Netscape Certificate Management System 6.2, Руководство администратора

Страница: 459 / 874

Defaults Reference
Chapter 10 Certificate Profiles 459
ExcludedSubtrees
NameValue_<n>
Specifies the general-name value for the permitted subtree you
want to include in the extension.
• If you selected
RFC822Name
, the value must be a valid
Internet mail address in fully-qualified DNS format. For
example,
testCA@example.com
.
• If you selected
DirectoryName
, the value must be a string
form of X.500 name, similar to the subject name in a
certificate. For example,
CN=SubCA, OU=Research
Dept, O=Example Corporation, C=US
.
• If you selected
DNSName
, the value must be a valid domain
name in the fully-qualified DNS format. For example,
testCA.example.com
.
• If you selected
EDIPartyName
, the value must be a
IA5String. For example,
Example Corporation
.
• If you selected
URIName
, the value must be a non-relative
universal resource identifier (URI) following the URL syntax
and encoding rules. The name must include both a scheme
(for example,
http
) and a fully qualified domain name or IP
address of the host. For example,
http://testCA.example.com
.
• If you selected
IPAddress
, the value must be a valid IP
address (IPv4 or IPv6).
IPv4 address must be in
n.n.n.n
format, with netmask
must be in
n.n.n.n,m.m.m.m
format. For example:
128.21.39.40
. or
128.21.39.40,255.255.255.00
.
IPv 6 (IPv6) address with netmask is separated by a comma.
FOr Example
0:0:0:0:0:0:13.1.68.3
and
FF01::43
;
and
0:0:0:0:0:0:13.1.68.3,FFFF:FFFF:FFFF:FFFF:FF
FF:FFFF:255.255.255.0
and
FF01::43,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FF00:
0000
.
• If you selected
OIDName
, the value must be a unique, valid
OID specified in dot-separated numeric component
notation. For example,
1.2.3.4.55.6.5.99
.
• If you selected
OtherName
, the value must be the absolute
path to the file that contains the base-64 encoded string of
the subtree. For example,
/usr/netscape/servers/ext/nc/othername.txt
.
Table 10-8 Name Constraints Extension Default Configuration Parameters (Continued)
Parameter Description