Authority Key Identifier Extension Default; Basic Constraints Extension Default - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Parameter
Enable_n
Table B.1. Authority Info Access Extension Default Configuration Parameters
B.1.2. Authority Key Identifier Extension Default
This default attaches the Authority Key Identifier extension to the certificate. The extension identifies
the public key that corresponds to the private key used by a CA to sign certificates. This default has no
parameters. If used, this extension is included in the certificate with the public key information.
This default takes the following constraint:
Section B.2.6, "No
• No Constraints; see
For general information about this extension, see
B.1.3. Basic Constraints Extension Default
This default attaches the Basic Constraint extension to the certificate. The extension identifies whether
the Certificate Manager is a CA. The extension is also used during the certificate chain verification
process to identify CA certificates and to apply certificate chain-path length constraints.
For general information about this extension, see
The following constraints can be defined with this default:
• Basic Constraints Extension Constraint; see
Constraint".
• Extension Constraint; see
Section B.2.6, "No
• No Constraints; see
Description
• For OID, the value must be a unique, valid OID
• For RFC822Name, the value must be a valid
• For URIName, the value must be a non-
Specifies whether this location is enabled. Select
true to enable, false to disable.
Constraint".
Section B.3.2,
Section B.3.3,
Section B.2.1, "Basic Constraints Extension
Section B.2.3, "Extension
Constraint".

Authority Key Identifier Extension Default

example, 0:0:0:0:0:0:13.1.68.3, FF01::43,
0:0:0:0:0:0:13.1.68.3,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:25
and
FF01::43,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FF00:0000.
specified in dot-separated numeric component
notation. For example, 1.2.3.4.55.6.5.99.
Internet mail address.
relative universal resource identifier (URI)
following the URL syntax and encoding rules.
The name must include both a scheme,
such as http, and a fully-qualified domain
name or IP address of the host. For example,
http://ocspResponder.example.com:8000.
Certificate System allows both IPv4 and IPv6
IP addresses.
"authorityKeyIdentifier".
"basicConstraints".
Constraint".
425