Extended Key Usage Extension Default - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Table 10-3 CRL Distribution Points Extension Configuration Parameters (Continued)
Parameter
Reasons_<n>
IssuerName_<n>
IssuerType_<n>

Extended Key Usage Extension Default

This default populates the Extended Key Usage extension in the certificate request.
Description
Specifies revocation reasons covered by the CRL
maintained at the distribution point. Provide a
comma-separated list of the following constants:
• unused
• keyCompromise
• cACompromise
• affiliationChanged
• superseded
• cessationOfOperation
• certificateHold
Specifies the name of the issuer that has signed the CRL
maintained at the distribution point, the name can be in
any of the following formats:
• An X.500 directory name in the RFC 2253 syntax. For
example:
CN=CA Central, OU=Research Dept,
O=Example Corporation, C=US
• A URIName; for example, it would look similar to
this:
http://testCA.example.com:80
Specifies the general-name type of the CRL issuer that has
signed the CRL maintained at distribution point.
Permissible values: DirectoryName or URIName. The
value you specify for this parameter must correspond to
the value in the issuerName field.
• Select DirectoryName if the value in the
issuerName field is an X.500 directory name.
• Select URIName if the value in the issuerName field
is a uniform resource indicator.
Defaults Reference
Chapter 10 Certificate Profiles 453