Extended Key Usage Extension Default - Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual

Parameter
Table 13.5. CRL Distribution Points Extension Configuration Parameters

13.7.5. Extended Key Usage Extension Default

This default attaches the Extended Key Usage extension to the certificate.
For general information about this extension, see
The extension identifies the purposes, in addition to the basic purposes indicated in the Key Usage
extension, for which the certified public key may be used. For example, if the key usage extension
identifies a signing key, the Extended Key Usage extension can narrow the usage of the key for only
signing OCSP responses or only Java™ applets.
Usage
Server authentication
Client authentication
Code signing
Email
IPsec end system
IPsec tunnel
IPsec user
Timestamping
Table 13.6. PKIX Usage Definitions for the Extended Key Usage Extension
Windows 2000 can encrypt files on the hard disk, a feature known as encrypted file system (EFS),
using certificates that contain the Extended Key Usage extension with the following two OIDs:
1.3.6.1.4.1.311.10.3.4 (EFS certificate)
1.3.6.1.4.1.311.10.3.4.1 (EFS recovery certificate)
Extended Key Usage Extension Default
Section A.3.6, "extKeyUsage".
297