Chapter 18.
Key Usage Extension
The GenExtKeyUsage tool creates a base-64 encoded blob that adds ExtendedKeyUsage (OID
2.5.29.37) to the certificate. This blob is pasted into the certificate approval page when the certificate is
created.
18.1. Syntax
The GenExtKeyUsage tool has the following syntax:
GenExtKeyUsage [true|false] OID ...
Option
true | false
OID
Table 18.1.
For more information on the OIDs that can be used for each certificate type, refer to appendix A,
"Certificate and CRL Extensions," in the Certificate System Administrator's Guide.
Description
Sets the criticality. true means the extension
is critical; false means it is not critical. The
criticality value is used during the certificate
validation process. If an extension is marked as
critical, then the path validation software must be
capable of interpreting that extension.
The OID numbers that represent each certificate
type selected for the certificate.
59
Need help?
Do you have a question about the CERTIFICATE SYSTEM 7.3 - COMMAND-LINE and is the answer not in the manual?
Questions and answers