Netscape MANAGEMENT SYSTEM 6.01 - PLUG-IN Manual page 177

The configuration shown in Figure 4-10 defines a custom extension named
testGenASN1Ext
added to all certificates issued by the server. The expected
"dumpasn1 Tool" in CMS Command-Line Tools Guide) of the resulting extension,
would look like this:
337 30 148: . . . . SEQUENCE {
340 06 3: . . . . . OBJECT IDENTIFIER '2 4 5 99'
345 04 140: . . . . . OCTET STRING, encapsulates {
348 30 137: . . . . . . . SEQUENCE {
351 13 24: . . . . . . . . PrintableString '1st data in 1st sequence'
377 16 24: . . . . . . . . IA5String '2nd data in 1st sequence'
403 13 32: . . . . . . . . PrintableString 'This is 3rd data in 1st
437 04 10: . . . . . . . . OCTET STRING
: . . . . . . . . . 11 22 33 44 A0 B0 C0 D0 E0 F0
449 30 37: . . . . . . . . SEQUENCE {
451 17 13: . . . . . . . . . UTCTime '000406070000Z'
466 30 8: . . . . . . . . . SEQUENCE {
468 01 1: . . . . . . . . . . BOOLEAN TRUE
471 06 3: . . . . . . . . . . OBJECT IDENTIFIER '2 4 5 100'
: . . . . . . . . . . }
476 04 10: . . . . . . . . . OCTET STRING
: . . . . . . . . . 11 22 33 44 A0 B0 C0 D0 E0 F0
: . . . . . . . . . }
: . . . . . . . . }
: . . . . . . . }
: . . . . . }
Table 4-11 describes the configurable parameters of the generic ASN.1 extension
policy module.
Table 4-11 Description of parameters defined in the GenericASN1Ext module
Parameter Description
Specifies whether the rule is enabled or disabled. Check the box to enable the rule.
enable
Uncheck the box to disable the rule (default).
• If you enable the rule and set the remaining parameters correctly, the server adds
• If you disable the rule, the server does not add the extension to certificates; it
with OID 2.4.5.99. The extension is non-critical, and it will be
the configured extension to certificates specified by the predicate parameter.
ignores the values in the remaining fields.
GenericASN1Ext Plug-in Module
dumpasn1
sequence'
Chapter 4 Certificate Extension Plug-in Modules
output (see
177