Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 728

Standard X.509 v3 Certificate Extensions
* OCSP Signing is not defined in PKIX Part 1, but in RFC 2560, "X.509 Internet
Public Key Infrastructure Online Certificate Status Protocol - OCSP."
Table G-2
Use
Certificate trust list signing
Microsoft Server Gated
Crypto (SGC)
Microsoft Encrypted File
System
Netscape SGC
CMS Version Support
Supported since CMS 4.2. Refer to "ExtendedKeyUsageExt" on page 524.
issuerAltName
OID
2.5.29.18
Criticality
PKIX Part 1 recommends that this extension be marked noncritical.
Discussion
The Issuer Alternative Name extension is used to associate Internet-style identities
with the certificate issuer. Names must use the forms defined for subjectAltName.
CMS Version Support
Supported since CMS 4.2. Refer to "IssuerAltNameExt" on page 531.
keyUsage
OID
2.5.29.15
Criticality
This extension may be critical or noncritical. PKIX Part 1 recommends that it
should be marked critical if it is used.
728 Netscape Certificate Management System Administrator's Guide • February 2003
Private Extended Key Usage Extension Uses
OID
1.3.6.1.4.1.311.10.3.1
1.3.6.1.4.1.311.10.3.3
1.3.6.1.4.1.311.10.3.4
2.16.840.1.113730.4.1