Subject Alternative Name Extension; Syntax - Red Hat CERTIFICATE SYSTEM 8 - COMMAND-LINE Manual

Chapter 19.

Subject Alternative Name Extension

The GenSubjectAltNameExt creates a base-64 encoded blob to add the alternate subject name
extension, SubjectAltNameExt (OID 2.5.29.17), to the new certificate. This blob is pasted into the
certificate approval page when the certificate is created.

19.1. Syntax

The GenSubjectAltNameExt tool uses parameter pairs where the first parameter specifies the type
of name format, and the second parameter gives that name in the specified format.
This tool has the following syntax:
GenSubjectAltNameExt general_type# ... general_name# ...
Parameter
general_type
general_name
Description
Sets the type of name that is used. This can be any of the following strings:
• RFC822Name
• DNSName
• EDIPartyName
• URIName
• IPAddressName
• OIDName
• X500Name
A string, conforming to the specified format, of the subject name.
• For RFC822Name, the value must be a valid Internet mail address. For example
• For DNSName, the value must be a valid fully-qualified domain name. For examp
• For EDIPartyName, the value must be an IA5String. For example, Example C
• For URIName, the value must be a non-relative URI following the URL syntax an
both a scheme, such as http, and a fully qualified domain name or IP address
testCA.example.com.
• For IPAddressName, the value must be a valid IP address. An IPv4 address m
n.n.n.n,m.m.m.m. For example, 128.21.39.40 or 128.21.39.40,255.2
128-bit namespace, with the IPv6 address separated by colons and the netmas
0:0:0:0:0:0:13.1.68.3, FF01::43, 0:0:0:0:0:0:13.1.68.3,FFFF:F
and FF01::43,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FF00:0000.
• For OIDName, the value must be a unique, valid OID specified in dot-separated
1.2.3.4.55.6.5.99.
• For X500Name, the value must be a string form of X.500 name, similar to the su
cn=SubCA, ou=Research Dept, o=Example Corporation, c=US.
57