Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 464 / 866

Certificate Setup Wizard
464 Netscape Certificate Management System Installation and Setup Guide • October 2001
Step 6. Specify Extensions
You need to complete this step only if you chose to generate a CA signing
certificate request for a Certificate Manager (deployed as either the root CA or a
subordinate CA).
This screen allows you to set the standard X.509 version 3 extensions and
Netscape-defined extensions for the certificate to be requested. The required
extensions are chosen by default. If you want to change the default choices, be sure
to read the general guidelines explained in “Certificate and CRL Extensions” in
Appendix C of CMS Plug-ins Guide.
Also note that certificate extensions are required if you are setting up a hierarchy of
certificate authorities (CAs). Subordinate CAs must have certificates that include
the extension identifying them as either a subordinate SSL CA (which allows them
to issue certificates for SSL) or a subordinate email CA (which allows them to issue
certificates for secure email). If you disable certificate extensions, you will not be
able to set up CA hierarchies. For more information on CA hierarchies, see
“Certificate Hierarchies” in Appendix D of Managing Servers with Netscape Console.
You can set the following extensions:
• Basic constraints—select this option if you want to set any of the basic
constraints extension bits in the certificate you are requesting. When you select
the option, the associated fields are enabled. You should select the ones you
want to set.