Extensions For Ssl Server Certificate - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

• Validity period___________________ to __________________________
Enter beginning and ending dates for the certificate's validity period.

Extensions for SSL Server Certificate

You can specify the extensions for an SSL server certificate only if you are installing
a Certificate Manager and you have decided to have that local Certificate Manager
issue the certificate. If the SSL server certificate is issued by a remote CA, its
extensions are determined by the issuing CA.
The default settings should work for most deployments. If necessary, you can add
an additional extension by pasting its base-64 encoding in the space provided on
this screen. For more information about extensions, see Appendix C, "Certificate
and CRL Extensions" of CMS Plug-Ins Guide.
Confirm that you want to include the following extensions. Check off all that
apply; defaults are indicated in parentheses.
• Basic constraints (No)_____________
CA (Nos)_________
Certification path length (No)_______________________
The certificate chain path length, if specified, determines the maximum
number of certificates in a chain, starting with the end-entity certificate. If you
do not specify this attribute, the length of the chain is unlimited.
• Netscape certificate type (Yes)_____________
SSL client (Yes)_________
Object-signing (No)_________
SSL server (Yes)_________
S/MIME CA (No)_________
S/MIME (No)_________
Object-signing CA (No)_________
SSL CA (No)_________
• Authority Key Identifier (Yes) ________________
• Subject Key Identifier (No)
SSL Server Certificate Configuration
Chapter 5 Installation Worksheet 209