Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 471 / 874

Constraints Reference
Chapter 10 Certificate Profiles 471
Validity Default
This default populates a server-side configurable validity into the certificate
request.
You can define the following constraints with this default:
• Validity Constraint, see “Validity Constraint,” on page 477.
• No Constraints, see “No Constraint,” on page 475.
Constraints Reference
Constraints are used to define the allowable contents of a certificate and the values
associated with that content. This section lists the pre built constraints with
complete definitions of each.
Basics Constraints Extension Constraint
The basic constraints extension constraint checks if the basic constraint in the
certificate request satisfies the criteria set in this constraint.
Table 10-17 Validity Default Configuration Parameters
Parameter Description
range
Specifies the validity period for this certificate.
Table 10-18
Basic Constraints Extension Constraint Configuration Parameters
Parameter Description
Critical
Specifies whether the extension can be marked critical or
noncritical. Select true to allow this extension to be mark
critical, select false to prevent this extension from being marked
critical; select
“-”
to indicate no constraints are placed for this
parameter.
IsCA
Specifies whether the certificate subject is a CA. Select true to
allow a value of true for this parameter, select false to disallow a
value of true for this parameter, select
“-”
to indicate no
constraints are placed for this parameter.