Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 773 / 874

Standard X.509 v3 CRL Extensions
Appendix G Certificate and CRL Extensions 773
FreshestCRL
OID
2.5.29.27
Criticality
PKIX requires that this extension must be non-critical.
Discussion
The freshest CRL extension identifies how delta CRL information is obtained. The
FreshestCRL extension is placed in the full CRL to indicate where to find latest
delta CRL.
CMS Version Support
Supported since CMS 6.1. Refer to “FreshestCRL” on page 608.
issuerAltName
OID
2.5.29.18
Discussion
The Issuer Alternative Name extension allows additional identities to be associated
with the issuer of the CRL. For details, see the discussion under certificate
extensions at
issuerAltName
.
CMS Version Support
Supported since CMS 4.2. Refer to “IssuerAlternativeName” on page 610.
issuingDistributionPoint
OID
2.5.29.28
Criticality
PKIX requires that this extension be critical if it exists.
Discussion
The Issuing Distribution Point CRL extension identifies the CRL distribution point
for a particular CRL and indicates what kinds of revocation it covers.
PKIX Part I does not require this extension.