Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 441

Table 11-8 Name Constraints Extension Default Configuration Parameters (Continued)
Parameter
ExcludedSubtree
NameChoice_<n>
ExcludedSubtrees
NameValue_<n>
Description
Specifies the general-name type for the excluded subtree you want to
include in the extension.
Permissible values: RFC822Name, DirectoryName, DNSName,
EDIPartyName, URIName, IPAddress, OIDName, or
OtherName.
Specifies the general-name value for the permitted subtree you want to
include in the extension.
• If you selected RFC822Name, the value must be a valid Internet
mail address in fully-qualified DNS format. For example,
testCA@example.com.
• If you selected DirectoryName, the value must be a string form
of X.500 name, similar to the subject name in a certificate. For
example, CN=SubCA, OU=Research Dept, O=Example
Corporation, C=US.
• If you selected DNSName, the value must be a valid domain name
in the fully-qualified DNS format. For example,
testCA.example.com.
• If you selected EDIPartyName, the value must be a IA5String.
For example, Example Corporation.
• If you selected URIName, the value must be a non-relative
universal resource identifier (URI) following the URL syntax and
encoding rules. The name must include both a scheme (for
example, http) and a fully qualified domain name or IP address
of the host. For example, http://testCA.example.com.
• If you selected IPAddress, the value must be a valid IP address
(IPv4 or IPv6).
IPv4 address must be in n.n.n.n format, with netmask must be
in n.n.n.n,m.m.m.m format. For example: 128.21.39.40.
or 128.21.39.40,255.255.255.00.
IPv 6 (IPv6) address with netmask is separated by a comma. FOr
Example 0:0:0:0:0:0:13.1.68.3 and FF01::43; and
0:0:0:0:0:0:13.1.68.3,FFFF:FFFF:FFFF:FFFF:FF
FF:FFFF:255.255.255.0 and
FF01::43,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FF00:
0000.
• If you selected OIDName, the value must be a unique, valid OID
specified in dot-separated numeric component notation. For
example, 1.2.3.4.55.6.5.99.
Defaults Reference
Chapter 11 Certificate Profiles 441