Netscape Certificate Management System 6.2, Руководство администратора

Страница: 607 / 874

CRL Extension Reference
Chapter 14 Revocation and CRLs 607
CRLNumber
The
CRLNumber
rule enables you to configure a Certificate Manager to set the CRL
Number Extension in CRLs. This extension specifies a monotonically increasing
sequence number for each CRL issued by a CA, allowing CRL users to easily
determine when a particular CRL supersedes another CRL.
For general guidelines on setting the CRL number extension in CRLs, see
“CRLNumber” on page 772.
CRLReason
The
CRLReason
rule enables you to configure a Certificate Manager to set the CRL
ReasonCode Extension in CRL entries. The extension is used to identify the reason for
the revocation of a certificate included in the CRL.
For general guidelines on setting the CRL reason code in CRL entries, see
“reasonCode” on page 775.
For a list of reason codes, see “Reasons for Revoking a Certificate,” on page 597.
Table 14-2 CRLNumber Configuration Parameters
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Select to enable
(default), deselect to disable.
critical
Select if you want the server to mark the extension critical; deselect if
you want the server to mark the extension noncritical (default).
Table 14-3 CRLReason Configuration Parameters
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Select to enable (default),
deselect to disable.
critical
Select if you want the server to mark the extension critical; deselect if you
want the server to mark the extension noncritical (default).