Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 99

Key Length. Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
See "Signing Key Type and Length" on page 88 for more information.
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
14.
certificate signature. The choices are: MD2, MD5, or SHA-1.
Click Next to continue.
Subject Name for Certificate Manager CA Signing Certificate. Type values
15.
for the subject DN components; these values identify the subordinate CA
signing certificate.
A DN is a series of name-value pairs that in combination uniquely identify an
entity. The subject DN identifies the CA signing certificate. You are not
required to enter all the values.
See "CA's Distinguished Name" on page 88 for more information.
Click Next to continue.
Validity Period for Certificate Manager CA Signing Certificate. Select the
16.
validity period for the subordinate CA signing certificate. The default validity
is two years. The validity period determines how soon you will have to renew
the certificate, which can be a complex procedure.
See "CA Signing Certificate's Validity Period" on page 88 for more
information.
Click Next to continue.
Certificate Extensions for Certificate Manager CA Signing Certificate. Select
17.
the required extensions. The default settings should work for most
deployments. If necessary, you can add an additional extension by pasting its
base-64 encoding in the space provided on this screen.
CMS provides command-line tools for generating extensions to include in CA
and other certificate requests. For details about these tools, check this directory:
<server_root>/bin/cert/tools
Note that the certificate extension text field accepts a single extension blob. If
you want to add multiple extensions, you should use the
which is also provided in the
program, see Chapter 5, "Extension Joiner Tool" of CMS
ExtJoiner
Command-Line Tools Guide.
directory. For details about using the
tools
Installing a Certificate Manager
program,
ExtJoiner
Chapter 3 Certificate Manager 99