Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 460

Appendix B. Defaults, Constraints, and Extensions for Certificates and CRLs
Parameter
ExcludedSubtreeMax_n
ExcludedSubtreeNameChoice_n
ExcludedSubtreeNameValue_n
438
Description
• n must be an integer that is greater than zero.
This sets the minimum number of required
subtrees.
Specifies the maximum number of excluded
subtrees.
• -1 specifies that the field should not be set in
the extension.
• 0 specifies that the maximum number of
subtrees is zero.
• n must be an integer that is greater than zero.
This sets the maximum number of allowed
subtrees.
Specifies the general name type for the excluded
subtree to include in the extension. The
permissible values are as follows:
• RFC822Name
• DirectoryName
• DNSName
• EDIPartyName
• URIName
• IPAddress
• OIDName
• OtherName
Specifies the general name value for the
permitted subtree to include in the extension.
• For RFC822Name, the value must be a
valid Internet mail address. For example,
testCA@example.com.
• For DirectoryName, the value must be
an X.500 name, similar to the subject name
in a certificate. For example, cn=SubCA,
ou=Research Dept, o=Example Corporation,
c=US.
• For DNSName, the value must be a valid
fully-qualified domain name. For example,
testCA.example.com.
• For EDIPartyName, the value must be an
IA5String. For example, Example Corporation.