Netscape Certificate Management System 6.0, Руководство пользователя, Страница: 289 / 377

IssuerAlternativeName Rule
Chapter 7 CRL Extension Plug-in Modules 289
IssuerAlternativeName Rule
The
IssuerAlternativeName
rule enables you to configure a Certificate Manager
to set the Issuer Alternative Name Extension defined in X.509 and PKIX standard RFC
2459 (see
http://www.ietf.org/rfc/rfc2459.txt
) in CRLs. This extension
enables binding of or associating alternative identities, such as Internet electronic
mail address, a DNS name, an IP address, and a uniform resource indicator (URI),
with the issuer of the CRL.
The
IssuerAlternativeName
rule enables you to associate the following identities
with a CRL issuer, by including them in the extension:
• An rfc822Name
• A DNS name
• A directory name
• A uniform resource indicator (URI)
• An IP address
• An object identifier (OID)
For general guidelines on setting the issuer alternative name extension in CRLs, see
“issuerAltName” on page 363.
Figure 7-7 shows how configurable parameters for the
IssuerAlternativeName
rule are displayed in the CMS window.
Figure 7-7 Parameters defined in the IssuerAlternativeName rule