Validity Period For Ca Signing Certificate; Extensions For Ca Signing Certificate - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

You may fill in the attribute template or simply enter the DN as a string of
attribute-value pairs.
• Common Name (CN=) _____________________________________
• Organizational Unit (OU=) ___________________________________
• Organization (O=) ________________________________________
• Locality (L=) _____________________________________________
• State (ST=) ______________________________________________
• Country (C=) ____________________________________________
A DN is a series of name-value pairs that in combination uniquely identify an
entity. The subject DN identifies the CA signing certificate. You are not
required to enter all the values, but must enter the Organization (O), such as
the name of your company. The Organization is required because its absence
causes Netscape Communicator (version 4.6 or below) to crash. For more
information about distinguished names, see Apendix A, "Distinguished
Names," in CMS Plug-Ins Guide. To locate this guide, see "Where to Go for
Related Information" on page 28.

Validity Period for CA Signing Certificate

You can specify the validity period for a self-signed CA signing certificate only.
The validity period for a subordinate CA signing certificate is determined by the
issuing CA.
• Validity period_________________________ to __________________________
Enter beginning and ending dates for the certificate's validity period. The
validity period for the CA signing certificate determines how soon you will
have to renew the certificate, which can be a complex procedure. The default
validity period is two years.

Extensions for CA Signing Certificate

You can specify the extensions for a self-signed CA signing certificate only.
Extensions for a subordinate CA signing certificate are specified by the issuing CA.
The default settings should work for most deployments. If necessary, you can add
and additional/custom extension by pasting its base-64 encoding in the space
provided on this screen. For more information about extensions, see Appendix C,
"Certificate and CRL Extensions" of CMS Plug-Ins Guide.
Certificate Manager Configuration
Chapter 5 Installation Worksheet 195