCerts_PDU,
+      { "SkipCerts", "x509ce.SkipCerts",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CRLNumber_PDU,
+      { "CRLNumber", "x509ce.CRLNumber",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CRLReason_PDU,
+      { "CRLReason", "x509ce.CRLReason",
+        FT_UINT32, BASE_DEC, VALS(x509ce_CRLReason_vals), 0,
+        NULL, HFILL }},
+    { &hf_x509ce_HoldInstruction_PDU,
+      { "HoldInstruction", "x509ce.HoldInstruction",
+        FT_OID, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CRLScopeSyntax_PDU,
+      { "CRLScopeSyntax", "x509ce.CRLScopeSyntax",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_StatusReferrals_PDU,
+      { "StatusReferrals", "x509ce.StatusReferrals",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CRLStreamIdentifier_PDU,
+      { "CRLStreamIdentifier", "x509ce.CRLStreamIdentifier",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_OrderedListSyntax_PDU,
+      { "OrderedListSyntax", "x509ce.OrderedListSyntax",
+        FT_UINT32, BASE_DEC, VALS(x509ce_OrderedListSyntax_vals), 0,
+        NULL, HFILL }},
+    { &hf_x509ce_DeltaInformation_PDU,
+      { "DeltaInformation", "x509ce.DeltaInformation_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CRLDistPointsSyntax_PDU,
+      { "CRLDistPointsSyntax", "x509ce.CRLDistPointsSyntax",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_IssuingDistPointSyntax_PDU,
+      { "IssuingDistPointSyntax", "x509ce.IssuingDistPointSyntax_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_BaseCRLNumber_PDU,
+      { "BaseCRLNumber", "x509ce.BaseCRLNumber",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_ToBeRevokedSyntax_PDU,
+      { "ToBeRevokedSyntax", "x509ce.ToBeRevokedSyntax",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_RevokedGroupsSyntax_PDU,
+      { "RevokedGroupsSyntax", "x509ce.RevokedGroupsSyntax",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_ExpiredCertsOnCRL_PDU,
+      { "ExpiredCertsOnCRL", "x509ce.ExpiredCertsOnCRL",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_AAIssuingDistPointSyntax_PDU,
+      { "AAIssuingDistPointSyntax", "x509ce.AAIssuingDistPointSyntax_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CertificateAssertion_PDU,
+      { "CertificateAssertion", "x509ce.CertificateAssertion_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CertificatePairExactAssertion_PDU,
+      { "CertificatePairExactAssertion", "x509ce.CertificatePairExactAssertion_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CertificatePairAssertion_PDU,
+      { "CertificatePairAssertion", "x509ce.CertificatePairAssertion_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CertificateListExactAssertion_PDU,
+      { "CertificateListExactAssertion", "x509ce.CertificateListExactAssertion_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CertificateListAssertion_PDU,
+      { "CertificateListAssertion", "x509ce.CertificateListAssertion_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_PkiPathMatchSyntax_PDU,
+      { "PkiPathMatchSyntax", "x509ce.PkiPathMatchSyntax_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_EnhancedCertificateAssertion_PDU,
+      { "EnhancedCertificateAssertion", "x509ce.EnhancedCertificateAssertion_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CertificateTemplate_PDU,
+      { "CertificateTemplate", "x509ce.CertificateTemplate_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_NtdsCaSecurity_PDU,
+      { "NtdsCaSecurity", "x509ce.NtdsCaSecurity_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_NtdsObjectSid_PDU,
+      { "NtdsObjectSid", "x509ce.NtdsObjectSid_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_EntrustVersionInfo_PDU,
+      { "EntrustVersionInfo", "x509ce.EntrustVersionInfo_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_NFTypes_PDU,
+      { "NFTypes", "x509ce.NFTypes",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_ScramblerCapabilities_PDU,
+      { "ScramblerCapabilities", "x509ce.ScramblerCapabilities_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CiplusInfo_PDU,
+      { "CiplusInfo", "x509ce.CiplusInfo",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_CicamBrandId_PDU,
+      { "CicamBrandId", "x509ce.CicamBrandId",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_SecurityLevel_PDU,
+      { "SecurityLevel", "x509ce.SecurityLevel",
+        FT_UINT64, BASE_DEC|BASE_VAL64_STRING, VALS64(ciplus_security_level), 0,
+        NULL, HFILL }},
+    { &hf_x509ce_keyIdentifier,
+      { "keyIdentifier", "x509ce.keyIdentifier",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_authorityCertIssuer,
+      { "authorityCertIssuer", "x509ce.authorityCertIssuer",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "GeneralNames", HFILL }},
+    { &hf_x509ce_authorityCertSerialNumber,
