Netscape MANAGEMENT SYSTEM 6.01 - PLUG-IN Manual page 295

Description of parameters defined in the IssuingDistributionPoint rule (Continued)
Table 7-9
Parameter
pointName
onlySomeReasons
onlyContainsCACerts
onlyContainsUserCerts
Description
Specifies the name of the issuing distribution point. The name of the
distribution point can be in any of the following formats:
Permissible values: Depends on the value specified for the pointType
parameter.
• If the pointType attribute is set to DirectoryName, the name must
be an X.500 Name (in RFC1779 syntax).
• If the pointType attribute is set to URI, the name must be a URI; the
URI must be an absolute pathname and must specify the host.
Example:
• If the name is a URI, it would look similar to this:
http://testCA.example.com/get/your/crls/here/
• If the name is an X.500 Directory Name, it would look similar to this:
CN=CRLCentral,OU=Research Dept,O=Example
Corporation,C=US
(Note that the CRL may be stored in the directory entry corresponding
to the CRL issuing point, which may be different than the directory
entry of the CA.)
Specifies the reason codes associated with the distribution point.
Permissible values: A combination of reason codes—unspecified,
keyCompromise, cACompromise, affiliationChanged,
superseded, cessationOfOperation, certificateHold, and
removeFromCRL—separated by commas. Leave field blank if the
distribution point contains revoked certificates with all reason codes or if
you don't want to set this field (default).
Example: unspecified, keyCompromise, cessationOfOperation
Specifies whether the distribution point contains only revoked CA
certificates. Check the box if the distribution point contains CA certificates
only. Uncheck the box if the distribution point contains all types of
revoked certificates (default).
Specifies whether the distribution point contains only revoked user
certificates. Check the box if the distribution point contains user certificates
only. Uncheck the box if the distribution point contains all types of
certificates (default).
IssuingDistributionPoint Rule
Chapter 7 CRL Extension Plug-in Modules 295