Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора

Страница: 282 / 512

Chapter 12. Certificate Profiles
262
Parameter Description
• superseded
• cessationOfOperation
• certificateHold
IssuerName_
n
Specifies the name of the issuer that has signed the CRL
maintained at the distribution point. The name can be in any of
the following formats:
• RFC822Name
• DirectoryName
• DNSName
• EDIPartyName
• URIName
• IPAddress
• OIDName
• OtherName
IssuerType_
n
Specifies the general name type of the CRL issuer that signed
the CRL. The permissible values are as follows:
• For
RFC822Name
, the value must be a valid Internet mail
address. For example,
testCA@example.com
.
• For
DirectoryName
, the value must be a string form of
X.500 name, similar to the subject name in a certificate.
For example,
cn=SubCA, ou=Research Dept, o=Example
Corporation, c=US
.
• For
DNSName
, the value must be a valid fully-qualified
domain name. For example,
testCA.example.com
.
• For
EDIPartyName
, the value must be an IA5String. For
example,
Example Corporation
.
• For
URIName
, the value must be a non-relative URI following
the URL syntax and encoding rules. The name must
include both a scheme, such as
http
, and a fully qualified
domain name or IP address of the host. For example,
http://
testCA.example.com
.
• For
IPAddress
, the value must be a valid IP address.
An IPv4 address must be in the format
n.n.n.n
or
n.n.n.n,m.m.m.m
. For example,
128.21.39.40
or
128.21.39.40,255.255.255.00
. An IPv 6
address with netmask is separated by a comma.
For example,
0:0:0:0:0:0:13.1.68.3
,
FF01::43
,