+      { "authorityCertSerialNumber", "x509ce.authorityCertSerialNumber",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        "CertificateSerialNumber", HFILL }},
+    { &hf_x509ce_KeyPurposeIDs_item,
+      { "KeyPurposeId", "x509ce.KeyPurposeId",
+        FT_OID, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_notBefore,
+      { "notBefore", "x509ce.notBefore",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        "GeneralizedTime", HFILL }},
+    { &hf_x509ce_notAfter,
+      { "notAfter", "x509ce.notAfter",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        "GeneralizedTime", HFILL }},
+    { &hf_x509ce_CertificatePoliciesSyntax_item,
+      { "PolicyInformation", "x509ce.PolicyInformation_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_policyIdentifier,
+      { "policyIdentifier", "x509ce.policyIdentifier",
+        FT_OID, BASE_NONE, NULL, 0,
+        "CertPolicyId", HFILL }},
+    { &hf_x509ce_policyQualifiers,
+      { "policyQualifiers", "x509ce.policyQualifiers",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "SEQUENCE_SIZE_1_MAX_OF_PolicyQualifierInfo", HFILL }},
+    { &hf_x509ce_policyQualifiers_item,
+      { "PolicyQualifierInfo", "x509ce.PolicyQualifierInfo_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_policyQualifierId,
+      { "policyQualifierId", "x509ce.policyQualifierId",
+        FT_OID, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_qualifier,
+      { "qualifier", "x509ce.qualifier_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_PolicyMappingsSyntax_item,
+      { "PolicyMappingsSyntax item", "x509ce.PolicyMappingsSyntax_item_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_issuerDomainPolicy,
+      { "issuerDomainPolicy", "x509ce.issuerDomainPolicy",
+        FT_OID, BASE_NONE, NULL, 0,
+        "CertPolicyId", HFILL }},
+    { &hf_x509ce_subjectDomainPolicy,
+      { "subjectDomainPolicy", "x509ce.subjectDomainPolicy",
+        FT_OID, BASE_NONE, NULL, 0,
+        "CertPolicyId", HFILL }},
+    { &hf_x509ce_GeneralNames_item,
+      { "GeneralName", "x509ce.GeneralName",
+        FT_UINT32, BASE_DEC, VALS(x509ce_GeneralName_vals), 0,
+        NULL, HFILL }},
+    { &hf_x509ce_otherName,
+      { "otherName", "x509ce.otherName_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_rfc822Name,
+      { "rfc822Name", "x509ce.rfc822Name",
+        FT_STRING, BASE_NONE, NULL, 0,
+        "IA5String", HFILL }},
+    { &hf_x509ce_dNSName,
+      { "dNSName", "x509ce.dNSName",
+        FT_STRING, BASE_NONE, NULL, 0,
+        "IA5String", HFILL }},
+    { &hf_x509ce_x400Address,
+      { "x400Address", "x509ce.x400Address_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "ORAddress", HFILL }},
+    { &hf_x509ce_directoryName,
+      { "directoryName", "x509ce.directoryName",
+        FT_UINT32, BASE_DEC, VALS(x509if_Name_vals), 0,
+        "Name", HFILL }},
+    { &hf_x509ce_ediPartyName,
+      { "ediPartyName", "x509ce.ediPartyName_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_uniformResourceIdentifier,
+      { "uniformResourceIdentifier", "x509ce.uniformResourceIdentifier",
+        FT_STRING, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_iPAddress,
+      { "iPAddress", "x509ce.iPAddress",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_registeredID,
+      { "registeredID", "x509ce.registeredID",
+        FT_OID, BASE_NONE, NULL, 0,
+        "OBJECT_IDENTIFIER", HFILL }},
+    { &hf_x509ce_type_id,
+      { "type-id", "x509ce.type_id",
+        FT_OID, BASE_NONE, NULL, 0,
+        "OtherNameType", HFILL }},
+    { &hf_x509ce_value,
+      { "value", "x509ce.value_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "OtherNameValue", HFILL }},
+    { &hf_x509ce_nameAssigner,
+      { "nameAssigner", "x509ce.nameAssigner",
+        FT_UINT32, BASE_DEC, VALS(x509sat_DirectoryString_vals), 0,
+        "DirectoryString", HFILL }},
+    { &hf_x509ce_partyName,
+      { "partyName", "x509ce.partyName",
+        FT_UINT32, BASE_DEC, VALS(x509sat_DirectoryString_vals), 0,
+        "DirectoryString", HFILL }},
+    { &hf_x509ce_AttributesSyntax_item,
+      { "Attribute", "x509ce.Attribute_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_cA,
+      { "cA", "x509ce.cA",
+        FT_BOOLEAN, BASE_NONE, NULL, 0,
+        "BOOLEAN", HFILL }},
+    { &hf_x509ce_pathLenConstraint,
+      { "pathLenConstraint", "x509ce.pathLenConstraint",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        "INTEGER_0_MAX", HFILL }},
+    { &hf_x509ce_permittedSubtrees,
+      { "permittedSubtrees", "x509ce.permittedSubtrees",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "GeneralSubtrees", HFILL }},
+    { &hf_x509ce_excludedSubtrees,
+      { "excludedSubtrees", "x509ce.excludedSubtrees",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "GeneralSubtrees", HFILL }},
+    { &hf_x509ce_GeneralSubtrees_item,
