Red Hat CERTIFICATE SYSTEM 7.2 - COMMAND-LINE TOOLS Manual page 84

Chapter 19. Issuer Alternative Name Extension
Parameter
72
Description
o=Example Corporation, c=US
• For , the value must be a valid
DNSName
fully-qualified domain name. For example,
.
testCA.example.com
• For , the value must be an
EDIPartyName
IA5String. For example,
.
Corporation
• For , the value must be a
URIName
non-relative URI following the URL syntax
and encoding rules. The name must include
both a scheme, such as
qualified domain name or IP address of the
host. For example,
http://testCA.example.com
• For , the value must be a valid
IPAddress
IP address. An IPv4 address must be in the
format or
n.n.n.n n.n.n.n,m.m.m.m
example,
128.21.39.40
128.21.39.40,255.255.255.00
address with netmask is separated by a
comma. For example,
0:0:0:0:0:0:13.1.68.3
0:0:0:0:0:0:13.1.68.3,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:2
and
FF01::43,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FF00:0000
• For , the value must be a unique,
OIDName
valid OID specified in dot-separated
numeric component notation. For example,
.
1.2.3.4.55.6.5.99
• is used for names with any
OtherName
other format; this supports
,
PrintableString IA5String
,
UTF8String BMPString
.
KerberosName PrintableString
,
IA5String UTF8String
set a string to a base-64 encoded file
Any
specifying the subtree, such as
/var/lib/rhpki-ca/othername.txt
has the format
KerberosName
Realm|NameType|NameStrings, such as
.
Example
, and a fully
http
.
. For
or
. An IPv 6
, ,
FF01::43
,
, , and
Any
,
, , and
BMPString
.
.