Netscape Certificate Management System 6.1, Руководство администратора

Страница: 512 / 840

Extension-Specific Policy Module Reference
512 Netscape Certificate Management System Administrator’s Guide • February 2003
Permissible values:
•
ocsp
(or
1.3.6.1.5.5.7.48.1
).
•
caIssuers
(or
1.3.6.1.5.5.7.48.2
).
•
renewal
(or
2.16.840.1.113730.16.1
)
ad<n>_location
_type
Specifies the general-name type for the location that contains additional information
about the CA that has issued the certificate in which this extension appears. Select one
type from the following:
• Select
rfc822Name
if the location is an Internet mail address.
• Select
directoryName
if the location is an X.500 directory name.
• Select
dNSName
if the location is a DNS name.
• Select
ediPartyName
if the location is a EDI party name.
• Select
URL
if the location is a uniform resource identifier (default).
• Select
iPAddress
if the location is an IP address.
• Select
OID
if the location is an object identifier.
• Select
otherName
if the location is in any other name form.
ad<n>_location
Specifies the address or location to get additional information about the CA that has
issued the certificate in which this extension appears. Specifying the information
based on the following:
• If you selected
rfc822Name
, the value must be a valid Internet mail address in
the
local-part@domain
format. You may use upper and lower case letters in
the mail address; no significance is attached to the case. For example,
ocspResponder@example.com
.
• If you selected
directoryName
, the value must be a string form of X.500 name,
similar to the subject name in a certificate. For example,
CN=corpDirectory,
OU=IS, O=example.com, C=US
.
• If you selected
dNSName
, the value must be a valid domain name in the
preferred-name syntax. You may use upper and lower case letters in the domain
name; no significance is attached to the case. Do not use the string “ ” for the DNS
name. Also don’t use the DNS representation for Internet mail addresses. For
example,
ocspResponder.example.com
.
• If you selected
ediPartyName
, the value must be an IA5String. For example,
Example Corporation
.
Table 11-15 AuthInfoAccessExt Configuration Parameters (Continued)
Parameter Description