Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Administration Manual

Page: 503 / 554

CRL Entry Extensions
481
Parameter Description
critical
Marks the extension as critical; by default, this is marked
noncritical.
instruction
Sets the action a validating application must take when it
encounters a certificate that has been put on hold; these can
be
none
,
callissuer
, or
reject
.
none
specifies that the validating application should not do
anything; the PKIX standard says that this is semantically
equivalent to disabling
holdInstructionCode
.
callissuer
specifies that the validating application must call
the CA that has issued the certificate or reject the certificate.
reject
specifies that the validating application must reject the
certificate on hold.
Table A.10. HoldInstruction Configuration Parameters
A.5.2.3. invalidityDate
A.5.2.3.1. OID
2.5.29.24
A.5.2.3.2. Discussion
The Invalidity Date extension provides the date on which the private key was compromised or that the
certificate otherwise became invalid.
A.5.2.3.3. Parameters
Parameter Description
enable
Sets whether the extension rule is enabled or disabled. By
default, this is enabled.
critical
Marks the extension as critical or noncritical; by default, this is
noncritical.
Table A.11. InvalidityDate Configuration Parameters
A.5.2.4. CRLReason
A.5.2.4.1. OID
2.5.29.21
A.5.2.4.2. Discussion
The Reason Code extension identifies the reason for certificate revocation.