Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 524 / 840

Extension-Specific Policy Module Reference
524 Netscape Certificate Management System Administrator’s Guide • February 2003
ExtendedKeyUsageExt
The
ExtendedKeyUsageExt
plug-in module enables you to add the Extended Key
Usage Extension to certificates. The extension identifies one or more purposes—in
addition to or in place of the basic purposes indicated in the key usage
extension—for which the certified public key may be used. For example, if the key
• Select
URI
if the value in the
pointName
field is a uniform resource indicator.
• Select
RelativeToIssuer
if the value in the
pointName
field is a location
relative to the CRL Issuer.
reasons<n>
Specifies revocation reasons covered by the CRL maintained at the distribution point.
Provide a comma-separated list of the following constants:
• unused
• keyCompromise
• cACompromise
• affiliationChanged
• superseded
• cessationOfOperation
•
certificateHold
issuerName<n>
Specifies the name of the issuer that has signed the CRL maintained at distribution
point, the name can be in any of the following formats:
• An X.500 directory name in the RFC 2253 syntax. For example:
CN=CA Central, OU=Research Dept, O=Example Corporation, C=US
• A URI; for example, it would look similar to this:
http://testCA.example.com:80
issuerType<n>
Specifies the general-name type of the CRL issuer that has signed the CRL maintained
at distribution point.
Permissible values:
DirectoryName
or
URI
. The value you specify for this
parameter must correspond to the value in the
issuerName
field.
• Select
DirectoryName
if the value in the
issuerName
field is an X.500 directory
name (default).
• Select
URI
if the value in the
issuerName
field is a uniform resource indicator.
Table 11-21 CRLDistributionPointsExt Configuration Parameters (Continued)
Parameter Description