+      { "GeneralSubtree", "x509ce.GeneralSubtree_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_base,
+      { "base", "x509ce.base",
+        FT_UINT32, BASE_DEC, VALS(x509ce_GeneralName_vals), 0,
+        "GeneralName", HFILL }},
+    { &hf_x509ce_minimum,
+      { "minimum", "x509ce.minimum",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        "BaseDistance", HFILL }},
+    { &hf_x509ce_maximum,
+      { "maximum", "x509ce.maximum",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        "BaseDistance", HFILL }},
+    { &hf_x509ce_requireExplicitPolicy,
+      { "requireExplicitPolicy", "x509ce.requireExplicitPolicy",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        "SkipCerts", HFILL }},
+    { &hf_x509ce_inhibitPolicyMapping,
+      { "inhibitPolicyMapping", "x509ce.inhibitPolicyMapping",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        "SkipCerts", HFILL }},
+    { &hf_x509ce_CRLScopeSyntax_item,
+      { "PerAuthorityScope", "x509ce.PerAuthorityScope_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_authorityName,
+      { "authorityName", "x509ce.authorityName",
+        FT_UINT32, BASE_DEC, VALS(x509ce_GeneralName_vals), 0,
+        "GeneralName", HFILL }},
+    { &hf_x509ce_distributionPoint,
+      { "distributionPoint", "x509ce.distributionPoint",
+        FT_UINT32, BASE_DEC, VALS(x509ce_DistributionPointName_vals), 0,
+        "DistributionPointName", HFILL }},
+    { &hf_x509ce_onlyContains,
+      { "onlyContains", "x509ce.onlyContains",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        "OnlyCertificateTypes", HFILL }},
+    { &hf_x509ce_onlySomeReasons,
+      { "onlySomeReasons", "x509ce.onlySomeReasons",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        "ReasonFlags", HFILL }},
+    { &hf_x509ce_serialNumberRange,
+      { "serialNumberRange", "x509ce.serialNumberRange_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "NumberRange", HFILL }},
+    { &hf_x509ce_subjectKeyIdRange,
+      { "subjectKeyIdRange", "x509ce.subjectKeyIdRange_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "NumberRange", HFILL }},
+    { &hf_x509ce_nameSubtrees,
+      { "nameSubtrees", "x509ce.nameSubtrees",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "GeneralNames", HFILL }},
+    { &hf_x509ce_baseRevocationInfo,
+      { "baseRevocationInfo", "x509ce.baseRevocationInfo_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_startingNumber,
+      { "startingNumber", "x509ce.startingNumber",
+        FT_INT32, BASE_DEC, NULL, 0,
+        "INTEGER", HFILL }},
+    { &hf_x509ce_endingNumber,
+      { "endingNumber", "x509ce.endingNumber",
+        FT_INT32, BASE_DEC, NULL, 0,
+        "INTEGER", HFILL }},
+    { &hf_x509ce_modulus,
+      { "modulus", "x509ce.modulus",
+        FT_INT32, BASE_DEC, NULL, 0,
+        "INTEGER", HFILL }},
+    { &hf_x509ce_cRLStreamIdentifier,
+      { "cRLStreamIdentifier", "x509ce.cRLStreamIdentifier",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_cRLNumber,
+      { "cRLNumber", "x509ce.cRLNumber",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_baseThisUpdate,
+      { "baseThisUpdate", "x509ce.baseThisUpdate",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        "GeneralizedTime", HFILL }},
+    { &hf_x509ce_StatusReferrals_item,
+      { "StatusReferral", "x509ce.StatusReferral",
+        FT_UINT32, BASE_DEC, VALS(x509ce_StatusReferral_vals), 0,
+        NULL, HFILL }},
+    { &hf_x509ce_cRLReferral,
+      { "cRLReferral", "x509ce.cRLReferral_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_crlr_issuer,
+      { "issuer", "x509ce.issuer",
+        FT_UINT32, BASE_DEC, VALS(x509ce_GeneralName_vals), 0,
+        "GeneralName", HFILL }},
+    { &hf_x509ce_location,
+      { "location", "x509ce.location",
+        FT_UINT32, BASE_DEC, VALS(x509ce_GeneralName_vals), 0,
+        "GeneralName", HFILL }},
+    { &hf_x509ce_deltaRefInfo,
+      { "deltaRefInfo", "x509ce.deltaRefInfo_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_cRLScope,
+      { "cRLScope", "x509ce.cRLScope",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "CRLScopeSyntax", HFILL }},
+    { &hf_x509ce_lastUpdate,
+      { "lastUpdate", "x509ce.lastUpdate",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        "GeneralizedTime", HFILL }},
+    { &hf_x509ce_lastChangedCRL,
+      { "lastChangedCRL", "x509ce.lastChangedCRL",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        "GeneralizedTime", HFILL }},
+    { &hf_x509ce_deltaLocation,
+      { "deltaLocation", "x509ce.deltaLocation",
+        FT_UINT32, BASE_DEC, VALS(x509ce_GeneralName_vals), 0,
+        "GeneralName", HFILL }},
+    { &hf_x509ce_lastDelta,
+      { "lastDelta", "x509ce.lastDelta",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        "GeneralizedTime", HFILL }},
+    { &hf_x509ce_nextDelta,
