Figure 10.8. Setting the Certificate Extensions
NOTE
Certificate extensions are required to set up a CA hierarchy. Subordinate CAs must
have certificates that include the extension identifying them as either a subordinate
SSL CA (which allows them to issue certificates for SSL) or a subordinate email
CA (which allows them to issue certificates for secure email). Disabling certificate
extensions means that CA hierarchies cannot be set up.
• Basic Constraints. The associated fields are CA setting and a numeric setting for the
certification path length.
• Extended Key Usage.
• Authority Key Identifier.
• Subject Key Identifier.
Requesting Certificates
207
Need help?
Do you have a question about the CERTIFICATE SYSTEM 7.2 - ADMINISTRATION and is the answer not in the manual?
Questions and answers