Extended Key Usage Extension Default - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Parameter
Table B.3. CRL Distribution Points Extension Configuration Parameters
B.1.5. Extended Key Usage Extension Default
This default attaches the Extended Key Usage extension to the certificate.
For general information about this extension, see
The extension identifies the purposes, in addition to the basic purposes indicated in the Key Usage
extension, for which the certified public key may be used. For example, if the key usage extension
identifies a signing key, the Extended Key Usage extension can narrow the usage of the key for only
signing OCSP responses or only Java™ applets.
Usage
Server authentication
Client authentication
Code signing
Email
IPsec end system
IPsec tunnel

Extended Key Usage Extension Default

Description
the IPv6 address separated by colons and
the netmask separated by periods. For
example, 0:0:0:0:0:0:13.1.68.3, FF01::43,
0:0:0:0:0:0:13.1.68.3,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:25
and
FF01::43,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FF00:0000.
• For OIDName, the value must be a unique,
valid OID specified in dot-separated
numeric component notation. For example,
1.2.3.4.55.6.5.99.
• OtherName is used for names with any other
format; this supports PrintableString,
IA5String, UTF8String, BMPString, Any,
and KerberosName. PrintableString,
IA5String, UTF8String, BMPString,
and Any set a string to a base-64 encoded
file specifying the subtree, such as /
var/lib/pki-ca/othername.txt.
KerberosName has the format Realm|
NameType|NameStrings, such as realm1|0|
userID1,userID2.
OtherName must have the format
(type)oid,string. For example,
(IA5String)1.2.3.4,MyExample.
The value for this parameter must correspond to
the value in the issuerName field.
Section B.3.6, "extKeyUsage".
OID
1.3.6.1.5.5.7.3.1
1.3.6.1.5.5.7.3.2
1.3.6.1.5.5.7.3.3
1.3.6.1.5.5.7.3.4
1.3.6.1.5.5.7.3.5
1.3.6.1.5.5.7.3.6
429