Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 461

Table 10-8 Name Constraints Extension Default Configuration Parameters (Continued)
Parameter
ExcludedSubtrees
NameValue_<n>
Description
Specifies the general-name value for the permitted subtree you
want to include in the extension.
• If you selected RFC822Name, the value must be a valid
Internet mail address in fully-qualified DNS format. For
example, testCA@example.com.
• If you selected DirectoryName, the value must be a string
form of X.500 name, similar to the subject name in a
certificate. For example, CN=SubCA, OU=Research
Dept, O=Example Corporation, C=US.
• If you selected DNSName, the value must be a valid domain
name in the fully-qualified DNS format. For example,
testCA.example.com.
• If you selected EDIPartyName, the value must be a
IA5String. For example, Example Corporation.
• If you selected URIName, the value must be a non-relative
universal resource identifier (URI) following the URL syntax
and encoding rules. The name must include both a scheme
(for example, http) and a fully qualified domain name or IP
address of the host. For example,
http://testCA.example.com.
• If you selected IPAddress, the value must be a valid IP
address (IPv4 or IPv6).
IPv4 address must be in n.n.n.n format, with netmask
must be in n.n.n.n,m.m.m.m format. For example:
128.21.39.40. or 128.21.39.40,255.255.255.00.
IPv 6 (IPv6) address with netmask is separated by a comma.
FOr Example 0:0:0:0:0:0:13.1.68.3 and FF01::43;
and
0:0:0:0:0:0:13.1.68.3,FFFF:FFFF:FFFF:FFFF:FF
FF:FFFF:255.255.255.0 and
FF01::43,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FF00:
0000.
• If you selected OIDName, the value must be a unique, valid
OID specified in dot-separated numeric component
notation. For example, 1.2.3.4.55.6.5.99.
• If you selected OtherName, the value must be the absolute
path to the file that contains the base-64 encoded string of
the subtree. For example,
/usr/netscape/servers/ext/nc/othername.txt.
Defaults Reference
Chapter 10 Certificate Profiles 461