CA Certificates and Extension Interactions
•
bit 7: Object-signing CA certificate
CMS Version Support
Refer to "NSCertTypeExt Plug-in Module" on page 213.
•
CMS 4.1: Supported
•
CMS 4.2: Supported
•
CMS 4.2-SP2: Supported
netscape-comment
OID
2.16.840.1.113730.13
Discussion
The value of this extension is an IA5String. It is a comment that can be displayed to
the user when the certificate is viewed.
CMS Version Support
Refer to "NSCCommentExt Plug-in Module" on page 209.
•
CMS 4.1: Not supported
•
CMS 4.2: Supported
•
CMS 4.2-SP2: Supported
CA Certificates and Extension Interactions
Netscape recommends that all CA certificates contain the
extension, as this is the standard way to identify a CA certificate. In addition, to
ensure support for Navigator 3.x, CAs should also use
These two extensions can interact with each other. The following table describes
what different combinations of the two extensions mean.
Extensions Present
Only
basicConstraints
368
Netscape Certificate Management System Plug-ins Guide • October 2001
Description
The certificate is a CA certificate if the cA component is true.
Path length processing is done as described above.
basicConstraints
netscape-cert-type
.
Need help?
Do you have a question about the NETSCAPE MANAGEMENT SYSTEM 4.5 - PLUG-IN and is the answer not in the manual?
Questions and answers