Netscape Certificate Management System 6.2, Руководство администратора

Страница: 301 / 874

Managing the Certificate Database
Chapter 7 Administrative Basics 301
• Common name—enter the name as appropriate. Except for the SSL server
certificate, the common name format can be a descriptive name of up to 255
characters. For example, you can name the Certificate Manager’s signing
certificate as “Root CA for Example Corporation”; similarly, you can name the
Registration Manager’s signing certificate as “Registration Authority for North
America”. For a SSL server certificate, the name must be the fully qualified host
name of CMS in this form:
<machine_name>.<your_domain>.<domain>
To determine the machine and domain names, go to Netscape Console, and
locate the CMS host in the navigation tree.
• Organizational unit—enter the organizational unit the server belongs to. For
example,
Marketing
.
• Organization—enter a description that identifies your organization. For
example,
Example Corporation
.
• Locality—enter the name of the city where your business is located. For
example,
Mountain View
.
• State or province—enter the name of the state or province where your business
is located. For example,
California
.
• Country—enter the name of the country where your business is located. For
example,
US
.
Step 5. Specify the Validity Period
You need to complete this step only if you chose to generate a self-signed CA
certificate request.
Specify the starting and ending dates of the validity period for the certificate
request you want to generate. You can also specify the time at which the validity
period should start and end on those dates.
The default validity period is two years.
Step 6. Specify Extensions
You need to complete this step only if you chose to generate a CA signing
certificate request for a Certificate Manager (deployed as either the root CA or a
subordinate CA).
This screen allows you to set the standard X.509 version 3 extensions and
Netscape-defined extensions for the certificate to be requested. The required
extensions are chosen by default. If you want to change the default choices, be sure
to read the general guidelines explained in Appendix G, “Certificate and CRL
Extensions.”