Extensions For Transport Certificate - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

• Validity period______________________ to _______________________
Enter beginning and ending dates for the transport certificate's validity period.

Extensions for Transport Certificate

You can specify the extensions for a transport certificate only if you are installing
the Certificate Manager and Data Recovery Manager at the same time and you
have decided to have the Certificate Manager that you just installed issue the
certificate. If the transport certificate is issued by a remote CA, its extensions are
determined by the issuing CA.
The default settings should work for most deployments. If necessary, you can add
an additional extension by pasting its base-64 encoding in the space provided on
this screen. For more information about extensions, see Appendix C, "Certificate
and CRL Extensions" of CMS Plug-ins Guide.
Confirm that you want to include the following extensions. Check off all that
apply; defaults are indicated in parentheses.
• Basic constraints (No)_____________
CA (No)_________
Certification path length (No)_______________________
The certificate chain path length, if specified, determines the maximum
number of certificates in a chain, starting with the end-entity certificate. If you
do not specify this attribute, the length of the chain is unlimited.
• Netscape certificate type (No)_____________
SSL client (No)_________
Object-signing (No)_________
SSL server (No)_________
S/MIME CA (No)_________
S/MIME (No)_________
Object-signing CA (No)_________
SSL CA (No)_________
• Authority Key Identifier (Yes) ________________
• Subject Key Identifier (No)
Data Recovery Manager Configuration
Chapter 5 Installation Worksheet 205