RE: How to enable certificate purpose programmatically?

For those falks who may need to repeate this jorney, here's the certutil's
all-cert-purposes dump. if you don't have Vista installed, it will save you a
few hours:

0000: 30 82 01 60 BER_SEQUENCE (0x160 Bytes)
0004: 06 0a BER_OBJECT_ID (a Bytes)
0006: | 2b 06 01 04 01 82 37 0a 03 0d
| -- 1.3.6.1.4.1.311.10.3.13 Lifetime Signing
0010: 06 09 BER_OBJECT_ID (9 Bytes)
0012: | 2b 06 01 04 01 82 37 15 05
| -- 1.3.6.1.4.1.311.21.5 Private Key Archival
001b: 06 09 BER_OBJECT_ID (9 Bytes)
001d: | 2b 06 01 04 01 82 37 15 06
| -- 1.3.6.1.4.1.311.21.6 Key Recovery Agent
0026: 06 0a BER_OBJECT_ID (a Bytes)
0028: | 2b 06 01 04 01 82 37 14 02 01
| -- 1.3.6.1.4.1.311.20.2.1 Certificate Request Agent
0032: 06 09 BER_OBJECT_ID (9 Bytes)
0034: | 2b 06 01 04 01 82 37 15 13
| -- 1.3.6.1.4.1.311.21.19 Directory Service Email Replication
003d: 06 0a BER_OBJECT_ID (a Bytes)
003f: | 2b 06 01 04 01 82 37 0a 0c 01
| -- 1.3.6.1.4.1.311.10.12.1 All application policies
0049: 06 0a BER_OBJECT_ID (a Bytes)
004b: | 2b 06 01 04 01 82 37 0a 03 09
| -- 1.3.6.1.4.1.311.10.3.9 Root List Signer
0055: 06 0b BER_OBJECT_ID (b Bytes)
0057: | 2b 06 01 04 01 82 37 0a 03 04 01
| -- 1.3.6.1.4.1.311.10.3.4.1 File Recovery
0062: 06 08 BER_OBJECT_ID (8 Bytes)
0064: | 2b 06 01 05 05 08 02 02
| -- 1.3.6.1.5.5.8.2.2 IP security IKE intermediate
006c: 06 0a BER_OBJECT_ID (a Bytes)
006e: | 2b 06 01 04 01 82 37 0a 03 0c
| -- 1.3.6.1.4.1.311.10.3.12 Document Signing
0078: 06 0a BER_OBJECT_ID (a Bytes)
007a: | 2b 06 01 04 01 82 37 0a 03 0b
| -- 1.3.6.1.4.1.311.10.3.11 Key Recovery
0084: 06 0a BER_OBJECT_ID (a Bytes)
0086: | 2b 06 01 04 01 82 37 0a 03 0a
| -- 1.3.6.1.4.1.311.10.3.10 Qualified Subordination
0090: 06 0a BER_OBJECT_ID (a Bytes)
0092: | 2b 06 01 04 01 82 37 0a 05 01
| -- 1.3.6.1.4.1.311.10.5.1 Digital Rights
009c: 06 0a BER_OBJECT_ID (a Bytes)
009e: | 2b 06 01 04 01 82 37 14 02 02
| -- 1.3.6.1.4.1.311.20.2.2 Smart Card Logon
00a8: 06 0a BER_OBJECT_ID (a Bytes)
00aa: | 2b 06 01 04 01 82 37 0a 06 02
| -- 1.3.6.1.4.1.311.10.6.2 License Server Verification
00b4: 06 0a BER_OBJECT_ID (a Bytes)
00b6: | 2b 06 01 04 01 82 37 0a 06 01
| -- 1.3.6.1.4.1.311.10.6.1 Key Pack Licenses
00c0: 06 0a BER_OBJECT_ID (a Bytes)
00c2: | 2b 06 01 04 01 82 37 0a 03 08
| -- 1.3.6.1.4.1.311.10.3.8 Embedded Windows System Component
Verification
00cc: 06 0a BER_OBJECT_ID (a Bytes)
00ce: | 2b 06 01 04 01 82 37 0a 03 07
| -- 1.3.6.1.4.1.311.10.3.7 OEM Windows System Component
Verification
00d8: 06 0a BER_OBJECT_ID (a Bytes)
00da: | 2b 06 01 04 01 82 37 0a 03 06
| -- 1.3.6.1.4.1.311.10.3.6 Windows System Component Verification
00e4: 06 0a BER_OBJECT_ID (a Bytes)
00e6: | 2b 06 01 04 01 82 37 0a 03 05
| -- 1.3.6.1.4.1.311.10.3.5 Windows Hardware Driver Verification
00f0: 06 0a BER_OBJECT_ID (a Bytes)
00f2: | 2b 06 01 04 01 82 37 0a 03 04
| -- 1.3.6.1.4.1.311.10.3.4 Encrypting File System
00fc: 06 08 BER_OBJECT_ID (8 Bytes)
00fe: | 2b 06 01 05 05 07 03 07
| -- 1.3.6.1.5.5.7.3.7 IP security user
0106: 06 08 BER_OBJECT_ID (8 Bytes)
0108: | 2b 06 01 05 05 07 03 06
| -- 1.3.6.1.5.5.7.3.6 IP security tunnel termination
0110: 06 08 BER_OBJECT_ID (8 Bytes)
0112: | 2b 06 01 05 05 07 03 05
| -- 1.3.6.1.5.5.7.3.5 IP security end system
011a: 06 0a BER_OBJECT_ID (a Bytes)
011c: | 2b 06 01 04 01 82 37 0a 03 02
| -- 1.3.6.1.4.1.311.10.3.2 Microsoft Time Stamping
0126: 06 0a BER_OBJECT_ID (a Bytes)
0128: | 2b 06 01 04 01 82 37 0a 03 01
| -- 1.3.6.1.4.1.311.10.3.1 Microsoft Trust List Signing
0132: 06 08 BER_OBJECT_ID (8 Bytes)
0134: | 2b 06 01 05 05 07 03 08
| -- 1.3.6.1.5.5.7.3.8 Time Stamping
013c: 06 08 BER_OBJECT_ID (8 Bytes)
013e: | 2b 06 01 05 05 07 03 04
| -- 1.3.6.1.5.5.7.3.4 Secure Email
0146: 06 08 BER_OBJECT_ID (8 Bytes)
0148: | 2b 06 01 05 05 07 03 03
| -- 1.3.6.1.5.5.7.3.3 Code Signing
0150: 06 08 BER_OBJECT_ID (8 Bytes)
0152: | 2b 06 01 05 05 07 03 02
| -- 1.3.6.1.5.5.7.3.2 Client Authentication
015a: 06 08 BER_OBJECT_ID (8 Bytes)
015c: 2b 06 01 05 05 07 03 01
-- 1.3.6.1.5.5.7.3.1 Server Authentication

--
Vlad Hrybok


.