Netscape-Comment; Ca Certificates And Extension Interactions - Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual

CA Certificates and Extension Interactions

• bit 7: Object-signing CA certificate
CMS Version Support
Refer to "NSCertTypeExt Plug-in Module" on page 213.
• CMS 4.1: Supported
• CMS 4.2: Supported
• CMS 4.2-SP2: Supported

netscape-comment

OID
2.16.840.1.113730.13
Discussion
The value of this extension is an IA5String. It is a comment that can be displayed to
the user when the certificate is viewed.
CMS Version Support
Refer to "NSCCommentExt Plug-in Module" on page 209.
• CMS 4.1: Not supported
• CMS 4.2: Supported
• CMS 4.2-SP2: Supported
CA Certificates and Extension Interactions
Netscape recommends that all CA certificates contain the
extension, as this is the standard way to identify a CA certificate. In addition, to
ensure support for Navigator 3.x, CAs should also use
These two extensions can interact with each other. The following table describes
what different combinations of the two extensions mean.
Extensions Present
Only
basicConstraints
368 Netscape Certificate Management System Plug-ins Guide • October 2001
Description
The certificate is a CA certificate if the cA component is true.
Path length processing is done as described above.
basicConstraints
netscape-cert-type
.