+      { "nextDelta", "x509ce.nextDelta",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        "GeneralizedTime", HFILL }},
+    { &hf_x509ce_CRLDistPointsSyntax_item,
+      { "DistributionPoint", "x509ce.DistributionPoint_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_reasons,
+      { "reasons", "x509ce.reasons",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        "ReasonFlags", HFILL }},
+    { &hf_x509ce_cRLIssuer,
+      { "cRLIssuer", "x509ce.cRLIssuer",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "GeneralNames", HFILL }},
+    { &hf_x509ce_fullName,
+      { "fullName", "x509ce.fullName",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "GeneralNames", HFILL }},
+    { &hf_x509ce_nameRelativeToCRLIssuer,
+      { "nameRelativeToCRLIssuer", "x509ce.nameRelativeToCRLIssuer",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "RelativeDistinguishedName", HFILL }},
+    { &hf_x509ce_onlyContainsUserPublicKeyCerts,
+      { "onlyContainsUserPublicKeyCerts", "x509ce.onlyContainsUserPublicKeyCerts",
+        FT_BOOLEAN, BASE_NONE, NULL, 0,
+        "BOOLEAN", HFILL }},
+    { &hf_x509ce_onlyContainsCACerts,
+      { "onlyContainsCACerts", "x509ce.onlyContainsCACerts",
+        FT_BOOLEAN, BASE_NONE, NULL, 0,
+        "BOOLEAN", HFILL }},
+    { &hf_x509ce_indirectCRL,
+      { "indirectCRL", "x509ce.indirectCRL",
+        FT_BOOLEAN, BASE_NONE, NULL, 0,
+        "BOOLEAN", HFILL }},
+    { &hf_x509ce_ToBeRevokedSyntax_item,
+      { "ToBeRevokedGroup", "x509ce.ToBeRevokedGroup_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_certificateIssuer,
+      { "certificateIssuer", "x509ce.certificateIssuer",
+        FT_UINT32, BASE_DEC, VALS(x509ce_GeneralName_vals), 0,
+        "GeneralName", HFILL }},
+    { &hf_x509ce_reasonInfo,
+      { "reasonInfo", "x509ce.reasonInfo_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_revocationTime,
+      { "revocationTime", "x509ce.revocationTime",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        "GeneralizedTime", HFILL }},
+    { &hf_x509ce_certificateGroup,
+      { "certificateGroup", "x509ce.certificateGroup",
+        FT_UINT32, BASE_DEC, VALS(x509ce_CertificateGroup_vals), 0,
+        NULL, HFILL }},
+    { &hf_x509ce_reasonCode,
+      { "reasonCode", "x509ce.reasonCode",
+        FT_UINT32, BASE_DEC, VALS(x509ce_CRLReason_vals), 0,
+        "CRLReason", HFILL }},
+    { &hf_x509ce_holdInstructionCode,
+      { "holdInstructionCode", "x509ce.holdInstructionCode",
+        FT_OID, BASE_NONE, NULL, 0,
+        "HoldInstruction", HFILL }},
+    { &hf_x509ce_serialNumbers,
+      { "serialNumbers", "x509ce.serialNumbers",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "CertificateSerialNumbers", HFILL }},
+    { &hf_x509ce_certificateGroupNumberRange,
+      { "serialNumberRange", "x509ce.serialNumberRange_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "CertificateGroupNumberRange", HFILL }},
+    { &hf_x509ce_nameSubtree,
+      { "nameSubtree", "x509ce.nameSubtree",
+        FT_UINT32, BASE_DEC, VALS(x509ce_GeneralName_vals), 0,
+        "GeneralName", HFILL }},
+    { &hf_x509ce_CertificateSerialNumbers_item,
+      { "CertificateSerialNumber", "x509ce.CertificateSerialNumber",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_RevokedGroupsSyntax_item,
+      { "RevokedGroup", "x509ce.RevokedGroup_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_invalidityDate,
+      { "invalidityDate", "x509ce.invalidityDate",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        "GeneralizedTime", HFILL }},
+    { &hf_x509ce_revokedcertificateGroup,
+      { "revokedcertificateGroup", "x509ce.revokedcertificateGroup",
+        FT_UINT32, BASE_DEC, VALS(x509ce_RevokedCertificateGroup_vals), 0,
+        NULL, HFILL }},
+    { &hf_x509ce_containsUserAttributeCerts,
+      { "containsUserAttributeCerts", "x509ce.containsUserAttributeCerts",
+        FT_BOOLEAN, BASE_NONE, NULL, 0,
+        "BOOLEAN", HFILL }},
+    { &hf_x509ce_containsAACerts,
+      { "containsAACerts", "x509ce.containsAACerts",
+        FT_BOOLEAN, BASE_NONE, NULL, 0,
+        "BOOLEAN", HFILL }},
+    { &hf_x509ce_containsSOAPublicKeyCerts,
+      { "containsSOAPublicKeyCerts", "x509ce.containsSOAPublicKeyCerts",
+        FT_BOOLEAN, BASE_NONE, NULL, 0,
+        "BOOLEAN", HFILL }},
+    { &hf_x509ce_serialNumber,
+      { "serialNumber", "x509ce.serialNumber",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        "CertificateSerialNumber", HFILL }},
+    { &hf_x509ce_issuer,
+      { "issuer", "x509ce.issuer",
+        FT_UINT32, BASE_DEC, VALS(x509if_Name_vals), 0,
+        "Name", HFILL }},
+    { &hf_x509ce_subjectKeyIdentifier,
+      { "subjectKeyIdentifier", "x509ce.subjectKeyIdentifier",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_authorityKeyIdentifier,
+      { "authorityKeyIdentifier", "x509ce.authorityKeyIdentifier_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_certificateValid,
