Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 477 / 874

Constraints Reference
Chapter 10 Certificate Profiles 477
Subject Name Constraint
This constraint implements the subject name constraint. It checks if the subject
name in the certificate request satisfies the criteria.
Validity Constraint
This constraint implements the validity constraint. It checks if the validity in the
certificate request satisfies the criteria.
Table 10-23 Signing Algorithms Constraint Configuration Parameters
Parameter Description
signingAlgsAllowed
List the signing algorithms that can be specified for use in
signing this certificate. Specify any or all of the following:
MD2withRSA,MD5withRSA,SHA1withRSA
Table 10-24
Subject Name Constraint Configuration Parameters
Parameter Description
Pattern
Specifies a regular expression specified as a string, all
regular-expression constructs listed in
http://java.sun.com/j2se/1.4.1/docs/api/jav
a/util/regex/Pattern.html
are supported.
For example, if you have the pattern of the subject name
constraint set to
UID=.*
, the certificate profile framework
will check if the subject name in the certificate request
matches the pattern. Assumed that you have
UID=user,
O=Example, C=US
as the subject name, the value satisfies
the pattern UID=.* . If you have
CN=user,
O=example,C=US
, the value will not satisfy the pattern.
UID=.*
means the subject name must have
UID=.
,
.*
means zero or more times of any character