Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 59

Policy plug-in modules for setting extensions in certificates (Continued)
Table 1-4
Plug-in module name
BasicConstraintsExt
CertificatePoliciesExt
CertificateRenewalWindowExt
CertificateScopeOfUseExt
CRLDistributionPointsExt
ExtendedKeyUsageExt
GenericASN1Ext
IssuerAltNameExt
KeyUsageExt
NameConstraintsExt
Description
Adds the Basic Constraints extension to certificates of a specified type.
This extension is used during the certificate chain verification process to
identify CA certificates and to apply certificate chain path length
constraints.
Adds the Certificate Policies extension to certificates. The extension
contains a sequence of one or more policy statements, each indicating the
policy under which the certificate has been issued and identifying the
purposes for which the certificate may be used.
Adds the Certificate Renewal Window extension to certificates. The
extension specifies how to renew a certificate automatically and when
automatic renewal should be attempted.
Adds the Certificate Scope of Use extension to SSL client certificates. This
extension specifies Internet addresses where the certificate can be
presented for SSL client authentication. This restriction prevents any
private information that might be contained in the certificate from being
released to servers not explicitly contained in the scope of use.
Adds the CRL Distribution Points extension to certificates. This extension
identifies one or more locations from where the application that is
validating the certificate can obtain the CRL information.
Adds the Extended Key Usage extension to certificates. The extension
identifies one or more purposes—in addition to or in place of the basic
purposes indicated in the key usage extension—for which the certified
public key may be used.
Adds ASN.1 type custom extension to certificates. This policy enables
you to configure Certificate Management System to add custom
extensions to certificates.
Adds the Issuer Alternative Name extension to certificates. This
extension enables binding of or associating Internet style identities, such
as Internet electronic mail address, a DNS name, an IP address, and a
uniform resource indicator (URI), with the certificate issuer.
Adds the Key Usage extension to certificates of a specified type. This
extension defines the purpose of the key contained in the certificate. The
Key Usage, Extended Key Usage, Basic Constraints, and Netscape
Certificate Type extensions act together to specify the purposes for which
a certificate can be used.
Adds the Name Constraints extension to certificates. The extension is
used in CA certificates to indicate a name space within which subject
names or subject alternative names in subsequent certificates in a
certification path or chain should be located.
Chapter 1 Introduction to Certificate Management System
System Overview
59