Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 495 / 564

Standard X.509 v3 CRL Extensions Reference
473
OID
2.5.29.35
Parameters
Parameter Description
enable Specifies whether the rule is enabled or disabled.
The default is to have this extension disabled.
critical Sets whether the extension is marked as critical;
the default is noncritical.
Table B.33. AuthorityKeyIdentifierExt Configuration Parameters
B.4.2.1.3. CRLNumber
The CRLNumber extension specifies a sequential number for each CRL issued by a CA. It allows
users to easily determine when a particular CRL supersedes another CRL. PKIX requires that all
CRLs have this extension.
OID
2.5.29.20
Criticality
This extension must not be critical.
Parameters
Parameter Description
enable Specifies whether the rule is enabled, which is
the default.
critical Sets whether the extension is marked as critical;
the default is noncritical.
Table B.34. CRLNumber Configuration Parameters
B.4.2.1.4. deltaCRLIndicator
The deltaCRLIndicator extension generates a delta CRL, a list only of certificates that have been
revoked since the last CRL; it also includes a reference to the base CRL. This updates the local
database while ignoring unchanged information already in the local database. This can significantly
improve processing time for applications that store revocation information in a format other than the
CRL structure.
OID
2.5.29.27