Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual page 613

Table 14-9 IssuingDistributionPoint Configuration Parameters
Parameter
enable
critical
pointType
pointName
onlySomeReasons
Description
Specifies whether the rule is enabled or disabled. Select to
enable, deselect to disable (default).
Select you want the server to mark the extension critical
(default); deselect if you want the server to mark the
extension noncritical.
Specifies the type of the issuing distribution point from
the following
• DirectoryName specifies that the type is an X.500
Directory Name.
• URI specifies that the type is a uniform resource
indicator.
Specifies the name of the issuing distribution point. The
name of the distribution point depends on the value
specified for the pointType parameter.
• If the pointType attribute is set to DirectoryName,
the name must be an X.500 Name. For example:
CN=CRLCentral,OU=Research Dept,O=Example
Corporation,C=US
• If the pointType attribute is set to URI, the name
must be a URI; the URI must be an absolute pathname
and must specify the host. For example:
http://testCA.example.com/get/your/crls/
here/
(Note that the CRL may be stored in the directory
entry corresponding to the CRL issuing point, which
may be different than the directory entry of the CA.)
Specifies the reason codes associated with the distribution
point.
Permissible values: A combination of reason
codes—unspecified, keyCompromise,
cACompromise, affiliationChanged, superseded,
cessationOfOperation, certificateHold, and
removeFromCRL—separated by commas. Leave field
blank if the distribution point contains revoked certificates
with all reason codes or if you don't want to set this field
(default).
CRL Extension Reference
Chapter 14 Revocation and CRLs 613