Netscape Certificate Management System 6.0, Manual

Page: 295 / 377

IssuingDistributionPoint Rule
Chapter 7 CRL Extension Plug-in Modules 295
pointName
Specifies the name of the issuing distribution point. The name of the
distribution point can be in any of the following formats:
Permissible values: Depends on the value specified for the
pointType
parameter.
• If the
pointType
attribute is set to
DirectoryName
, the name must
be an X.500 Name (in RFC1779 syntax).
• If the
pointType
attribute is set to
URI
, the name must be a URI; the
URI must be an absolute pathname and must specify the host.
Example:
• If the name is a URI, it would look similar to this:
http://testCA.example.com/get/your/crls/here/
• If the name is an X.500 Directory Name, it would look similar to this:
CN=CRLCentral,OU=Research Dept,O=Example
Corporation,C=US
(Note that the CRL may be stored in the directory entry corresponding
to the CRL issuing point, which may be different than the directory
entry of the CA.)
onlySomeReasons
Specifies the reason codes associated with the distribution point.
Permissible values: A combination of reason codes—
unspecified
,
keyCompromise
,
cACompromise
,
affiliationChanged
,
superseded
,
cessationOfOperation
,
certificateHold
, and
removeFromCRL
—separated by commas. Leave field blank if the
distribution point contains revoked certificates with all reason codes or if
you don’t want to set this field (default).
Example:
unspecified
,
keyCompromise
,
cessationOfOperation
onlyContainsCACerts
Specifies whether the distribution point contains only revoked CA
certificates. Check the box if the distribution point contains CA certificates
only. Uncheck the box if the distribution point contains all types of
revoked certificates (default).
onlyContainsUserCerts
Specifies whether the distribution point contains only revoked user
certificates. Check the box if the distribution point contains user certificates
only. Uncheck the box if the distribution point contains all types of
certificates (default).
Table 7-9
Description of parameters defined in the IssuingDistributionPoint rule (Continued)
Parameter Description