Netscape Certificate Management System 6.0, Manual

Page: 373 / 377

Index 373
E
encrypted file system (EFS) 169
end-entity certificate publisher 273
end-entity enrollment forms 53
automated 54
manual 53
end-entity forms
for enrollment 55
enrollment
automated 18
manual 18
enrollment forms
for Certificate Managers 57
for end users 55
for object signing certificates 57
for OCSP responder certificates 57
for Registration Managers 57
for servers 56
generating DSA key pairs 58
Error log
configuring 299
event log
configuring 305
logging audit and system messages 304
expired certificates
removing from the directory 72
Extended Key Usage extension policy 168
OIDs for encrypted file system 169
extending directory-attribute support in CMS 314
extensions 327–369
130
adding to end-entity certificates 128
an example 331
authorityKeyIdentifier 340, 361, 369
basicConstraints 341, 368
CA certificates and 368–369
certificateIssuer 364
certificatePolicies 342
cRLDistributionPoints 343
CRLNumber 361
deltaCRLIndicator 362
extKeyUsage 344
holdInstructionCode 365
introduction to 328
invalidityDate 365
issuerAltName 347, 363
issuingDistributionPoint 363
keyUsage 348
nameConstraints 350
netscape-cert-type 367, 368
netscape-comment 368
Netscape-defined 366–369
policyConstraints 352
policyMappings 353
privateKeyUsagePeriod 353
reasonCode 366
recommendations for usage 331–337
structure of 330
subjectAltName 354
subjectDirectoryAttributes 356
subjectKeyIdentifier 356
X.509 certificate, summarized 337–357
X.509 CRL, summarized 360–366
extension-specific policies
authority information access 132
authority key identifier 141
basic constraints 144
certificate policy 148
certificate renewal window 153
certificate scope of use 158
common features 131
CRL distribution point 163
extended key usage 168
Generic ASN.1 174
issuer alternative name 181
key usage 186
name constraints 199
Netscape certificate comment 208
Netscape certificate type 212
policy constraints 217, 221
policy mappings 224
private key usage period 228
remove basic constraints 230
subject alternative name 232
subject directory attributes 238
subject key identifier 242
extension-specific policy modules 328
list of 130
extKeyUsage 344