+      { "certificateValid", "x509ce.certificateValid",
+        FT_UINT32, BASE_DEC, VALS(x509af_Time_vals), 0,
+        "Time", HFILL }},
+    { &hf_x509ce_privateKeyValid,
+      { "privateKeyValid", "x509ce.privateKeyValid",
+        FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
+        "GeneralizedTime", HFILL }},
+    { &hf_x509ce_subjectPublicKeyAlgID,
+      { "subjectPublicKeyAlgID", "x509ce.subjectPublicKeyAlgID",
+        FT_OID, BASE_NONE, NULL, 0,
+        "OBJECT_IDENTIFIER", HFILL }},
+    { &hf_x509ce_keyUsage,
+      { "keyUsage", "x509ce.keyUsage",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_subjectAltNameType,
+      { "subjectAltName", "x509ce.subjectAltName",
+        FT_UINT32, BASE_DEC, VALS(x509ce_AltNameType_vals), 0,
+        "AltNameType", HFILL }},
+    { &hf_x509ce_policy,
+      { "policy", "x509ce.policy",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "CertPolicySet", HFILL }},
+    { &hf_x509ce_pathToName,
+      { "pathToName", "x509ce.pathToName",
+        FT_UINT32, BASE_DEC, VALS(x509if_Name_vals), 0,
+        "Name", HFILL }},
+    { &hf_x509ce_subject,
+      { "subject", "x509ce.subject",
+        FT_UINT32, BASE_DEC, VALS(x509if_Name_vals), 0,
+        "Name", HFILL }},
+    { &hf_x509ce_nameConstraints,
+      { "nameConstraints", "x509ce.nameConstraints_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "NameConstraintsSyntax", HFILL }},
+    { &hf_x509ce_builtinNameForm,
+      { "builtinNameForm", "x509ce.builtinNameForm",
+        FT_UINT32, BASE_DEC, VALS(x509ce_T_builtinNameForm_vals), 0,
+        NULL, HFILL }},
+    { &hf_x509ce_otherNameForm,
+      { "otherNameForm", "x509ce.otherNameForm",
+        FT_OID, BASE_NONE, NULL, 0,
+        "OBJECT_IDENTIFIER", HFILL }},
+    { &hf_x509ce_CertPolicySet_item,
+      { "CertPolicyId", "x509ce.CertPolicyId",
+        FT_OID, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_cpea_issuedToThisCAAssertion,
+      { "issuedToThisCAAssertion", "x509ce.issuedToThisCAAssertion_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "CertificateExactAssertion", HFILL }},
+    { &hf_x509ce_cpea_issuedByThisCAAssertion,
+      { "issuedByThisCAAssertion", "x509ce.issuedByThisCAAssertion_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "CertificateExactAssertion", HFILL }},
+    { &hf_x509ce_issuedToThisCAAssertion,
+      { "issuedToThisCAAssertion", "x509ce.issuedToThisCAAssertion_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "CertificateAssertion", HFILL }},
+    { &hf_x509ce_issuedByThisCAAssertion,
+      { "issuedByThisCAAssertion", "x509ce.issuedByThisCAAssertion_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "CertificateAssertion", HFILL }},
+    { &hf_x509ce_thisUpdate,
+      { "thisUpdate", "x509ce.thisUpdate",
+        FT_UINT32, BASE_DEC, VALS(x509af_Time_vals), 0,
+        "Time", HFILL }},
+    { &hf_x509ce_minCRLNumber,
+      { "minCRLNumber", "x509ce.minCRLNumber",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        "CRLNumber", HFILL }},
+    { &hf_x509ce_maxCRLNumber,
+      { "maxCRLNumber", "x509ce.maxCRLNumber",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        "CRLNumber", HFILL }},
+    { &hf_x509ce_reasonFlags,
+      { "reasonFlags", "x509ce.reasonFlags",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_dateAndTime,
+      { "dateAndTime", "x509ce.dateAndTime",
+        FT_UINT32, BASE_DEC, VALS(x509af_Time_vals), 0,
+        "Time", HFILL }},
+    { &hf_x509ce_firstIssuer,
+      { "firstIssuer", "x509ce.firstIssuer",
+        FT_UINT32, BASE_DEC, VALS(x509if_Name_vals), 0,
+        "Name", HFILL }},
+    { &hf_x509ce_lastSubject,
+      { "lastSubject", "x509ce.lastSubject",
+        FT_UINT32, BASE_DEC, VALS(x509if_Name_vals), 0,
+        "Name", HFILL }},
+    { &hf_x509ce_subjectAltName,
+      { "subjectAltName", "x509ce.subjectAltName_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "AltName", HFILL }},
+    { &hf_x509ce_enhancedPathToName,
+      { "pathToName", "x509ce.pathToName",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "GeneralNames", HFILL }},
+    { &hf_x509ce_altnameType,
+      { "altnameType", "x509ce.altnameType",
+        FT_UINT32, BASE_DEC, VALS(x509ce_AltNameType_vals), 0,
+        NULL, HFILL }},
+    { &hf_x509ce_altNameValue,
+      { "altNameValue", "x509ce.altNameValue",
+        FT_UINT32, BASE_DEC, VALS(x509ce_GeneralName_vals), 0,
+        "GeneralName", HFILL }},
+    { &hf_x509ce_templateID,
+      { "templateID", "x509ce.templateID",
+        FT_OID, BASE_NONE, NULL, 0,
+        "OBJECT_IDENTIFIER", HFILL }},
+    { &hf_x509ce_templateMajorVersion,
+      { "templateMajorVersion", "x509ce.templateMajorVersion",
+        FT_INT32, BASE_DEC, NULL, 0,
+        "INTEGER", HFILL }},
+    { &hf_x509ce_templateMinorVersion,
