Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Administration Manual

Page: 489 / 554

issuerAltName Extension
467
Table A.1, “PKIX Extended Key Usage Extension Uses”
lists the uses defined by PKIX for this
extension, and
Table A.2, “Private Extended Key Usage Extension Uses”
lists uses privately defined
by Netscape.
Use OID
Server authentication 1.3.6.1.5.5.7.3.1
Client authentication 1.3.6.1.5.5.7.3.2
Code signing 1.3.6.1.5.5.7.3.3
Email 1.3.6.1.5.5.7.3.4
Timestamping 1.3.6.1.5.5.7.3.8
OCSP Signing 1.3.6.1.5.5.7.3.9
1
OCSP Signing is not defined in PKIX Part 1, but in RFC 2560,
X.509 Internet Public Key Infrastructure Online Certificate Status
Protocol - OCSP
.
Table A.1. PKIX Extended Key Usage Extension Uses
Use OID
Certificate trust list signing 1.3.6.1.4.1.311.10.3.1
Microsoft Server Gated Crypto (SGC) 1.3.6.1.4.1.311.10.3.3
Microsoft Encrypted File System 1.3.6.1.4.1.311.10.3.4
Netscape SGC 2.16.840.1.113730.4.1
Table A.2. Private Extended Key Usage Extension Uses
A.3.7. issuerAltName Extension
A.3.7.1. OID
2.5.29.18
A.3.7.2. Criticality
PKIX Part 1 recommends that this extension be marked noncritical.
A.3.7.3. Discussion
The Issuer Alternative Name extension is used to associate Internet-style identities with the certificate
issuer. Names must use the forms defined for the Subject Alternative Name extension.
A.3.8. keyUsage
A.3.8.1. OID
2.5.29.15
A.3.8.2. Criticality
This extension may be critical or noncritical. PKIX Part 1 recommends that it should be marked critical
if it is used.