Data Formats For Installing Certificates And Certificate Chains - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Data Formats for Installing Certificates and Certificate Chains

The wizard can accept certificates and certificate chains in several data formats.
This section briefly explains the data formats recognized by the wizard.
Binary Formats
The wizard can recognize certificates and certificate chains in the following binary
formats:
• DER-encoded certificate—This is a single binary DER-encoded certificate.
• PKCS #7 SignedData objects—This is a
significant field in the
signature and the contents are ignored. The PKCS #7 format allows multiple
certificates to be downloaded at once.
• DER-encoded certificates—These are DER-encoded certificates that may or
may not be wrapped in a base-64 encoding package surrounded by the
delimiters
-----BEGIN CERTIFICATE-----
CERTIFICATE-----
• Netscape Certificate Sequence—This is a simpler format for downloading
certificate chains. It consists of a
sequence of certificates. The value of the
netscape-cert-sequence
CertificateSequence ::= SEQUENCE OF Certificate
This format allows multiple certificates to be downloaded at once.
Text Formats
The wizard can also import certificates and certificate chains in text formats. Here's
what you should be aware of when using the wizard to install a certificate or
certificate chain in text format:
The text format must begin with the following line:
-----BEGIN CERTIFICATE-----
Following this line should be the certificate data, which can be in any of the binary
formats described in "Binary Formats" on page 453. This data should be base-64
encoded as described by RFC 1113 (for details, see
http://www.scit.wlv.ac.uk/rfc/rfc11xx/RFC1113.html
Following the certificate data must be this line:
-----END CERTIFICATE-----
PKCS #7 SignedData
object is the certificate. In particular, the
SignedData
.
PKCS #7 ContentInfo
, while the content field is the following structure:
Chapter 14
Certificate Setup Wizard
and
-----END
structure, wrapping a
field should be
contentType
).
Managing CMS Keys and Certificates
object. The only
453