Netscape-Defined Certificate Extensions - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Netscape-Defined Certificate Extensions

CMS Version Support
Supported since CMS 4.2. Refer to "InvalidityDate" on page 612.
reasonCode
OID
2.5.29.21
Discussion
The Reason Code extension identifies the reason for certificate revocation.
CMS Version Support
Supported since CMS 4.2. Refer to "CRLReason" on page 609.
Netscape-Defined Certificate Extensions
Netscape has defined certain certificate extensions for use with Navigator and
Communicator. Some of the extensions that have been defined are now obsolete,
and others can be superseded by the extensions defined in the X.509 proposed
standard. All Netscape extensions should be tagged as noncritical, so that their
presence in a certificate does not make that certificate incompatible with other
clients.
The specifications for all Netscape-defined extensions are defined at
. For most
http://home.netscape.com/eng/security/comm4-cert-exts.html
CMS deployments, only and need to be
netscape-cert-type netscape-comment
supported to maintain compatibility with Navigator 3.x. Therefore, only these two
Netscape certificate extensions are described here.
netscape-cert-type
OID
2.16.840.1.113730.1
Discussion
The Netscape Certificate Type extension can be used to limit the purposes for
which a certificate can be used. It has been replaced by the X.509 v3 extensions
extKeyUsage and basicConstraints, but must still be supported in deployments
that include Navigator 3.x clients.
Appendix G Certificate and CRL Extensions 741