Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual page 206

NameConstraintsExt Plug-in Module
Table 4-16 Description of parameters defined in the NameConstraintsExt module (Continued)
Parameter
permittedSubtrees<n>.
max
excludedSubtrees<n>.
base.generalNameChoice
excludedSubtrees<n>.
base.generalNameValue
206 Netscape Certificate Management System Plug-ins Guide • October 2001
Description
Specifies the maximum number of permitted subtrees.
Permissible values: -1, 0, or n.
• -1 specifies that the field should not be set in the extension (default).
• 0 specifies that the maximum number of subtrees is zero.
• n must be an integer that is greater than zero. It specifies at the most n
subtrees are allowed.
Example: 1
Specifies the general-name type for the excluded subtree you want to
include in the extension.
Permissible values: rfc822Name, directoryName, dNSName,
ediPartyName, URL, iPAddress, OID, or otherName.
• Select rfc822Name if the subtree is an Internet mail address.
• Select directoryName if the subtree is an X.500 directory name.
• Select dNSName if the subtree is a DNS name.
• Select ediPartyName if the subtree is a EDI party name.
• Select URL if the subtree is a uniform resource locator.
• Select iPAddress if the subtree is an IP address.
• Select OID if the subtree is an object identifier.
• Select otherName if the subtree is in any other name form.
Example: OID
Specifies the general-name value for the excluded subtree you want to
include in the extension.
Permissible values: Depends on the general-name type you selected in the
excludedSubtrees<n>.base.generalNameChoice field.
• If you selected rfc822Name, the value must be a valid Internet mail
address in the local-part@domain format; see the definition of an
rfc822Name as defined in RFC 822
(http://www.ietf.org/rfc/rfc0822.txt). You may use upper
and lower case letters in the mail address; no significance is attached to
the case. For example, testCA@siroe.com.