Defaults Reference
Chapter 11
Certificate Profiles
449
Subject Key Identifier Extension Default
This default populates a subject key identifier extension in the certificate request. The
extension is used to identify certificates that contain a particular public key—that is, the
extension is used to uniquely identify a certificate from among several that have the same
subject name.
For general information about this extension, see “subjectKeyIdentifier” on page 741.
If enabled, the policy adds a Subject Key Identifier Extension to an enrollment request if the
extension does not already exist. If the extension exists in the request, for example from a
CRMF request, the default replaces the extension. In case of agent-approved enrollments,
after an agent approves the enrollment request, the policy accepts any Subject Key
Identifier Extension that is already there.
This default has not parameters. If used, this extension will be included in the certificate
with the public key information.
You can define the following constraints with this default:
•
Extension Constraint, see “Extension Constraint,” on page 454.
•
No Constraints, see “No Constraint,” on page 456.
•
Select
DNSName
if the request-attribute value is a DNS name. For example,
corpDirectory.example.com
.
•
Select
EDIPartyName
if the request-attribute value is a EDI party name. For
example,
Example Corporation
.
•
Select
URLName
if the request-attribute value is a non-relative URI that
includes both a scheme (for example,
http
) and a fully qualified domain
name or IP address of the host. For example,
http://hr.example.com
.
•
Select
IPAddress
if the request-attribute value is a valid IP address
specified in dot-separated numeric component notation. For example,
128.21.39.40
.
•
Select
OIDName
if the request-attribute value is a unique, valid OID specified
in the dot-separated numeric component notation. For example,
1.2.3.4.55.6.5.99
.
Table 11-15
Subject Alternative Name Extension Default Configuration Parameters
(Continued)
Parameter
Description
Summary of Contents for CERTIFICATE 7.1 ADMINISTRATOR
Page 1: ...Administrator s Guide Red Hat Certificate System Version7 1 September 2005 ...
Page 22: ...22 Red Hat Certificate System Administrator s Guide September 2005 ...
Page 128: ...Cloning a CA 128 Red Hat Certificate System Administrator s Guide September 2005 ...
Page 368: ...ACL Reference 368 Red Hat Certificate System Administrator s Guide September 2005 ...
Page 460: ...Constraints Reference 460 Red Hat Certificate System Administrator s Guide September 2005 ...
Page 592: ...CRL Extension Reference 592 Red Hat Certificate System Administrator s Guide September 2005 ...
