Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 497

Table 12-19 CertificateRenewalWindowExt Configuration Parameters (Continued)
Parameter
predicate
critical
relativeBeginTime
relativeEndTime
Description
Specifies the predicate expression for this rule. If you want this rule to be applied to all
certificate requests, leave the field blank (default). To form a predicate expression, see
"Using Predicates in Policy Rules" on page 465.
Specifies whether the extension should be marked critical or noncritical. Select to mark
critical, deselect to mark noncritical (default).
Specifies the first time automatic renewal of certificate that contains the extension should
be attempted.
Permissible values: 0 or n.
• 0 specifies that the renewal window begins at the same time the certificate is issued;
the beginTime field of the extension will be set to the time of certificate issuance.
• n specifies a future time for certificate renewal; the beginTime field of the
extension will be set to the specified time since certificate issuance. You can specify
the time period in seconds, minutes, hours, days, or months. Use the following
suffixes to indicate the time unit.
s - seconds
m - minutes
h - hours
D - days
M - months
For example, if you're issuing certificates with a validity period of two years and want
the renewal window to begin a month before the certificates expire, and want to
specify the interval in months, you would enter 23M in this field. To specify the same
validity interval in seconds, you would set the value to 59616000s (23 months x 30
days x 24 hours x 60 minutes x 60 seconds).
Example: 23M
Specifies the last opportunity for automatic renewal of the certificate that contains this
extension. Specifying a value for this parameter is optional; if you leave the field blank,
the certificate-using application is expected to use the expiration date (notAfter value)
in the certificate.
Permissible values: 0 or n.
• 0 specifies that the renewal window ends at the same time the certificate expires; the
endTime field of the extension will be set to the time the certificate expires.
Extension-Specific Policy Module Reference
Chapter 12 Policies 497