Signing Algorithm Default; Subject Alternative Name Extension Default - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Parameter
SubjectDomainPolicy_n
Table B.13. Policy Mappings Extension Default Configuration Parameters
B.1.16. Signing Algorithm Default
This default attaches a signing algorithm in the certificate request. This default presents an agent with
the possible algorithms that can be used for signing the certificate.
The following constraints can be defined with this default:
• Signing Algorithm Constraint; see
• No Constraints; see
Parameter
signingAlg
signingAlgsAllowed
Table B.14. Signing Algorithm Default Configuration Parameters
B.1.17. Subject Alternative Name Extension Default
This default attaches a Subject Alternative Name extension to the certificate. The extension binds
additional identities, such as an email address, a DNS name, an IP address (both IPv4 and IPv6),
or a URI, to the subject of the certificate. The standard requires that if the certificate subject field
contains an empty sequence, then the Subject Alternative name extension must contain the subject's
alternative name and that the extension be marked critical.
For any of the directory-based authentication methods, the Certificate System can retrieve values
for any string and byte attributes and set them in the certificate request. These attributes are set by
Section B.2.9, "Signing Algorithm
Section B.2.6, "No Constraint".
Description
policy statement of another CA. For example,
1.2.3.4.5.
Specifies the OID assigned to the policy
statement of the subject CA that corresponds
to the policy statement of the issuing CA. For
example, 6.7.8.9.10.
Constraint".
Description
Specify the default signing algorithm to be
used to create this certificate. An agent can
override this value by specifying one of the
values contained in the signingAlgsAllowed
parameter.
Specify the signing algorithms that can be used
for signing this certificate. The algorithms can be
any or all of the following:
• MD2withRSA
• MD5withRSA
• SHA1withRSA
• SHA256withRSA
• SHA512withRSA
• SHA1withEC (if ECC is enabled)

Signing Algorithm Default

443