diff --git a/lib/asn1/Makefile.am b/lib/asn1/Makefile.am
index 889bbfba9..21bbe2163 100644
--- a/lib/asn1/Makefile.am
+++ b/lib/asn1/Makefile.am
@@ -269,6 +269,9 @@ gen_files_rfc2459 =					\
 	asn1_id_at_pseudonym.x				\
 	asn1_id_domainComponent.x			\
 	asn1_id_Userid.x				\
+	asn1_id_pkix.x					\
+	asn1_id_pkix_on.x				\
+	asn1_id_pkix_on_dnsSRV.x			\
 	asn1_id_pkix_pe.x				\
 	asn1_id_pe_proxyCertInfo.x			\
 	asn1_ProxyCertInfo.x				\
diff --git a/lib/asn1/rfc2459.asn1 b/lib/asn1/rfc2459.asn1
index eebbc3211..70e04d106 100644
--- a/lib/asn1/rfc2459.asn1
+++ b/lib/asn1/rfc2459.asn1
@@ -406,13 +406,24 @@ CRLReason ::= ENUMERATED {
 	aACompromise           (10)
 }
 
+id-pkix OBJECT IDENTIFIER ::= { iso(1) identified-organization(3)
+            dod(6) internet(1) security(5) mechanisms(5) pkix(7) }
+
+id-pkix-on OBJECT IDENTIFIER ::= { id-pkix(7) 8 }
+id-pkix-on-dnsSRV OBJECT IDENTIFIER ::= { id-pkix-on(7) 7 }
+
 -- RFC 3820 Proxy Certificate Profile
 
-id-pkix-pe OBJECT IDENTIFIER ::= { iso(1) identified-organization(3)
-            dod(6) internet(1) security(5) mechanisms(5) pkix(7) 1 }
+id-pkix-pe OBJECT IDENTIFIER ::= { id-pkix(7) 1 }
 
 id-pe-proxyCertInfo OBJECT IDENTIFIER ::= { id-pkix-pe 14 }
 
+
+   id-on   OBJECT IDENTIFIER ::= { id-pkix 8 }
+
+   id-on-dnsSRV OBJECT IDENTIFIER ::= { id-on 7 }
+
+
 ProxyPolicy ::= SEQUENCE {
 	policyLanguage		OBJECT IDENTIFIER,
 	policy			OCTET STRING OPTIONAL