Netscape Certificate Management System 6.01, Manual

Page: 291 / 377

IssuerAlternativeName Rule
Chapter 7 CRL Extension Plug-in Modules 291
nameType<n>
Specifies the general-name type.
Permissible values:
rfc822Name
,
directoryName
,
dNSName
,
ediPartyName
,
URL
,
iPAddress
,
OID
, or
otherName
.
• Select
rfc822Name
if the name is an Internet mail address.
• Select
directoryName
if the name is an X.500 directory name.
• Select
dNSName
if the name is a DNS name.
• Select
ediPartyName
if the name is a EDI party name.
• Select
URL
if the name is a uniform resource identifier (default).
• Select
iPAddress
if the name is an IP address.
• Select
OID
if the name is an object identifier.
• Select
otherName
if the name is in any other name form.
Example:
URL
name<n>
Specifies the general-name value.
Permissible values: Depends on the name type specified in the
nameType<n>
field.
• If the type is
rfc822Name
, the value must be a valid Internet mail
address in the
local-part@domain
format; see the definition of an
rfc822Name
as defined in RFC 822
(
http://www.ietf.org/rfc/rfc0822.txt
). You may use upper
and lower case letters in the mail address; no significance is attached to
the case. For example,
testCA@example.com
.
• If the type is
directoryName
, the value must be a string form of X.500
name, similar to the subject name in a certificate, in the RFC 2253
syntax (see
http://www.ietf.org/rfc/rfc2253.txt
). Note that
RFC 2253 replaces RFC 1779. For example,
CN=CACentral,OU=Research Dept,O=Example
Corporation,C=US
.
• If the type is
dNSName
, the value must be a valid domain name in the
preferred-name syntax as specified in RFC 1034
(
http://www.ietf.org/rfc/rfc1034.txt
). You may use upper
and lower case letters in the domain name; no significance is attached
to the case. Do not use the string “ ” for the DNS name. Also don’t use
the DNS representation for Internet mail addresses; such identities
should be encoded as
rfc822Name
. For example,
testCA.example.com
.
Table 7-8
Description of parameters defined in the IssuerAlternativeName rule (Continued)
Parameter Description