Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора

Страница: 292 / 512

Chapter 12. Certificate Profiles
272
12.7.10. Netscape Certificate Type Extension Default
WARNING
This extension is obsolete. Use the Key Usage or Extended Key Usage certificate
extensions instead.
This default attaches a Netscape Certificate Type extension to the certificate. The extension identifies
the certificate type, such as CA certificate, server SSL certificate, client SSL certificate, or S/MIME
certificate. This restricts the usage of a certificate to predetermined purposes.
12.7.11. Netscape Comment Extension Default
WARNING
This extension is obsolete.
This default attaches a Netscape Comment extension to the certificate. The extension can be used
to include textual comments in certificates. Applications that are capable of interpreting the comment
display it when the certificate is used or viewed.
For general information about this extension, see
Section A.6.2, “netscape-comment”
.
The following constraints can be defined with this default:
• Extension Constraint; see
Section 12.8.3, “Extension Constraint”
.
• No Constraints; see
Section 12.8.6, “No Constraint”
.
Parameter Description
critical Select
true
to mark this extension critical; select
false
to
mark the extension noncritical.
CommentContent Specifies the content of the comment to appear in the
certificate.
Table 12.12. Netscape Comment Extension Configuration Parameters
12.7.12. No Default Extension
This default can be used to set constraints when no defaults are being used. This default has no
settings and sets no defaults but does allow all of the constraints available to be set.
12.7.13. OCSP No Check Extension Default
This default attaches an OCSP No Check extension to the certificate. The extension, which should be
used in OCSP responder certificates only, indicates how OCSP-compliant applications can verify the
revocation status of the certificate an authorized OCSP responder uses to sign OCSP responses.
For general information about this extension, see
Section A.3.10, “OCSPNocheck”
.