Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual page 474

Constraints Reference
Table 10-21 Key Usage Extension Constraint Configuration Parameters
Parameter
critical
digitalSignature
nonRepudiation
keyEncipherment
dataEncipherment
keyAgreement
keyCertsign
cRLSign
474 Netscape Certificate Management System Administrator's Guide • June 2003
Description
Select true allow this extension to be marked critical; select false
to keep this extension from being marked critical. Select true to
allow this to be set; select false to not allow this to be set; select
"-" to indicate no constraints are placed for this parameter.
Specifies whether to allow for signing of SSL client certificates,
S/MIME signing certificates, and object-signing certificates.
Select true to allow this to be set; select false to not allow this to
be set; select "-" to indicate no constraints are placed for this
parameter.
Specifies whether some S/MIME signing certificates and
object-signing certificates. Note, however, that the use of this bit
is controversial. You should carefully consider the legal
consequences of its use before setting it for any certificate. Select
true to allow this to be set; select false to not allow this to be set;
select "-" to indicate no constraints are placed for this
parameter.
Specifies whether to set the extension for SSL server certificates
and S/MIME encryption certificates. Select true to allow this to
be set; select false to not allow this to be set; select "-" to
indicate no constraints are placed for this parameter.
Specifies whether to set the extension when the subjects's public
key is used to encipher user data (as opposed to key material).
Select true to allow this to be set; select false to not allow this to
be set; select "-" to indicate no constraints are placed for this
parameter.
Specifies whether to set the extension whenever the subject's
public key is used for key agreement. Select true to allow this to
be set; select false to not allow this to be set; select "-" to
indicate no constraints are placed for this parameter.
Specifies whether extension for all CA signing certificates. Select
true to allow this to be set; select false to not allow this to be set;
select "-" to indicate no constraints are placed for this
parameter.
Specifies whether to set the extension for CA signing certificates
that are used to sign CRLs. Select true to allow this to be set;
select false to not allow this to be set; select "-" to indicate no
constraints are placed for this parameter.