fixup! ca: Do not use a 128bits OID arc for caucase iternal use

caucase/test.py

@@ -1288,10 +1288,6 @@ class CaucaseTest(unittest.TestCase):
       x509.IPAddress(ipaddress.IPv6Network(u'::/64')),
     ])
     requested_policies = x509.CertificatePolicies([
-      x509.PolicyInformation(
-        x509.oid.ObjectIdentifier(utils.CAUCASE_LEGACY_OID_RESERVED),
-        None,
-      ),
       x509.PolicyInformation(
         x509.oid.ObjectIdentifier(utils.CAUCASE_OID_RESERVED),
         None,

caucase/utils.py

@@ -77,19 +77,9 @@ CAUCASE_POLICY_INFORMATION_AUTO_SIGNED = x509.PolicyInformation(
 # these certificates difficult to use.
 CAUCASE_LEGACY_OID_TOP = '2.25.285541874270823339875695650038637483517'
 CAUCASE_LEGACY_OID_AUTO_SIGNED = CAUCASE_LEGACY_OID_TOP + '.0'
-CAUCASE_LEGACY_OID_RESERVED = CAUCASE_LEGACY_OID_TOP + '.999'
 _CAUCASE_LEGACY_OID_AUTO_SIGNED = x509.oid.ObjectIdentifier(
   CAUCASE_LEGACY_OID_AUTO_SIGNED,
 )
-CAUCASE_LEGACY_POLICY_INFORMATION_AUTO_SIGNED = x509.PolicyInformation(
-  _CAUCASE_LEGACY_OID_AUTO_SIGNED,
-  [
-    x509.UserNotice(
-      None,
-      'Auto-signed caucase certificate',
-    ),
-  ]
-)
 
 
 def isCertificateAutoSigned(crt):