Netscape Certificate Management System 6.01, Manual

Page: 167 / 377

CRLDistributionPointsExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 167
CRLDistributionPointsExt Rule
The policy rule named
CRLDistributionPointsExt
is an instance of the
CRLDistributionPointsExt
module. Certificate Management System
automatically creates this rule during installation. By default, the rule is configured
as follows:
• The rule is disabled; for the rule to be effective, it must be enabled and
configured appropriately.
• The predicate field is left blank so that the extension gets added to all
certificates.
• The extension is marked noncritical (to comply with the PKIX
recommendation).
• Other fields are left blank for you to enter the appropriate information.
issuerName<n>
Specifies the name of the issuer that has signed the CRL maintained at distribution
point.
Permissible values: Any supported name forms. By default, the name can be in any of
the following formats:
• An X.500 directory name in the RFC 2253 syntax (see
http://www.ietf.org/rfc/rfc2253.txt
); note that RFC 2253 replaces RFC
1779. For example, the name would look similar to this:
CN=CA Central, OU=Research Dept, O=Example Corporation, C=US
• A URI; for example, it would look similar to this:
http://testCA.example.com:80
issuerType<n>
Specifies the general-name type of the CRL issuer that has signed the CRL maintained
at distribution point.
Permissible values:
DirectoryName
or
URI
. The value you specify for this
parameter must correspond to the value in the
issuerName
field.
• Select
DirectoryName
if the value in the
issuerName
field is an X.500 directory
name (default).
• Select
URI
if the value in the
issuerName
field is a uniform resource indicator.
Example:
DirectoryName
Table 4-8
Description of parameters defined in the CRLDistributionPointsExt module (Continued)
Parameter Description