+      { "templateMinorVersion", "x509ce.templateMinorVersion",
+        FT_INT32, BASE_DEC, NULL, 0,
+        "INTEGER", HFILL }},
+    { &hf_x509ce_ntdsObjectSid,
+      { "ntdsObjectSid", "x509ce.ntdsObjectSid_element",
+        FT_NONE, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_type_id_01,
+      { "type-id", "x509ce.type_id",
+        FT_OID, BASE_NONE, NULL, 0,
+        "OBJECT_IDENTIFIER", HFILL }},
+    { &hf_x509ce_sid,
+      { "sid", "x509ce.sid",
+        FT_STRING, BASE_NONE, NULL, 0,
+        "PrintableString", HFILL }},
+    { &hf_x509ce_entrustVers,
+      { "entrustVers", "x509ce.entrustVers",
+        FT_STRING, BASE_NONE, NULL, 0,
+        "GeneralString", HFILL }},
+    { &hf_x509ce_entrustVersInfoFlags,
+      { "entrustVersInfoFlags", "x509ce.entrustVersInfoFlags",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        "EntrustInfoFlags", HFILL }},
+    { &hf_x509ce_NFTypes_item,
+      { "NFType", "x509ce.NFType",
+        FT_STRING, BASE_NONE, NULL, 0,
+        NULL, HFILL }},
+    { &hf_x509ce_capability,
+      { "capability", "x509ce.capability",
+        FT_UINT64, BASE_DEC|BASE_VAL64_STRING, VALS64(ciplus_scr_cap), 0,
+        "INTEGER_0_MAX", HFILL }},
+    { &hf_x509ce_version,
+      { "version", "x509ce.version",
+        FT_UINT64, BASE_DEC, NULL, 0,
+        "INTEGER_0_MAX", HFILL }},
+    { &hf_x509ce_KeyUsage_digitalSignature,
+      { "digitalSignature", "x509ce.KeyUsage.digitalSignature",
+        FT_BOOLEAN, 8, NULL, 0x80,
+        NULL, HFILL }},
+    { &hf_x509ce_KeyUsage_contentCommitment,
+      { "contentCommitment", "x509ce.KeyUsage.contentCommitment",
+        FT_BOOLEAN, 8, NULL, 0x40,
+        NULL, HFILL }},
+    { &hf_x509ce_KeyUsage_keyEncipherment,
+      { "keyEncipherment", "x509ce.KeyUsage.keyEncipherment",
+        FT_BOOLEAN, 8, NULL, 0x20,
+        NULL, HFILL }},
+    { &hf_x509ce_KeyUsage_dataEncipherment,
+      { "dataEncipherment", "x509ce.KeyUsage.dataEncipherment",
+        FT_BOOLEAN, 8, NULL, 0x10,
+        NULL, HFILL }},
+    { &hf_x509ce_KeyUsage_keyAgreement,
+      { "keyAgreement", "x509ce.KeyUsage.keyAgreement",
+        FT_BOOLEAN, 8, NULL, 0x08,
+        NULL, HFILL }},
+    { &hf_x509ce_KeyUsage_keyCertSign,
+      { "keyCertSign", "x509ce.KeyUsage.keyCertSign",
+        FT_BOOLEAN, 8, NULL, 0x04,
+        NULL, HFILL }},
+    { &hf_x509ce_KeyUsage_cRLSign,
+      { "cRLSign", "x509ce.KeyUsage.cRLSign",
+        FT_BOOLEAN, 8, NULL, 0x02,
+        NULL, HFILL }},
+    { &hf_x509ce_KeyUsage_encipherOnly,
+      { "encipherOnly", "x509ce.KeyUsage.encipherOnly",
+        FT_BOOLEAN, 8, NULL, 0x01,
+        NULL, HFILL }},
+    { &hf_x509ce_KeyUsage_decipherOnly,
+      { "decipherOnly", "x509ce.KeyUsage.decipherOnly",
+        FT_BOOLEAN, 8, NULL, 0x80,
+        NULL, HFILL }},
+    { &hf_x509ce_OnlyCertificateTypes_user,
+      { "user", "x509ce.OnlyCertificateTypes.user",
+        FT_BOOLEAN, 8, NULL, 0x80,
+        NULL, HFILL }},
+    { &hf_x509ce_OnlyCertificateTypes_authority,
+      { "authority", "x509ce.OnlyCertificateTypes.authority",
+        FT_BOOLEAN, 8, NULL, 0x40,
+        NULL, HFILL }},
+    { &hf_x509ce_OnlyCertificateTypes_attribute,
+      { "attribute", "x509ce.OnlyCertificateTypes.attribute",
+        FT_BOOLEAN, 8, NULL, 0x20,
+        NULL, HFILL }},
+    { &hf_x509ce_ReasonFlags_unused,
+      { "unused", "x509ce.ReasonFlags.unused",
+        FT_BOOLEAN, 8, NULL, 0x80,
+        NULL, HFILL }},
+    { &hf_x509ce_ReasonFlags_keyCompromise,
+      { "keyCompromise", "x509ce.ReasonFlags.keyCompromise",
+        FT_BOOLEAN, 8, NULL, 0x40,
+        NULL, HFILL }},
+    { &hf_x509ce_ReasonFlags_cACompromise,
+      { "cACompromise", "x509ce.ReasonFlags.cACompromise",
+        FT_BOOLEAN, 8, NULL, 0x20,
+        NULL, HFILL }},
+    { &hf_x509ce_ReasonFlags_affiliationChanged,
+      { "affiliationChanged", "x509ce.ReasonFlags.affiliationChanged",
+        FT_BOOLEAN, 8, NULL, 0x10,
+        NULL, HFILL }},
+    { &hf_x509ce_ReasonFlags_superseded,
+      { "superseded", "x509ce.ReasonFlags.superseded",
+        FT_BOOLEAN, 8, NULL, 0x08,
+        NULL, HFILL }},
+    { &hf_x509ce_ReasonFlags_cessationOfOperation,
+      { "cessationOfOperation", "x509ce.ReasonFlags.cessationOfOperation",
+        FT_BOOLEAN, 8, NULL, 0x04,
+        NULL, HFILL }},
+    { &hf_x509ce_ReasonFlags_certificateHold,
+      { "certificateHold", "x509ce.ReasonFlags.certificateHold",
+        FT_BOOLEAN, 8, NULL, 0x02,
+        NULL, HFILL }},
+    { &hf_x509ce_ReasonFlags_privilegeWithdrawn,
+      { "privilegeWithdrawn", "x509ce.ReasonFlags.privilegeWithdrawn",
+        FT_BOOLEAN, 8, NULL, 0x01,
+        NULL, HFILL }},
+    { &hf_x509ce_ReasonFlags_aACompromise,
+      { "aACompromise", "x509ce.ReasonFlags.aACompromise",
+        FT_BOOLEAN, 8, NULL, 0x80,
+        NULL, HFILL }},
