Netscape Certificate Management System 6.2, Руководство администратора

Страница: 451 / 874

Defaults Reference
Chapter 10 Certificate Profiles 451
Extended Key Usage Extension Default
This default populates the Extended Key Usage extension in the certificate request.
Reasons_<n>
Specifies revocation reasons covered by the CRL
maintained at the distribution point. Provide a
comma-separated list of the following constants:
• unused
• keyCompromise
• cACompromise
• affiliationChanged
• superseded
• cessationOfOperation
•
certificateHold
IssuerName_<n>
Specifies the name of the issuer that has signed the CRL
maintained at the distribution point, the name can be in
any of the following formats:
• An X.500 directory name in the RFC 2253 syntax. For
example:
CN=CA Central, OU=Research Dept,
O=Example Corporation, C=US
• A URIName; for example, it would look similar to
this:
http://testCA.example.com:80
IssuerType_<n>
Specifies the general-name type of the CRL issuer that has
signed the CRL maintained at distribution point.
Permissible values:
DirectoryName
or
URIName
. The
value you specify for this parameter must correspond to
the value in the
issuerName
field.
• Select
DirectoryName
if the value in the
issuerName
field is an X.500 directory name.
• Select
URIName
if the value in the
issuerName
field
is a uniform resource indicator.
Table 10-3 CRL Distribution Points Extension Configuration Parameters (Continued)
Parameter Description