Netscape MANAGEMENT SYSTEM 6.01 - AGENT GUIDE Manual page 36

Approving Requests
Table 2-1
Type
Subordinate SSL CA
(available only for CA
certificate requests)
Subordinate email CA
(available only for CA
certificate requests)
Subordinate executable
object-signing CA
Note that additional extensions can be set by means of policy modules, which
must be configured by the CMS administrator.
If you want to add extensions other than Netscape certificate type extensions,
6.
you can paste a base-64 encoding of the extension in the "Additional
Extensions" field.
You can use the tools provided for generating extensions to include in CA and
other certificate requests. For details about these tools, check this directory:
<server_root>/bin/cert/tools
The certificate extension text field accepts a single extension blob. If you want
to add multiple extensions, you should use the
also provided in the above directory. For details about this tool, see "Extension
Joiner Tool" in CMS Command-Line Tools Guide. To locate an online version of
this guide, see "Where to Go for Related Information" on page 8.
If you want the certificate to be signed using a signature algorithm other than
7.
the default, choose an alternative from the "Signature algorithm" drop-down
list:
36 Netscape Certificate Management System Agent's Guide • May 2002
Netscape certificate type extension (Continued)
Description
Allows a CA to sign and issue personal and server
certificates.
Allows a CA to sign and issue certificates for use with
signed and encrypted email.
Allows a CA to sign and issue object-signing certificates.
MD5 with RSA and MD2 with RSA generate a 128-bit message digest.
Most existing software applications that handle certificates support only
MD5. This is the default algorithm.
program, which is
ExtJoiner