Netscape Comment Extension Default; Netscape Certificate Type Extension Default - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Defaults Reference
Table 10-8 Name Constraints Extension Default Configuration Parameters (Continued)
Parameter
ExcludedSubtree
Enable_<n>

Netscape Comment Extension Default

This default populates a Netscape comment extension in the certificate request. The
extension can be used to include textual comments in certificates. Applications that
are capable of interpreting the comment may display it to a relying party when the
certificate is used or viewed.
For general information about this extension, see "netscape-comment" on
page 742.
You can define the following constraints with this default:
• Extension Constraint, see "Extension Constraint," on page 475.
• No Constraints, see "No Constraint," on page 477.
Table 10-9 Netscape Comment Extension Configuration Parameters
Parameter
critical
CommentContent

Netscape Certificate Type Extension Default

This default populates a Netscape Certificate Type extension in the certificate
request. The extension identifies the certificate type—for example, it identifies
whether the certificate is a CA certificate, server SSL certificate, client SSL
certificate, object signing certificate, or S/MIME certificate—and thus enables you
to restrict the usage of a certificate to predetermined purposes.
• If the extension exists in a certificate, it limits the uses of the certificate to those
specified (it limits the applications for a certificate).
• If the extension is not present, the certificate can be used for all applications
except object signing.
462 Netscape Certificate Management System Administrator's Guide • February 2003
Description
Select true to enable this excluded subtree entry, select false to
disable this excluded subtree entry.
Description
Select true to mark this extension critical; select false to mark the
extension noncritical.
Specifies the content of the comment to appear in the certificate.