Table of Contents
Advertisement
Constraints Reference
Table 10-22 Netscape Certificate Type Extension Constraint Configuration Parameters
Parameter
SSLServer
CertEmail
CertObjectSigning
CertSSLCA
CertEmailCA
CertObjectSigningCA
Signing Algorithm Constraint
The signing algorithm constraint checks if the signing algorithm in the certificate
request satisfies the criteria set in this constraint.
476
Netscape Certificate Management System Administrator's Guide • June 2003
Description
Specifies that the certificate can be used by servers for
authentication during SSL connections. Select true to allow
this capability; select false to not allow this capability;
select "-" to indicate no constraints are placed for this
parameter.
Specifies that the certificate can be used to send secure
email messages. Select true to allow this capability; select
false to not allow this capability; select "-" to indicate no
constraints are placed for this parameter.
Specifies that the certificate can be used for signing objects
such as Java applets and plug-ins. Select true to allow this
capability; select false to not allow this capability; select
"-" to indicate no constraints are placed for this
parameter.
Specifies that the certificate can be used by a CA to issue
certificates for SSL connections. Select true to allow this
capability; select false to not allow this capability; select
"-" to indicate no constraints are placed for this
parameter.
Specifies that the certificate can be used by a CA to issue
certificates for secure email. Select true to allow this
capability; select false to not allow this capability; select
"-" to indicate no constraints are placed for this
parameter.
Specifies that the certificate can be used by a CA to issue
certificates for object signing. Select true to allow this
capability; select false to not allow this capability; select
"-" to indicate no constraints are placed for this
parameter.
Advertisement
Table of Contents
