Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 498

Appendix A. Certificate and CRL Extensions
Parameter
critical
Table A.6. DeltaCRL Configuration Parameters
A.5.1.4. FreshestCRL
A.5.1.4.1. OID
2.5.29.27
A.5.1.4.2. Criticality
PKIX requires that this extension must be noncritical.
A.5.1.4.3. Discussion
The freshestCRL extension identifies how delta CRL information is obtained. The freshestCRL
extension is placed in the full CRL to indicate where to find the latest delta CRL.
A.5.1.4.4. Parameters
Parameter
enable
critical
numPoints
pointTypen
pointNamen
476
Description
Sets whether the extension rule is enabled. By
default, this is disabled.
Marks the extension as critical or noncritical. The
default is noncritical.
Indicates the number of issuing points for the
delta CRL, from 0 to any positive integer; the
default is 0. When setting this to an integer other
than 0, set the number, and then click OK to
close the window. Re-open the edit window for
the rule, and the fields to set these points will be
present.
Specifies the type of issuing point for the n
issuing point. For each number specified in
numPoints, there is an equal number of
pointType parameters. The options are either
DirectoryName or URIName.
If pointType is set to directoryName, the
value must be a string in the form of an X.500
name, similar to the subject name in a certificate.
For example, CN=CACentral,OU=Research
Dept,O=Example Corporation,C=US.
If pointType is set to URIName, the name
must be a URI; the URI must be an absolute
pathname and must specify the host. For