Certificate Setup Wizard
446
Netscape Certificate Management System Installation and Setup Guide • March 2002
•
Netscape certificate type—select this option if you want to set any of the
Netscape Certificate Type extension bits in the certificate you are requesting.
When you select the option, the associated fields are enabled. You should select
the ones you want to set.
•
Authority key identifier—select this option if you want to set the authority key
identifier extension in the certificate you are requesting.
•
Subject key identifier—select this option if you want to set the subject key
identifier extension in the certificate you are requesting.
•
Key usage—select this option if you want to set the key usage extension in the
certificate you are requesting. If you choose this option, the digital signature
(bit 0), non repudiation (bit 1), key Certificate Sign (bit 5), and CRL sign (bit 6)
bits are set by default. The extension is marked critical as recommended by the
PKIX standard and RFC 2459 (see
http://www.ietf.org/rfc/rfc2459.txt
for a description of the Key Usage extension).
•
Extension in MIME 64 DER encoding—select this option if you want to specify
any custom extension. When you select the option, the associated text field is
enabled. You should paste your extension (in MIME 64 DER encoded format)
into the text field.
Certificate Management System provides tools that generate MIME-64
encoded blobs for many standard extensions. You can use these tools for
generating MIME-64 encoded blobs for any extensions that you may want to
include in CA and other certificate requests. For details about these tools, check
this directory in your CMS installation:
<server_root>/bin/cert/tools
Note that the text field provided for pasting the extension in general accepts a
single extension blob. If you want to add multiple extensions, you should use
the
ExtJoiner
program, which is also provided in the tools directory
mentioned above. For instructions to use the program, see Chapter 5,
“Extension Joiner Tool” of CMS Command-Line Tools Guide.
Summary of Contents for NETSCAPE MANAGEMENT SYSTEM 6.0
Page 1: ...Installation and Setup Guide Netscape Certificate Management System Version6 0 March 2002...
Page 22: ...22 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 32: ...32 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 160: ...160 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 776: ...776 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 807: ...807 Part 5 Appendix Appendix A Certificate Download Specification...
Page 808: ...808 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 830: ...830 Netscape Certificate Management System Installation and Setup Guide March 2002...