Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 11

B.1.12. No Default Extension ........................................................................... 440
B.1.13. OCSP No Check Extension Default ...................................................... 440
B.1.14. Policy Constraints Extension Default ..................................................... 441
B.1.15. Policy Mappers Extension Default ......................................................... 442
B.1.16. Signing Algorithm Default ..................................................................... 443
B.1.17. Subject Alternative Name Extension Default .......................................... 443
B.1.18. Subject Directory Attributes Extension Default ....................................... 447
B.1.19. Subject Key Identifier Extension Default ................................................ 448
B.1.20. Subject Name Default .......................................................................... 448
B.1.21. Token Supplied Subject Name Default .................................................. 449
B.1.22. User Supplied Extension Default ........................................................... 449
B.1.23. User Key Default ................................................................................. 450
B.1.24. User Signing Algorithm Default ............................................................. 450
B.1.25. User Subject Name Default .................................................................. 451
B.1.26. User Validity Default ............................................................................ 451
B.1.27. Validity Default ..................................................................................... 451
B.2. Constraints Reference ...................................................................................... 451
B.2.1. Basic Constraints Extension Constraint ................................................... 452
B.2.2. Extended Key Usage Extension Constraint .............................................. 453
B.2.3. Extension Constraint .............................................................................. 453
B.2.4. Key Constraint ...................................................................................... 453
B.2.5. Key Usage Extension Constraint ............................................................ 453
B.2.6. No Constraint ........................................................................................ 455
B.2.7. Netscape Certificate Type Extension Constraint ....................................... 455
B.2.8. Renewal Grace Period Constraint ........................................................... 455
B.2.9. Signing Algorithm Constraint .................................................................. 456
B.2.10. Subject Name Constraint ..................................................................... 456
B.2.11. Unique Subject Name Constraint .......................................................... 457
B.2.12. Validity Constraint ................................................................................ 457
B.3. Standard X.509 v3 Certificate Extension Reference ............................................ 457
B.3.1. authorityInfoAccess ................................................................................ 459
B.3.2. authorityKeyIdentifier ............................................................................. 460
B.3.3. basicConstraints .................................................................................... 461
B.3.4. certificatePoliciesExt .............................................................................. 461
B.3.5. CRLDistributionPoints ............................................................................ 461
B.3.6. extKeyUsage ......................................................................................... 462
B.3.7. issuerAltName Extension ....................................................................... 463
B.3.8. keyUsage .............................................................................................. 463
B.3.9. nameConstraints .................................................................................... 464
B.3.10. OCSPNocheck .................................................................................... 464
B.3.11. policyConstraints .................................................................................. 465
B.3.12. policyMappings .................................................................................... 465
B.3.13. privateKeyUsagePeriod ........................................................................ 466
B.3.14. subjectAltName .................................................................................... 466
B.3.15. subjectDirectoryAttributes ..................................................................... 466
B.3.16. subjectKeyIdentifier .............................................................................. 467
B.4. CRL Extensions ............................................................................................... 467
B.4.1. About CRL Extensions ........................................................................... 467
B.4.2. Standard X.509 v3 CRL Extensions Reference ........................................ 471
B.4.3. Netscape-Defined Certificate Extensions Reference ................................. 480
C. Publishing Module Reference 483
xi