Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 446 / 564

Appendix B. Defaults, Constraints, and Extensions for Certificates and CRLs
424
Parameter Description
Method_
n
Specifies the access method for retrieving
additional information about the CA that has
issued the certificate in which the extension
appears. This is one of the following values:
• ocsp (1.3.6.1.5.5.7.48.1).
• caIssuers (1.3.6.1.5.5.7.48.2)
• renewal (2.16.840.1.113730.16.1)
LocationType_
n
Specifies the general name type for the location
that contains additional information about the CA
that has issued the certificate. This is one of the
following types:
• DirectoryName
• DNSName
• EDIPartyName
• IPAddress
• OID
• RFC822Name
• URIName
Location_
n
Specifies the address or location to get additional
information about the CA that has issued the
certificate.
• For
directoryName
, the value must be
a string form of X.500 name, similar to the
subject name in a certificate. For example,
cn=SubCA, ou=Research Dept, o=Example
Corporation, c=US
.
• For
dNSName
, the value must be a valid
fully-qualified domain name. For example,
testCA.example.com
.
• For
EDIPartyName
, the value must be an
IA5String. For example,
Example Corporation
.
• For
iPAddress
, the value must be
a valid IP address. An IPv4 address
must be in the format
n.n.n.n
or
n.n.n.n,m.m.m.m
. For example,
128.21.39.40
or
128.21.39.40,255.255.255.00
. An IPv6
address uses a 128-bit namespace, with
the IPv6 address separated by colons and
the netmask separated by periods. For