Table of Contents
Advertisement
Netscape products read only the first alternative name in this extension, and ignore
the rest. For S/MIME certificates, Netscape software first checks the first
alternative name in this extension (if the extension is present) for the
attribute. If the first alternative name is not an
EmailAddress
attribute, Netscape software looks for the e= attribute of the DN. If the
is not present, Netscape software looks for the
Microsoft Recommendation
Microsoft recommends the use of this extension whenever X.500 guidelines are
insufficient for naming purposes. Currently, no Microsoft products require the use
of Subject Alternative Name. All Microsoft products that support S/MIME are
capable of reading email names from this extension or from the subject name.
Future versions of Microsoft Exchange Server will issue certificates with X.500
names that do not contain the Email Address attribute, and will place the SMTP
address in the Subject Alternative Name extension.
subjectDirectoryAttributes
OID
2.5.29.9
Reference
http://www.ietf.org/rfc/rfc2459.txt
Criticality
PKIX Part 1 requires that this extension be marked noncritical.
Discussion
The Subject Directory Attributes extension conveys any desired directory attribute
values for the subject of the certificate. It is not recommended as an essential part of
the proposed PKIX standard, but may be used in local environments.
CMS Version Support
Refer to "SubjectDirectoryAttributesExt Plug-in Module" on page 239.
•
CMS 4.1: Not supported
•
CMS 4.2: Supported
•
CMS 4.2-SP2: Supported
Netscape Recommendation
Netscape products do not examine this extension.
Standard X.509 v3 Certificate Extensions
EmailAddress
attribute of the DN.
mail=
4.2.1.9
Appendix C
Certificate and CRL Extensions
attribute
e=
357
Advertisement
Table of Contents
