Netscape Certificate Management System 6.1, Administrator'S Manual, Page: 738 / 840

Standard X.509 v3 CRL Extensions
738 Netscape Certificate Management System Administrator’s Guide • February 2003
Discussion
The Authority Key Identifier extension for a CRL identifies the public key
corresponding to the private key used to sign the CRL. For details, see the
discussion under certificate extensions at authorityKeyIdentifier.
CMS Version Support
Supported since CMS 4.2. Refer to “AuthorityKeyIdentifier” on page 608.
CRLNumber
OID
2.5.29.20
Criticality
This extension must not be critical.
Discussion
The CRL Number extension specifies a sequential number for each CRL issued by a
CA. It allows users to easily determine when a particular CRL supersedes another
CRL.
PKIX requires that all CRLs have this extension.
CMS Version Support
Supported since CMS 4.2. Refer to “CRLNumber” on page 609.
deltaCRLIndicator
OID
2.5.29.27
Criticality
PKIX requires that this extension be critical if it exists.
Discussion
The Delta CRL Indicator extension identifies a delta-CRL. The use of delta-CRLs
allows changes to be added to the local database while ignoring unchanged
information that is already in the local database. This can significantly improve
processing time for applications that store revocation information in a format other
than the CRL structure.
CMS Version Support
Supported since CMS 6.1. Refer to “DeltaCRLIndicator” on page 610.