Configuring Policy Rules for a Subsystem
Table 18-3 Default policy rules of a Certificate Manager and Registration Manager
Policy rule name
DefaultRenewalValidityRule
RevocationConstranitsRule
NSCertTypeExt
CMCertKeyUsageExt
RMCertKeyUsageExt
ClientCertKeyUsageExt
ServerCertKeyUsageExt
ObjSignCertKeyUsageExt
CRLSignCertKeyUsageExt
SubjectKeyIdentifierExt
CertificatePoliciesExt
NSCCommentExt
OCSPNoCheckExt
OCSPSigningExt
CODESigningExt
GenericASN1Ext
CRLDistributionPointsExt
SubjectAltNameExt
SigningAlgRule
AuthorityKeyIdentifierExt
AuthInfoAccess
BasicConstraintsExt
UniqueSubjectName
NameConstraintsExt
PolicyConstraintsExt
SubCANameCheck
PolicyMappingsExt
IssuerRule
592
Netscape Certificate Management System Installation and Setup Guide • October 2001
Certificate Manager
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
No
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Registration Manager
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
No
Yes
Yes
Yes
Yes
Yes
No
No
Yes
No
No
No
No
No
No
No