Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 497 / 564

Standard X.509 v3 CRL Extensions Reference
475
Parameter Description
name, similar to the subject name in a certificate.
For example,
CN=CACentral,OU=Research
Dept,O=Example Corporation,C=US
.
If
pointType
is set to
URIName
, the name
must be a URI; the URI must be an absolute
pathname and must specify the host. For
example,
http://testCA.example.com/get/crls/
here/
.
Table B.36. FreshestCRL Configuration Parameters
B.4.2.1.6. issuerAltName
The Issuer Alternative Name extension allows additional identities to be associated with the issuer
of the CRL, like binding attributes such as a mail address, a DNS name, an IP address (both IPv4
and IPv6), and a uniform resource indicator (URI), with the issuer of the CRL. For details, see the
discussion under certificate extensions at
Section B.3.7, “issuerAltName Extension”
.
OID
2.5.29.18
Parameters
Parameter Description
enable Sets whether the extension rule is enabled; by
default, this is disabled.
critical Sets whether the extension is critical; by default,
this is noncritical.
numNames Sets the total number of alternative names or
identities permitted in the extension. Each name
has a set of configuration parameters,
nameType
and
name
, which must have appropriate values
or the rule returns an error. Change the total
number of identities by changing the value
specified in this field; there is no limit on the total
number of identities that can be included in the
extension. Each set of configuration parameters
is distinguished by an integer derived from the
value of this field. For example, if the
numNames
parameter is set to
2
, the derived integers are
0
and
1
.
nameType
n
Specifies the general-name type; this can be any
of the following:
•
rfc822Name
if the name is an Internet mail
address.