Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 498 / 564

Appendix B. Defaults, Constraints, and Extensions for Certificates and CRLs
476
Parameter Description
•
directoryName
if the name is an X.500
directory name.
•
dNSName
if the name is a DNS name.
•
ediPartyName
if the name is a EDI party
name.
•
URL
if the name is a URI (default).
•
iPAddress
if the name is an IP address. An
IPv4 address must be in the format
n.n.n.n
or
n.n.n.n,m.m.m.m
. For example,
128.21.39.40
or
128.21.39.40,255.255.255.00
. An IPv6
address uses a 128-bit namespace, with
the IPv6 address separated by colons and
the netmask separated by periods. For
example,
0:0:0:0:0:0:13.1.68.3
,
FF01::43
,
0:0:0:0:0:0:13.1.68.3,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:255.255.255.0
,
and
FF01::43,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FF00:0000
.
•
OID
if the name is an object identifier.
•
otherName
if the name is in any other name
form; this supports
PrintableString
,
IA5String
,
UTF8String
,
BMPString
,
Any
,
and
KerberosName
.
name
n
Specifies the general-name value; the allowed
values depend on the name type specified in the
nameType
field.
• For
rfc822Name
, the value must be a valid
Internet mail address in the
local-part@domain
format.
• For
directoryName
, the value must
be a string X.500 name, similar to
the subject name in a certificate. For
example,
CN=CACentral,OU=Research
Dept,O=Example Corporation,C=US
.
• For
dNSName
, the value must be a valid
domain name in the DNS format. For example,
testCA.example.com
.
• For
ediPartyName
, the name must be an
IA5String. For example,
Example Corporation
.
• For
URL
, the value must be a non-relative URI.
For example,
http://testCA.example.com
.