Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 423

• Key Usage. The digital signature (bit 0), non-repudiation (bit 1), key certificate sign (bit 5), and
CRL sign (bit 6) bits are set by default. The extension is marked critical as recommended by the
PKIX standard and RFC 2459. See
• Base-64 SEQUENCE of extensions. This is for custom extensions. Paste the extension in MIME
64 DER-encoded format into the text field.
To add multiple extensions, use the ExtJoiner program. For information on using the tools, see
the Certificate System Command-Line Tools Guide.
13. The wizard generates the key pairs and displays the certificate signing request.
Requesting a Subsystem, Server, or Signing Certificate through the Console
RFC 2459
1
for a description of the Key Usage extension.
401