Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 458

Appendix B. Defaults, Constraints, and Extensions for Certificates and CRLs
Parameter
PermittedSubtreesmax_n
PermittedSubtreeNameChoice_n
PermittedSubtreeNameValue_n
436
Description
Specifies the maximum number of permitted
subtrees.
• -1 specifies that the field should not be set in
the extension.
• 0 specifies that the maximum number of
subtrees is zero.
• n must be an integer that is greater than zero.
It sets the maximum number of subtrees
allowed.
Specifies the general name type for the permitted
subtree to include in the extension. The
permissible values are as follows:
• RFC822Name
• DirectoryName
• DNSName
• EDIPartyName
• URIName
• IPAddress
• OIDName
• OtherName
Specifies the general name value for the
permitted subtree to include in the extension.
• For RFC822Name, the value must be a
valid Internet mail address. For example,
testCA@example.com.
• For DirectoryName, the value must be
a string form of X.500 name, similar to the
subject name in a certificate. For example,
cn=SubCA, ou=Research Dept, o=Example
Corporation, c=US.
• For DNSName, the value must be a valid
fully-qualified domain name. For example,
testCA.example.com.
• For EDIPartyName, the value must be an
IA5String. For example, Example Corporation.
• For URIName, the value must be a non-relative
URI following the URL syntax and encoding