Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual page 158

CertificateRenewalWindowExt Plug-in Module
Description of parameters defined in the CertificateRenewalWindowExt module (Continued)
Table 4-6
Parameter
relativeEndTime
158 Netscape Certificate Management System Plug-ins Guide • October 2001
Description
Specifies the last opportunity for automatic renewal of the certificate that contains
this extension. Specifying a value for this parameter is optional; if you leave the
field blank, the certificate-using application is expected to use the expiration date
(notAfter value) in the certificate.
Permissible values: 0 or n.
• 0 specifies that the renewal window ends at the same time the certificate
expires; the endTime field of the extension will be set to the time the
certificate expires.
• n specifies a past or future time, in seconds, by which the certificate must be
renewed; the endTime field of the extension will be set to the specified time
since certificate issuance. You can specify the time period in seconds, minutes,
hours, days, or months. Use the following suffixes to indicate the time unit.
s - seconds
m - minutes
h - hours
D - days
M - months
For example, if you're issuing certificates with a validity period of two years
and want the renewal window to end a month after the certificates expire, and
want to specify the interval in months, you would enter 25M in this field. On
the other hand, if you want the renewal window to end 15 days before
certificates expire, then you would set the value to 705D ((23 months x 30
days) + 15 days).
Note that if you choose to extend the renewal window after the expiration
date of the certificate itself, your CA must maintain appropriate status
information about the certificate during that window in order to allow
appropriate authentication in the renewal process. (Automatic renewal may
take place after the certificate has expired, when it is not valid for other
purposes.)
Example: 705D