Invaliditydate Rule - Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual

Table 7-6 Description of parameters defined in the HoldInstruction rule
Parameter Description
Specifies whether the rule is enabled or disabled. Check the box to enable the rule.
enable
Uncheck the box to disable the rule (default).
• If you enable the rule and set the remaining parameters correctly, the server sets
• If you disable the rule, the server does not add the extension to CRLs; it ignores
Specifies whether the extension should be marked critical or noncritical in CRLs
critical
issued by the server. Check the box if you want the server to mark the extension
critical. Uncheck the box if you want the server to mark the extension noncritical
(default).
Specifies the action a validating application must take when it encounters a certificate
instruction
that has been put on hold.
Permissible values: none
• none specifies that the validating application need not do anything; the PKIX
• callissuer specifies that the validating application must call the CA that has
• reject specifies that the validating application must reject the certificate on
Example: none

InvalidityDate Rule

The
InvalidityDate
Invalidity Date Extension defined in X.509 and PKIX standard RFC 2459 (see
http://www.ietf.org/rfc/rfc2459.txt
CRL entry extension that is used to specify the date on which it is known or
suspected that the private key was compromised or that the certificate otherwise
became invalid.
For general guidelines on setting the invalidity date extension in CRL entries, see
"invalidityDate" on page 366.
the Hold Instruction extension in CRLs.
the values in the remaining fields.
,
callissuer
standard says that this is semantically equivalent to the absence of a
holdInstructionCode (default).
issued the certificate or reject the certificate.
hold.
rule enables you to configure a Certificate Manager to set the
, or .
reject
) in CRLs. The extension is a non-critical
Chapter 7 CRL Extension Plug-in Modules
InvalidityDate Rule
289