Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 498

Appendix B. Defaults, Constraints, and Extensions for Certificates and CRLs
Parameter
namen
476
Description
• directoryName if the name is an X.500
directory name.
• dNSName if the name is a DNS name.
• ediPartyName if the name is a EDI party
name.
• URL if the name is a URI (default).
• iPAddress if the name is an IP address. An
IPv4 address must be in the format n.n.n.n or
n.n.n.n,m.m.m.m. For example, 128.21.39.40
or 128.21.39.40,255.255.255.00. An IPv6
address uses a 128-bit namespace, with
the IPv6 address separated by colons and
the netmask separated by periods. For
example, 0:0:0:0:0:0:13.1.68.3, FF01::43,
0:0:0:0:0:0:13.1.68.3,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:255.255.2
and
FF01::43,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FF00:0000.
• OID if the name is an object identifier.
• otherName if the name is in any other name
form; this supports PrintableString,
IA5String, UTF8String, BMPString, Any,
and KerberosName.
Specifies the general-name value; the allowed
values depend on the name type specified in the
nameType field.
• For rfc822Name, the value must be a valid
Internet mail address in the local-part@domain
format.
• For directoryName, the value must
be a string X.500 name, similar to
the subject name in a certificate. For
example, CN=CACentral,OU=Research
Dept,O=Example Corporation,C=US.
• For dNSName, the value must be a valid
domain name in the DNS format. For example,
testCA.example.com.
• For ediPartyName, the name must be an
IA5String. For example, Example Corporation.
• For URL, the value must be a non-relative URI.
For example, http://testCA.example.com.