Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual page 152

CertificatePoliciesExt Plug-in Module
Description of parameters defined in the CertificatePoliciesExt module (Continued)
Table 4-5
Parameter
critical
policyId
organizationName
cpsURI
152 Netscape Certificate Management System Plug-ins Guide • October 2001
Description
Specifies whether the extension should be marked critical or noncritical in
certificates specified by the predicate parameter. Check the box if you want the
server to mark the extension critical. Uncheck the box if you want the server to
mark the extension noncritical (default).
Specifies the OID assigned to the policy statement you want to include in the
extension. If you specify a valid OID, the server includes the OID in the extension.
The policyId, if specified, identifies by number a particular textual statement
prepared by your organization (which is specified by the parameter named
organizationName, listed next in this table). For example, it might identify the
organization as Siroe Corporation and notice number 1.2.3.4.5.6.99.
Typically, applications validating the certificate will have a notice file containing
the current set of notices for your company; these application will interpret the
number in the certificate by extracting the notice text that corresponds to the
number from the file and display it to the relying party.
Permissible values: A unique, valid OID specified in dot-separated numeric
component notation (see the example). Although you can invent your own OIDs
for the purposes of evaluating and testing this server, in a production environment,
you should comply with the ISO rules for defining OIDs and for registering
Appendix B, "Object Identifiers"
subtrees of IDs. See
allocating private OIDs.
Example: 2.16.840.1.113730.1.99
Specifies the name of the organization that owns the OID or is the owner of the
policy statement referenced by the OID.
Permissible values: The name of a company or its organizational unit.
Example: Siroe Corporation
Specifies the location where the Certification Practice Statement published by the
CA (that has issued the certificate) can be found.
Permissible values: An IA5String value. The PKIX standard recommends that the
pointer should be in the form of a URI.
Example: http://testCA.siroe.com/CPS_statement
for information on