Privatekeyusageperiodext; Removebasicconstraintsext - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Extension-Specific Policy Module Reference

PrivateKeyUsagePeriodExt

The
PrivateKeyUsagePeriodExt
Usage Period Extension to certificates. The extension allows the certificate issuer to specify
a different validity period for the private key than the one specified for the corresponding
certificate. The extension is intended for use with digital signature keys.
For general information about this extension, see "privateKeyUsagePeriod" on page 739.
Table 12-37 PrivateKeyUsagePeriodExt Configuration Parameters
Parameter Description
Specifies whether the rule is enabled or disabled. Select to enable, deselect to disable.
enable
Specifies the predicate expression for this rule. If you want this rule to be applied to all
predicate
certificate requests, leave the field blank (default). To form a predicate expression, see "Using
Predicates in Policy Rules," on page 465.
Select to mark critical, deselect to mark noncritical (default).
critical
Specifies the date on which the validity period for the private key associated with the
notBefore
certificate begins.
Permissible values: A valid date specified in the MM/DD/YYYY format.
Example: 03/30/2002
Specifies the date on which the validity period for the private key associated with the
notAfter
certificate ends.
Permissible values: A valid date specified in the MM/DD/YYYY format.
Example: 09/26/2002

RemoveBasicConstraintsExt

The
RemoveBasicConstraintsExt
constraints extension policy. This policy, if enabled, can detect the presence of Basic
Constraints extension in a certificate request and remove it.
For general information about the Basic Constraints extension, see "basicConstraints" on
page 732.
534 Red Hat Certificate System Administrator's Guide • September 2005
plug-in module enables you to add the Private Key
plug-in module implements the remove basic