Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 557 / 840

Extension-Specific Policy Module Reference
Chapter 11 Policies 557
RemoveBasicConstraintsExt
The
RemoveBasicConstraintsExt
plug-in module implements the remove basic
constraints extension policy. This policy, if enabled, can detect the presence of Basic
Constraints extension in a certificate request and remove it.
For general information about the Basic Constraints extension, see
“basicConstraints” on page 725.
SubjectAltNameExt
The
SubjectAltNameExt
plug-in module enables you to add the Subject Alternative
Name Extension to certificates. The extension enables you to bind additional
identities—such as Internet electronic mail address, a DNS name, an IP address,
and a uniform resource indicator (URI)—to the subject of the certificate.
For general information about this extension, see “subjectAltName” on page 732.
notBefore
Specifies the date on which the validity period for the private key associated with the
certificate begins.
Permissible values: A valid date specified in the
MM/DD/YYYY
format.
Example:
03/30/2002
notAfter
Specifies the date on which the validity period for the private key associated with the
certificate ends.
Permissible values: A valid date specified in the
MM/DD/YYYY
format.
Example:
09/26/2002
Table 11-38 RemoveBasicConstraintsExt Configuration Parameters
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Select to enable, deselect to
disable.
predicate
Specifies the predicate expression for this rule. If you want this rule to be applied
to all certificate requests, leave the field blank (default). To form a predicate
expression, see “Using Predicates in Policy Rules,” on page 485.
Table 11-37 PrivateKeyUsagePeriodExt Configuration Parameters (Continued)
Parameter Description