Chapter 16. Managing Subsystem Certificates
Figure 16.1. Setting the Certificate Extensions
NOTE
Certificate extensions are required to set up a CA hierarchy. Subordinate CAs must
have certificates that include the extension identifying them as either a subordinate
SSL CA (which allows them to issue certificates for SSL) or a subordinate email
CA (which allows them to issue certificates for secure email). Disabling certificate
extensions means that CA hierarchies cannot be set up.
• Basic Constraints. The associated fields are CA setting and a numeric setting for the
certification path length.
• Extended Key Usage.
• Authority Key Identifier.
• Subject Key Identifier.
400
Need help?
Do you have a question about the CERTIFICATE SYSTEM 8.0 - ADMINISTRATION and is the answer not in the manual?
Questions and answers