Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 450 / 564

Appendix B. Defaults, Constraints, and Extensions for Certificates and CRLs
428
Parameter Description
point. The issuer name can be in any of the
following formats:
• RFC822Name
• DirectoryName
• DNSName
• EDIPartyName
• URIName
• IPAddress
• OIDName
• OtherName
IssuerName_
n
Specifies the name format of the CRL issuer that
signed the CRL. The permissible values are as
follows:
• For
RFC822Name
, the value must be a
valid Internet mail address. For example,
testCA@example.com
.
• For
DirectoryName
, the value must be
a string form of X.500 name, similar to the
subject name in a certificate. For example,
cn=SubCA, ou=Research Dept, o=Example
Corporation, c=US
.
• For
DNSName
, the value must be a valid
fully-qualified domain name. For example,
testCA.example.com
.
• For
EDIPartyName
, the value must be an
IA5String. For example,
Example Corporation
.
• For
URIName
, the value must be a non-relative
URI following the URL syntax and encoding
rules. The name must include both a scheme,
such as
http
, and a fully qualified domain
name or IP address of the host. For example,
http://testCA.example.com
. Certificate System
supports both IPv4 and IPv6 addresses.
• For
IPAddress
, the value must be
a valid IP address. An IPv4 address
must be in the format
n.n.n.n
or
n.n.n.n,m.m.m.m
. For example,
128.21.39.40
or
128.21.39.40,255.255.255.00
. An IPv6
address uses a 128-bit namespace, with