Defaults Reference; Authority Info Access Extension Default - Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual

Defaults Reference

Defaults Reference
Defaults are used to define the contents of a certificate and the values associated
with that content. This section lists the pre built defaults with complete definitions
of each.

Authority Info Access Extension Default

This default populates the Authority Info Access extension. This extension
specifies how an application validating a certificate can access information, such as
on-line validation services and CA policy statements, about the CA that has issued
the certificate. Note that this extension should not be used to point directly to the
CRL location maintained by a CA; the CRL Distribution Points extension explained
in "CRL Distribution Points Extension Default" on page 450 allows you to provide
references to CRL locations.
For general information about this extension, see "authorityInfoAccess" on
page 757.
You can define the following constraints with this default:
• Extension Constraint, see "Extension Constraint," on page 473
• No Constraints, see "No Constraint," on page 475.
This default allows you to define 5 locations and specify parameters for each
location. The parameters are marked with an
parameter is associated with one of the five possible locations.
Table 10-1 Authority Info Access Extension Default Configuration Parameters
Parameter
Critical
Method_<n>
446 Netscape Certificate Management System Administrator's Guide • June 2003
<n>
Description
Select true to mark this extension critical; select false to mark
the extension noncritical.
Specifies the access method for retrieving additional
information about the CA that has issued the certificate in
which the extension appears. Provide one of the following
values:
• ocsp (or 1.3.6.1.5.5.7.48.1).
• caIssuers (or 1.3.6.1.5.5.7.48.2).
• renewal (or 2.16.840.1.113730.16.1)
in the table to distinguish that the