Netscape Certificate Management System 6.01, Manual

Page: 166 / 377

CRLDistributionPointsExt Plug-in Module
166 Netscape Certificate Management System Plug-Ins Guide • May 2002
pointName<n>
Specifies the name of the CRL distribution point.
Permissible values: Any supported name forms. By default, the name can be in any of
the following formats:
• An X.500 directory name in the RFC 2253 syntax (see
http://www.ietf.org/rfc/rfc2253.txt
); note that RFC 2253 replaces RFC
1779. For example, the name would look similar to the subject name in a
certificate, like this:
CN=CA Central, OU=Research Dept, O=Example
Corporation, C=US
• A URI; for example, it would look similar to this:
http://testCA.example.com:80
• An
RDN
which specifies a location relative to the CRL Issuer. In this case, the value
of the
pointType
attribute must be
RelativeToIssuer
.
pointType<n>
Specifies the type of the CRL distribution point.
Permissible values:
DirectoryName
,
URI
, or
RelativeToIssuer
. The type you
select must correspond to the value in the
pointName
field.
• Select
DirectoryName
if the value in the
pointName
field is an X.500 directory
name (default).
• Select
URI
if the value in the
pointName
field is a uniform resource indicator.
• Select
RelativeToIssuer
if the value in the
pointName
field is a location
relative to the CRL Issuer.
Example:
URI
reasons<n>
Specifies revocation reasons covered by the CRL maintained at the distribution point.
Permissible values: A comma-separated list of the following constants.
• unused
• keyCompromise
• cACompromise
• affiliationChanged
• superseded
• cessationOfOperation
•
certificateHold
Example:
keyCompromise
Table 4-8
Description of parameters defined in the CRLDistributionPointsExt module (Continued)
Parameter Description