Netscape Certificate Management System 6.2, Руководство администратора

Страница: 610 / 874

CRL Extension Reference
610 Netscape Certificate Management System Administrator’s Guide • June 2003
InvalidityDate
The
InvalidityDate
rule enables you to configure a Certificate Manager to set the
Invalidity Date Extension in CRL entries. The extension is a non-critical CRL entry
extension that is used to specify the date on which it is known or suspected that the
private key was compromised or that the certificate otherwise became invalid.
For general guidelines on setting the invalidity date extension in CRL entries, see
“invalidityDate” on page 774.
IssuerAlternativeName
The
IssuerAlternativeName
rule enables you to configure a Certificate Manager
to set the Issuer Alternative Name Extension in CRLs. This extension enables binding
of or associating alternative identities, such as a mail address, a DNS name, an IP
address, and a uniform resource indicator (URI), with the issuer of the CRL.
For general guidelines on setting the issuer alternative name extension in CRLs, see
“issuerAltName” on page 773.
Table 14-7 InvalidityDate Configuration Parameters
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Select to enable
(default), deselect to disable.
critical
Select if you want the server to mark the extension critical; deselect if
you want the server to mark the extension noncritical (default).
Table 14-8
IssuerAlternativeName Configuration Parameters
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Select to enable,
deselect to disable (disable).
critical
Select you want the server to mark the extension critical; deselect if you
want the server to mark the extension noncritical (default).