Extendedkeyusageext - Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual

Extension-Specific Policy Module Reference
Table 11-21 CRLDistributionPointsExt Configuration Parameters (Continued)
Parameter Description
• Select URI if the value in the pointName field is a uniform resource indicator.
• Select RelativeToIssuer if the value in the pointName field is a location
Specifies revocation reasons covered by the CRL maintained at the distribution point.
reasons<n>
Provide a comma-separated list of the following constants:
• unused
• keyCompromise
• cACompromise
• affiliationChanged
• superseded
• cessationOfOperation
• certificateHold
Specifies the name of the issuer that has signed the CRL maintained at distribution
issuerName<n>
point, the name can be in any of the following formats:
• An X.500 directory name in the RFC 2253 syntax. For example:
• A URI; for example, it would look similar to this:
Specifies the general-name type of the CRL issuer that has signed the CRL maintained
issuerType<n>
at distribution point.
Permissible values: DirectoryName or URI. The value you specify for this
parameter must correspond to the value in the issuerName field.
• Select DirectoryName if the value in the issuerName field is an X.500 directory
• Select URI if the value in the issuerName field is a uniform resource indicator.

ExtendedKeyUsageExt

The
Usage Extension to certificates. The extension identifies one or more purposes—in
addition to or in place of the basic purposes indicated in the key usage
extension—for which the certified public key may be used. For example, if the key
522 Netscape Certificate Management System Administrator's Guide • June 2003
relative to the CRL Issuer.
CN=CA Central, OU=Research Dept, O=Example Corporation, C=US
http://testCA.example.com:80
name (default).
ExtendedKeyUsageExt
plug-in module enables you to add the Extended Key