Table of Contents
Advertisement
CA Certificates and Extension Interactions
•
CMS 4.5: Supported
•
CMS 6.0: Supported
netscape-comment
OID
2.16.840.1.113730.13
Discussion
The value of this extension is an IA5String. It is a comment that can be displayed to
the user when the certificate is viewed.
CMS Version Support
Refer to "NSCCommentExt Plug-in Module" on page 208.
•
CMS 4.1: Not supported
•
CMS 4.2: Supported
•
CMS 4.2-SP2: Supported
•
CMS 4.5: Supported
•
CMS 6.0: Supported
CA Certificates and Extension Interactions
Netscape recommends that all CA certificates contain the
extension, as this is the standard way to identify a CA certificate. In addition, to
ensure support for Navigator 3.x, CAs should also use
These two extensions can interact with each other. The following table describes
what different combinations of the two extensions mean.
Extensions Present
Only
basicConstraints
Only
netscape-cert-type
368
Netscape Certificate Management System Plug-Ins Guide • March 2002
Description
The certificate is a CA certificate if the cA component is true.
Path length processing is done as described above.
The certificate is a CA if at least one of the CA bits is set: SSL
CA (5), S/MIME CA (6), or object-signing CA (7). The
certificates issued by this CA are limited to the particular
applications specified. Path length processing is done as
though the pathLenConstraint is unlimited.
basicConstraints
netscape-cert-type
.
Advertisement
Table of Contents
