Netscape Certificate Management System 6.0, Manual

Page: 138 / 377

AuthInfoAccessExt Plug-in Module
138 Netscape Certificate Management System Plug-Ins Guide • March 2002
ad<n>_location
Specifies the address or location to get additional information about the CA that has
issued the certificate in which this extension appears.
Permissible values: Depends on the location type you specified in the
ad<n>_location_type
field.
• If you selected
rfc822Name
, the value must be a valid Internet mail address in
the
local-part@domain
format; see the definition of an
rfc822Name
as
defined in RFC 822 (
http://www.ietf.org/rfc/rfc0822.txt
). You may
use upper and lower case letters in the mail address; no significance is attached to
the case. For example,
ocspResponder@example.com
.
• If you selected
directoryName
, the value must be a string form of X.500 name,
similar to the subject name in a certificate, in the RFC 2253 syntax (see
http://www.ietf.org/rfc/rfc2253.txt
). Note that RFC 2253 replaces
RFC 1779. For example,
CN=corpDirectory, OU=IS, O=example.com,
C=US
.
• If you selected
dNSName
, the value must be a valid domain name in the
preferred-name syntax as specified in RFC 1034
(
http://www.ietf.org/rfc/rfc1034.txt
). You may use upper and lower
case letters in the domain name; no significance is attached to the case. Do not use
the string “ ” for the DNS name. Also don’t use the DNS representation for
Internet mail addresses; such identities should be encoded as
rfc822Name
. For
example,
ocspResponder.example.com
.
• If you selected
ediPartyName
, the value must be an IA5String. For example,
Example Corporation
.
Table 4-2
Description of parameters defined in the AuthInfoAccessExt module (Continued)
Parameter Description