Netscape Certificate Management System 6.2, Руководство администратора

Страница: 460 / 874

Defaults Reference
460 Netscape Certificate Management System Administrator’s Guide • June 2003
Netscape Comment Extension Default
This default populates a Netscape comment extension in the certificate request. The
extension can be used to include textual comments in certificates. Applications that
are capable of interpreting the comment may display it to a relying party when the
certificate is used or viewed.
For general information about this extension, see “netscape-comment” on
page 776.
You can define the following constraints with this default:
• Extension Constraint, see “Extension Constraint,” on page 473.
• No Constraints, see “No Constraint,” on page 475.
Netscape Certificate Type Extension Default
This default populates a Netscape Certificate Type extension in the certificate
request. The extension identifies the certificate type—for example, it identifies
whether the certificate is a CA certificate, server SSL certificate, client SSL
certificate, object signing certificate, or S/MIME certificate—and thus enables you
to restrict the usage of a certificate to predetermined purposes.
• If the extension exists in a certificate, it limits the uses of the certificate to those
specified (it limits the applications for a certificate).
• If the extension is not present, the certificate can be used for all applications
except object signing.
ExcludedSubtree
Enable_<n>
Select true to enable this excluded subtree entry, select false to
disable this excluded subtree entry.
Table 10-9 Netscape Comment Extension Configuration Parameters
Parameter Description
critical
Select true to mark this extension critical; select false to mark the
extension noncritical.
CommentContent
Specifies the content of the comment to appear in the certificate.
Table 10-8 Name Constraints Extension Default Configuration Parameters (Continued)
Parameter Description