+    { &hf_x509ce_EntrustInfoFlags_keyUpdateAllowed,
+      { "keyUpdateAllowed", "x509ce.EntrustInfoFlags.keyUpdateAllowed",
+        FT_BOOLEAN, 8, NULL, 0x80,
+        NULL, HFILL }},
+    { &hf_x509ce_EntrustInfoFlags_newExtensions,
+      { "newExtensions", "x509ce.EntrustInfoFlags.newExtensions",
+        FT_BOOLEAN, 8, NULL, 0x40,
+        NULL, HFILL }},
+    { &hf_x509ce_EntrustInfoFlags_pKIXCertificate,
+      { "pKIXCertificate", "x509ce.EntrustInfoFlags.pKIXCertificate",
+        FT_BOOLEAN, 8, NULL, 0x20,
+        NULL, HFILL }},
+    { &hf_x509ce_EntrustInfoFlags_enterpriseCategory,
+      { "enterpriseCategory", "x509ce.EntrustInfoFlags.enterpriseCategory",
+        FT_BOOLEAN, 8, NULL, 0x10,
+        NULL, HFILL }},
+    { &hf_x509ce_EntrustInfoFlags_webCategory,
+      { "webCategory", "x509ce.EntrustInfoFlags.webCategory",
+        FT_BOOLEAN, 8, NULL, 0x08,
+        NULL, HFILL }},
+    { &hf_x509ce_EntrustInfoFlags_sETCategory,
+      { "sETCategory", "x509ce.EntrustInfoFlags.sETCategory",
+        FT_BOOLEAN, 8, NULL, 0x04,
+        NULL, HFILL }},
+  };
+
+  /* List of subtrees */
+  static gint *ett[] = {
+    &ett_x509ce_AuthorityKeyIdentifier,
+    &ett_x509ce_KeyUsage,
+    &ett_x509ce_KeyPurposeIDs,
+    &ett_x509ce_PrivateKeyUsagePeriod,
+    &ett_x509ce_CertificatePoliciesSyntax,
+    &ett_x509ce_PolicyInformation,
+    &ett_x509ce_SEQUENCE_SIZE_1_MAX_OF_PolicyQualifierInfo,
+    &ett_x509ce_PolicyQualifierInfo,
+    &ett_x509ce_PolicyMappingsSyntax,
+    &ett_x509ce_PolicyMappingsSyntax_item,
+    &ett_x509ce_GeneralNames,
+    &ett_x509ce_GeneralName,
+    &ett_x509ce_OtherName,
+    &ett_x509ce_EDIPartyName,
+    &ett_x509ce_AttributesSyntax,
+    &ett_x509ce_BasicConstraintsSyntax,
+    &ett_x509ce_NameConstraintsSyntax,
+    &ett_x509ce_GeneralSubtrees,
+    &ett_x509ce_GeneralSubtree,
+    &ett_x509ce_PolicyConstraintsSyntax,
+    &ett_x509ce_CRLScopeSyntax,
+    &ett_x509ce_PerAuthorityScope,
+    &ett_x509ce_OnlyCertificateTypes,
+    &ett_x509ce_NumberRange,
+    &ett_x509ce_BaseRevocationInfo,
+    &ett_x509ce_StatusReferrals,
+    &ett_x509ce_StatusReferral,
+    &ett_x509ce_CRLReferral,
+    &ett_x509ce_DeltaRefInfo,
+    &ett_x509ce_DeltaInformation,
+    &ett_x509ce_CRLDistPointsSyntax,
+    &ett_x509ce_DistributionPoint,
+    &ett_x509ce_DistributionPointName,
+    &ett_x509ce_ReasonFlags,
+    &ett_x509ce_IssuingDistPointSyntax,
+    &ett_x509ce_ToBeRevokedSyntax,
+    &ett_x509ce_ToBeRevokedGroup,
+    &ett_x509ce_ReasonInfo,
+    &ett_x509ce_CertificateGroup,
+    &ett_x509ce_CertificateGroupNumberRange,
+    &ett_x509ce_CertificateSerialNumbers,
+    &ett_x509ce_RevokedGroupsSyntax,
+    &ett_x509ce_RevokedGroup,
+    &ett_x509ce_RevokedCertificateGroup,
+    &ett_x509ce_AAIssuingDistPointSyntax,
+    &ett_x509ce_CertificateExactAssertion,
+    &ett_x509ce_CertificateAssertion,
+    &ett_x509ce_AltNameType,
+    &ett_x509ce_CertPolicySet,
+    &ett_x509ce_CertificatePairExactAssertion,
+    &ett_x509ce_CertificatePairAssertion,
+    &ett_x509ce_CertificateListExactAssertion,
+    &ett_x509ce_CertificateListAssertion,
+    &ett_x509ce_PkiPathMatchSyntax,
+    &ett_x509ce_EnhancedCertificateAssertion,
+    &ett_x509ce_AltName,
+    &ett_x509ce_CertificateTemplate,
+    &ett_x509ce_NtdsCaSecurity,
+    &ett_x509ce_NtdsObjectSid_U,
+    &ett_x509ce_EntrustVersionInfo,
+    &ett_x509ce_EntrustInfoFlags,
+    &ett_x509ce_NFTypes,
+    &ett_x509ce_ScramblerCapabilities,
+  };
+
+  /* Register protocol */
+  proto_x509ce = proto_register_protocol(PNAME, PSNAME, PFNAME);
+
+  /* Register fields and subtrees */
+  proto_register_field_array(proto_x509ce, hf, array_length(hf));
+  proto_register_subtree_array(ett, array_length(ett));
+
+}
+
+
+/*--- proto_reg_handoff_x509ce -------------------------------------------*/
+void proto_reg_handoff_x509ce(void) {
+  register_ber_oid_dissector("2.5.29.3", dissect_CertificatePoliciesSyntax_PDU, proto_x509ce, "id-ce-certificatePolicies");
+  register_ber_oid_dissector("2.5.29.9", dissect_AttributesSyntax_PDU, proto_x509ce, "id-ce-subjectDirectoryAttributes");
+  register_ber_oid_dissector("2.5.29.14", dissect_SubjectKeyIdentifier_PDU, proto_x509ce, "id-ce-subjectKeyIdentifier");
+  register_ber_oid_dissector("2.5.29.15", dissect_KeyUsage_PDU, proto_x509ce, "id-ce-keyUsage");
+  register_ber_oid_dissector("2.5.29.16", dissect_PrivateKeyUsagePeriod_PDU, proto_x509ce, "id-ce-privateKeyUsagePeriod");
+  register_ber_oid_dissector("2.5.29.17", dissect_GeneralNames_PDU, proto_x509ce, "id-ce-subjectAltName");
+  register_ber_oid_dissector("2.5.29.18", dissect_GeneralNames_PDU, proto_x509ce, "id-ce-issuerAltName");
+  register_ber_oid_dissector("2.5.29.19", dissect_BasicConstraintsSyntax_PDU, proto_x509ce, "id-ce-basicConstraints");
+  register_ber_oid_dissector("2.5.29.20", dissect_CRLNumber_PDU, proto_x509ce, "id-ce-cRLNumber");
