support indexing in CertificatePolicies

2 files changed, 13 insertions, 0 deletions

diff --git a/src/cryptography/x509/extensions.py b/src/cryptography/x509/extensions.py
index 7979ccb2..dd2b8e63 100644
--- a/src/cryptography/x509/extensions.py
+++ b/src/cryptography/x509/extensions.py
@@ -501,6 +501,9 @@ class CertificatePolicies(object):
     def __ne__(self, other):
         return not self == other
 
+    def __getitem__(self, idx):
+        return self._policies[idx]
+
 
 class PolicyInformation(object):
     def __init__(self, policy_identifier, policy_qualifiers):
diff --git a/tests/test_x509_ext.py b/tests/test_x509_ext.py
index cfca5794..475efbd1 100644
--- a/tests/test_x509_ext.py
+++ b/tests/test_x509_ext.py
@@ -380,6 +380,16 @@ class TestCertificatePolicies(object):
         assert cp != cp2
         assert cp != object()
 
+    def test_indexing(self):
+        pi = x509.PolicyInformation(x509.ObjectIdentifier("1.2.3"), [u"test"])
+        pi2 = x509.PolicyInformation(x509.ObjectIdentifier("1.2.4"), [u"test"])
+        pi3 = x509.PolicyInformation(x509.ObjectIdentifier("1.2.5"), [u"test"])
+        pi4 = x509.PolicyInformation(x509.ObjectIdentifier("1.2.6"), [u"test"])
+        pi5 = x509.PolicyInformation(x509.ObjectIdentifier("1.2.7"), [u"test"])
+        cp = x509.CertificatePolicies([pi, pi2, pi3, pi4, pi5])
+        assert cp[-1] == cp[4]
+        assert cp[2:6:2] == [cp[2], cp[4]]
+
 
 @pytest.mark.requires_backend_interface(interface=RSABackend)
 @pytest.mark.requires_backend_interface(interface=X509Backend)