Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 497

Parameter
Table B.36. FreshestCRL Configuration Parameters
B.4.2.1.6. issuerAltName
The Issuer Alternative Name extension allows additional identities to be associated with the issuer
of the CRL, like binding attributes such as a mail address, a DNS name, an IP address (both IPv4
and IPv6), and a uniform resource indicator (URI), with the issuer of the CRL. For details, see the
discussion under certificate extensions at
OID
2.5.29.18
Parameters
Parameter
enable
critical
numNames
nameTypen
Standard X.509 v3 CRL Extensions Reference
Description
name, similar to the subject name in a certificate.
For example, CN=CACentral,OU=Research
Dept,O=Example Corporation,C=US.
If pointType is set to URIName, the name
must be a URI; the URI must be an absolute
pathname and must specify the host. For
example, http://testCA.example.com/get/crls/
here/.
Section B.3.7, "issuerAltName
Description
Sets whether the extension rule is enabled; by
default, this is disabled.
Sets whether the extension is critical; by default,
this is noncritical.
Sets the total number of alternative names or
identities permitted in the extension. Each name
has a set of configuration parameters, nameType
and name, which must have appropriate values
or the rule returns an error. Change the total
number of identities by changing the value
specified in this field; there is no limit on the total
number of identities that can be included in the
extension. Each set of configuration parameters
is distinguished by an integer derived from the
value of this field. For example, if the numNames
parameter is set to 2, the derived integers are 0
and 1.
Specifies the general-name type; this can be any
of the following:
• rfc822Name if the name is an Internet mail
address.
Extension".
475