+  register_ber_oid_dissector("2.5.29.21", dissect_CRLReason_PDU, proto_x509ce, "id-ce-reasonCode");
+  register_ber_oid_dissector("2.5.29.23", dissect_HoldInstruction_PDU, proto_x509ce, "id-ce-instructionCode");
+  register_ber_oid_dissector("2.5.29.27", dissect_BaseCRLNumber_PDU, proto_x509ce, "id-ce-deltaCRLIndicator");
+  register_ber_oid_dissector("2.5.29.28", dissect_IssuingDistPointSyntax_PDU, proto_x509ce, "id-ce-issuingDistributionPoint");
+  register_ber_oid_dissector("2.5.29.29", dissect_GeneralNames_PDU, proto_x509ce, "id-ce-certificateIssuer");
+  register_ber_oid_dissector("2.5.29.30", dissect_NameConstraintsSyntax_PDU, proto_x509ce, "id-ce-nameConstraints");
+  register_ber_oid_dissector("2.5.29.31", dissect_CRLDistPointsSyntax_PDU, proto_x509ce, "id-ce-cRLDistributionPoints");
+  register_ber_oid_dissector("2.5.29.32", dissect_CertificatePoliciesSyntax_PDU, proto_x509ce, "id-ce-certificatePolicies");
+  register_ber_oid_dissector("2.5.29.33", dissect_PolicyMappingsSyntax_PDU, proto_x509ce, "id-ce-policyMappings");
+  register_ber_oid_dissector("2.5.29.35", dissect_AuthorityKeyIdentifier_PDU, proto_x509ce, "id-ce-authorityKeyIdentifier");
+  register_ber_oid_dissector("2.5.29.36", dissect_PolicyConstraintsSyntax_PDU, proto_x509ce, "id-ce-policyConstraints");
+  register_ber_oid_dissector("2.5.29.37", dissect_KeyPurposeIDs_PDU, proto_x509ce, "id-ce-extKeyUsage");
+  register_ber_oid_dissector("2.5.29.40", dissect_CRLStreamIdentifier_PDU, proto_x509ce, "id-ce-cRLStreamIdentifier");
+  register_ber_oid_dissector("2.5.29.44", dissect_CRLScopeSyntax_PDU, proto_x509ce, "id-ce-cRLScope");
+  register_ber_oid_dissector("2.5.29.45", dissect_StatusReferrals_PDU, proto_x509ce, "id-ce-statusReferrals");
+  register_ber_oid_dissector("2.5.29.46", dissect_CRLDistPointsSyntax_PDU, proto_x509ce, "id-ce-freshestCRL");
+  register_ber_oid_dissector("2.5.29.47", dissect_OrderedListSyntax_PDU, proto_x509ce, "id-ce-orderedList");
+  register_ber_oid_dissector("2.5.29.53", dissect_DeltaInformation_PDU, proto_x509ce, "id-ce-deltaInfo");
+  register_ber_oid_dissector("2.5.29.54", dissect_SkipCerts_PDU, proto_x509ce, "id-ce-inhibitAnyPolicy");
+  register_ber_oid_dissector("2.5.29.58", dissect_ToBeRevokedSyntax_PDU, proto_x509ce, "id-ce-toBeRevoked");
+  register_ber_oid_dissector("2.5.29.59", dissect_RevokedGroupsSyntax_PDU, proto_x509ce, "id-ce-RevokedGroups");
+  register_ber_oid_dissector("2.5.29.60", dissect_ExpiredCertsOnCRL_PDU, proto_x509ce, "id-ce-expiredCertsOnCRL");
+  register_ber_oid_dissector("2.5.29.61", dissect_AAIssuingDistPointSyntax_PDU, proto_x509ce, "id-ce-aAissuingDistributionPoint");
+  register_ber_oid_dissector("1.3.6.1.5.5.7.1.34", dissect_NFTypes_PDU, proto_x509ce, "id-pe-nftype");
+  register_ber_oid_dissector("2.5.13.35", dissect_CertificateAssertion_PDU, proto_x509ce, "id-mr-certificateMatch");
+  register_ber_oid_dissector("2.5.13.36", dissect_CertificatePairExactAssertion_PDU, proto_x509ce, "id-mr-certificatePairExactMatch");
+  register_ber_oid_dissector("2.5.13.37", dissect_CertificatePairAssertion_PDU, proto_x509ce, "id-mr-certificatePairMatch");
+  register_ber_oid_dissector("2.5.13.38", dissect_CertificateListExactAssertion_PDU, proto_x509ce, "id-mr-certificateListExactMatch");
+  register_ber_oid_dissector("2.5.13.39", dissect_CertificateListAssertion_PDU, proto_x509ce, "id-mr-certificateListMatch");
+  register_ber_oid_dissector("2.5.13.62", dissect_PkiPathMatchSyntax_PDU, proto_x509ce, "id-mr-pkiPathMatch");
+  register_ber_oid_dissector("2.5.13.65", dissect_EnhancedCertificateAssertion_PDU, proto_x509ce, "id-mr-enhancedCertificateMatch");
+  register_ber_oid_dissector("1.3.6.1.4.1.311.21.7", dissect_CertificateTemplate_PDU, proto_x509ce, "id-ms-certificate-template");
+  register_ber_oid_dissector("1.3.6.1.4.1.311.21.10", dissect_CertificatePoliciesSyntax_PDU, proto_x509ce, "id-ms-application-certificate-policies");
+  register_ber_oid_dissector("1.3.6.1.4.1.311.25.2", dissect_NtdsCaSecurity_PDU, proto_x509ce, "id-ms-ntds-ca-security");
+  register_ber_oid_dissector("1.3.6.1.4.1.311.25.2.1", dissect_NtdsObjectSid_PDU, proto_x509ce, "id-ms-ntds-object-sid");
+  register_ber_oid_dissector("1.2.840.113533.7.65.0", dissect_EntrustVersionInfo_PDU, proto_x509ce, "id-ce-entrustVersionInfo");
+
+  register_ber_oid_dissector("2.5.29.24", dissect_x509ce_invalidityDate_callback, proto_x509ce, "id-ce-invalidityDate");
+  register_ber_oid_dissector("2.5.29.51", dissect_x509ce_baseUpdateTime_callback, proto_x509ce, "id-ce-baseUpdateTime");
+  oid_add_from_string("anyPolicy","2.5.29.32.0");
+}
+
+
+/*
+ * Editor modelines  -  https://www.wireshark.org/tools/modelines.html
+ *
+ * Local Variables:
+ * c-basic-offset: 2
+ * tab-width: 8
+ * indent-tabs-mode: nil
+ * End:
+ *
+ * vi: set shiftwidth=2 tabstop=8 expandtab:
+ * :indentSize=2:tabSize=8:noTabs=true:
+ */