Netscape Certificate Management System 6.0, Manual

Page: 157 / 377

CertificateRenewalWindowExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 157
relativeEndTime
Specifies the last opportunity for automatic renewal of the certificate that contains
this extension. Specifying a value for this parameter is optional; if you leave the
field blank, the certificate-using application is expected to use the expiration date
(
notAfter
value) in the certificate.
Permissible values:
0
or
n
.
•
0
specifies that the renewal window ends at the same time the certificate
expires; the
endTime
field of the extension will be set to the time the
certificate expires.
•
n
specifies a past or future time, in seconds, by which the certificate must be
renewed; the
endTime
field of the extension will be set to the specified time
since certificate issuance. You can specify the time period in seconds, minutes,
hours, days, or months. Use the following suffixes to indicate the time unit.
s
- seconds
m
- minutes
h
- hours
D
- days
M
- months
For example, if you’re issuing certificates with a validity period of two years
and want the renewal window to end a month after the certificates expire, and
want to specify the interval in months, you would enter
25M
in this field. On
the other hand, if you want the renewal window to end 15 days before
certificates expire, then you would set the value to
705D
((23 months x 30
days) + 15 days).
Note that if you choose to extend the renewal window after the expiration
date of the certificate itself, your CA must maintain appropriate status
information about the certificate during that window in order to allow
appropriate authentication in the renewal process. (Automatic renewal may
take place after the certificate has expired, when it is not valid for other
purposes.)
Example:
705D
Table 4-6
Description of parameters defined in the CertificateRenewalWindowExt module (Continued)
Parameter Description