Netscape MANAGEMENT SYSTEM 6.0 - PLUG-IN Manual page 236

SubjectAltNameExt Plug-in Module
Table 4-26 Description of parameters defined in the SubjectAltNameExt module (Continued)
Parameter
generalName<n>.
requestAttr
generalName<n>.
generalNameChoice
236 Netscape Certificate Management System Plug-Ins Guide • March 2002
Description
Specifies the request attribute whose value is to be included in the extension. The
attribute value must conform to any of the supported general-name types
(specified by the generalName<n>.generalNameChoice parameter). If the
server finds the attribute in the request, it sets the attribute value in the extension
and then adds the extension to certificates specified by the predicate
parameter. If you specify multiple attributes and if none of the attributes are
present in the request, the server does not add the subject alternative name
extension to certificates.
Permissible values: A request attribute included in the certificate request.
Example: AUTH_TOKEN.mail
Specifies the general-name type for the request attribute.
Permissible values: rfc822Name, directoryName, dNSName,
ediPartyName, URL, iPAddress, OID, or otherName.
• Select rfc822Name if the request-attribute value is an Internet mail address
in the local-part@domain format (default). For example,
jdoe@example.com.
• Select directoryName if the request-attribute value is an X.500 directory
name, similar to the subject name in a certificate. For example,
CN=Jane Doe, OU=Sales Dept, O=Example Corporation, C=US.
• Select dNSName if the request-attribute value is a DNS name. For example,
corpDirectory.example.com.
• Select ediPartyName if the request-attribute value is a EDI party name. For
example, Example Corporation.
• Select URL if the request-attribute value is a non-relative URI that includes
both a scheme (for example, http) and a fully qualified domain name or IP
address of the host. For example, http://hr.example.com.
• Select iPAddress if the request-attribute value is a valid IP address
specified in dot-separated numeric component notation. For example,
128.21.39.40.
• Select OID if the request-attribute value is a unique, valid OID specified in
the dot-separated numeric component notation. For example,
1.2.3.4.55.6.5.99.
• Select otherName if the request-attribute value is the absolute path to the
file that contains the base-64 encoded string of the subject alternative name.
For example, /usr/netscape/servers/ext/san/othername.txt.
Example: rfc822Name