Table of Contents
Advertisement
Standard X.509 v3 Certificate Extensions
nameConstraints
OID
2.5.29.30
Reference
http://www.ietf.org/rfc/rfc2459.txt
Criticality
PKIX Part 1 requires that this extension be marked critical.
Discussion
This extension, which can used in CA certificates only, defines a name space within
which all subject names in subsequent certificates in a certification path must be
located.
CMS Version Support
Refer to "NameConstraintsExt Plug-in Module" on page 200.
•
CMS 4.1: Not supported
•
CMS 4.2: Supported
•
CMS 4.2-SP2: Supported
Netscape Recommendation
Netscape products do not currently examine this extension.
Microsoft Recommendation
Microsoft products do not currently examine this extension.
OCSPNocheck
OID
1.3.6.1.5.5.7.48.4
Reference
http://www.ietf.org/rfc/rfc2560.txt
Criticality
This extension should be noncritical.
352
Netscape Certificate Management System Plug-ins Guide • October 2001
4.2.1.11
4.2.2.2.1
Advertisement
Table of Contents
