Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 59 / 866

System Overview
Chapter 1 Introduction to Certificate Management System 59
BasicConstraintsExt Adds the Basic Constraints extension to certificates of a specified type.
This extension is used during the certificate chain verification process to
identify CA certificates and to apply certificate chain path length
constraints.
CertificatePoliciesExt Adds the Certificate Policies extension to certificates. The extension
contains a sequence of one or more policy statements, each indicating the
policy under which the certificate has been issued and identifying the
purposes for which the certificate may be used.
CertificateRenewalWindowExt Adds the Certificate Renewal Window extension to certificates. The
extension specifies how to renew a certificate automatically and when
automatic renewal should be attempted.
CertificateScopeOfUseExt Adds the Certificate Scope of Use extension to SSL client certificates. This
extension specifies Internet addresses where the certificate can be
presented for SSL client authentication. This restriction prevents any
private information that might be contained in the certificate from being
released to servers not explicitly contained in the scope of use.
CRLDistributionPointsExt Adds the CRL Distribution Points extension to certificates. This extension
identifies one or more locations from where the application that is
validating the certificate can obtain the CRL information.
ExtendedKeyUsageExt Adds the Extended Key Usage extension to certificates. The extension
identifies one or more purposes—in addition to or in place of the basic
purposes indicated in the key usage extension—for which the certified
public key may be used.
GenericASN1Ext Adds ASN.1 type custom extension to certificates. This policy enables
you to configure Certificate Management System to add custom
extensions to certificates.
IssuerAltNameExt Adds the Issuer Alternative Name extension to certificates. This
extension enables binding of or associating Internet style identities, such
as Internet electronic mail address, a DNS name, an IP address, and a
uniform resource indicator (URI), with the certificate issuer.
KeyUsageExt Adds the Key Usage extension to certificates of a specified type. This
extension defines the purpose of the key contained in the certificate. The
Key Usage, Extended Key Usage, Basic Constraints, and Netscape
Certificate Type extensions act together to specify the purposes for which
a certificate can be used.
NameConstraintsExt Adds the Name Constraints extension to certificates. The extension is
used in CA certificates to indicate a name space within which subject
names or subject alternative names in subsequent certificates in a
certification path or chain should be located.
Table 1-4
Policy plug-in modules for setting extensions in certificates (Continued)
Plug-in module name Description