Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 446

Certificate Setup Wizard
• Netscape certificate type—select this option if you want to set any of the
Netscape Certificate Type extension bits in the certificate you are requesting.
When you select the option, the associated fields are enabled. You should select
the ones you want to set.
• Authority key identifier—select this option if you want to set the authority key
identifier extension in the certificate you are requesting.
• Subject key identifier—select this option if you want to set the subject key
identifier extension in the certificate you are requesting.
• Key usage—select this option if you want to set the key usage extension in the
certificate you are requesting. If you choose this option, the digital signature
(bit 0), non repudiation (bit 1), key Certificate Sign (bit 5), and CRL sign (bit 6)
bits are set by default. The extension is marked critical as recommended by the
PKIX standard and RFC 2459 (see
for a description of the Key Usage extension).
• Extension in MIME 64 DER encoding—select this option if you want to specify
any custom extension. When you select the option, the associated text field is
enabled. You should paste your extension (in MIME 64 DER encoded format)
into the text field.
Certificate Management System provides tools that generate MIME-64
encoded blobs for many standard extensions. You can use these tools for
generating MIME-64 encoded blobs for any extensions that you may want to
include in CA and other certificate requests. For details about these tools, check
this directory in your CMS installation:
Note that the text field provided for pasting the extension in general accepts a
single extension blob. If you want to add multiple extensions, you should use
the
mentioned above. For instructions to use the program, see Chapter 5,
"Extension Joiner Tool" of CMS Command-Line Tools Guide.
446 Netscape Certificate Management System Installation and Setup Guide • March 2002
program, which is also provided in the tools directory
ExtJoiner
http://www.ietf.org/rfc/rfc2459.txt
<server_root>/bin/cert/tools