No Constraint; Netscape Certificate Type Extension Constraint - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Table 10-21 Key Usage Extension Constraint Configuration Parameters (Continued)
Parameter
encipherOnly
decipherOnly

No Constraint

This constraint implements no constraint. When chosen along with a default, there
are not constraints placed on that default.

Netscape Certificate Type Extension Constraint

The Netscape certificate type extension constraint checks if the Netscape certificate
type extension in the certificate request satisfies the criteria set in this constraint.
Table 10-22 Netscape Certificate Type Extension Constraint Configuration Parameters
Parameter
critical
SSLClient
Description
Specifies whether to set the extension if the public key is to be
used only for enciphering data. If this bit is set, keyAgreement
should also be set. Select true to allow this to be set; select false
to not allow this to be set; select "-" to indicate no constraints
are placed for this parameter.
Specifies whether to set the extension if the public key is to be
used only for deciphering data. If this bit is set, keyAgreement
should also be set. Select true to allow this to be set; select false
to not allow this to be set; select "-" to indicate no constraints
are placed for this parameter.
Description
Select true to allow this extension to be marked critical;
select false to keep this extension from being marked
critical; select "-" to indicate no constraints are placed for
this parameter.
Specifies that the certificate can be used by clients for
authentication during SSL connections. Select true to allow
this capability; select false to not allow this capability;
select "-" to indicate no constraints are placed for this
parameter.
Constraints Reference
Chapter 10 Certificate Profiles 477