Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual page 373

E
encrypted file system (EFS) 170
end-entity certificate publisher 275
end-entity enrollment forms 55
automated 56
manual 55
end-entity forms
for enrollment 57
enrollment
automated 20
manual 20
enrollment forms
for Certificate Managers 59
for end users 57
for object signing certificates 59
for OCSP responder certificates 59
for Registration Managers 59
for servers 58
generating DSA key pairs 60
Error log
configuring 301
event log
configuring 307
logging audit and system messages 306
expired certificates
removing from the directory 74
Extended Key Usage extension policy 169
OIDs for encrypted file system 170
extending directory-attribute support in CMS 316
extensions 329–369
132
adding to end-entity certificates 130
an example 333
authorityKeyIdentifier 342, 362, 369
basicConstraints 343, 368
CA certificates and 368–369
certificateIssuer 365
certificatePolicies 344
cRLDistributionPoints 345
CRLNumber 362
deltaCRLIndicator 363
extKeyUsage 346
holdInstructionCode 365
introduction to 330
invalidityDate 366
issuerAltName 348, 363
issuingDistributionPoint 364
keyUsage 349
nameConstraints 352
netscape-cert-type 367, 369
netscape-comment 368
Netscape-defined 367–369
policyConstraints 353
policyMappings 354
privateKeyUsagePeriod 355
reasonCode 366
recommendations for usage 333–339
structure of 332
subjectAltName 356
subjectDirectoryAttributes 357
subjectKeyIdentifier 358
X.509 certificate, summarized 339–359
X.509 CRL, summarized 361–366
extension-specific policies
authority information access 134
authority key identifier 142
basic constraints 145
certificate policy 149
certificate renewal window 154
certificate scope of use 159
common features 133
CRL distribution point 164
extended key usage 169
Generic ASN.1 175
issuer alternative name 182
key usage 187
name constraints 200
Netscape certificate comment 209
Netscape certificate type 213
policy constraints 218, 222
policy mappings 225
private key usage period 229
remove basic constraints 231
subject alternative name 233
subject directory attributes 239
subject key identifier 243
extension-specific policy modules 330
list of 132
extKeyUsage 346
Index 373