Freshest Crl Extension Default - Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual

Chapter 13. Certificate Profiles
The EFS recovery certificate is used by a recovery agent when a user loses the private key and the
data encrypted with that key needs to be used. Certificate System supports these two OIDs and allows
certificates to be issued containing the Extended Key Usage extension with these OIDs.
Normal user certificates should be created with only the EFS OID, not the recovery OID.
The following constraints can be defined with this default:
• Extended Key Usage Constraint; see
• Extension Constraint; see
Section 13.8.6, "No
• No Constraints; see
Parameter
Critical
OIDs
Table 13.7. Extended Key Usage Extension Default Configuration Parameters

13.7.6. Freshest CRL Extension Default

This default attaches the Freshest CRL extension to the certificate.
The following constraints can be defined with this default:
• Extension Constraint; see
Section 13.8.6, "No
• No Constraints; see
This default defines five locations with parameters for each location. The parameters are marked with
an n in the table to show with which location the parameter is associated.
Parameter
Critical
PointEnable_n
PointType_n
298
Section 13.8.2, "Extended Key Usage Extension
Section 13.8.3, "Extension
Constraint".
Section 13.8.3, "Extension
Constraint".
Constraint".
Constraint".
Constraint".