Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 512

Extension-Specific Policy Module Reference
Table 11-15 AuthInfoAccessExt Configuration Parameters (Continued)
Parameter Description
Permissible values:
• ocsp (or 1.3.6.1.5.5.7.48.1).
• caIssuers (or 1.3.6.1.5.5.7.48.2).
• renewal (or 2.16.840.1.113730.16.1)
Specifies the general-name type for the location that contains additional information
ad<n>_location
about the CA that has issued the certificate in which this extension appears. Select one
_type
type from the following:
• Select rfc822Name if the location is an Internet mail address.
• Select directoryName if the location is an X.500 directory name.
• Select dNSName if the location is a DNS name.
• Select ediPartyName if the location is a EDI party name.
• Select URL if the location is a uniform resource identifier (default).
• Select iPAddress if the location is an IP address.
• Select OID if the location is an object identifier.
• Select otherName if the location is in any other name form.
Specifies the address or location to get additional information about the CA that has
ad<n>_location
issued the certificate in which this extension appears. Specifying the information
based on the following:
• If you selected rfc822Name, the value must be a valid Internet mail address in
• If you selected directoryName, the value must be a string form of X.500 name,
• If you selected dNSName, the value must be a valid domain name in the
• If you selected ediPartyName, the value must be an IA5String. For example,
512 Netscape Certificate Management System Administrator's Guide • February 2003
the local-part@domain format. You may use upper and lower case letters in
the mail address; no significance is attached to the case. For example,
ocspResponder@example.com.
similar to the subject name in a certificate. For example, CN=corpDirectory,
OU=IS, O=example.com, C=US.
preferred-name syntax. You may use upper and lower case letters in the domain
name; no significance is attached to the case. Do not use the string " " for the DNS
name. Also don't use the DNS representation for Internet mail addresses. For
example, ocspResponder.example.com.
Example Corporation.