Additionally, also notice the HTTP variables for the Netscape certificate type
extension: the values indicate that the certificate is meant for S/MIME and SSL
client authentication use only. (For details on Netscape certificate type extension,
see "NSCertTypeExt Plug-in Module" on page 212.)
Figure 4-16
Key usage extension bits in the directory-based enrollment form
Keep in mind that for requesting client certificates, there are many enrollment
forms. You may be using a combination of them:
•
Certificate-based enrollment forms (
CertBasedEncryptionEnroll.html
•
Directory-based enrollment form (
•
Directory- and PIN-based enrollment form (
•
Manual enrollment form (
•
NIS-based enrollment form (
•
Portal enrollment form (
For details about these forms, see "Enrollment Forms" on page 53.
CertBasedDualEnroll.html
, or
CertBasedSingleEnroll.html
DirUserEnroll.html
DirPinUserEnroll.html
ManUserEnroll.html
NISEnroll.html
PortalEnrollment.html
Chapter 4
KeyUsageExt Plug-in Module
,
)
)
)
)
Certificate Extension Plug-in Modules
)
)
197