Defaults Reference452 Netscape Certificate Management System Administrator’s Guide • February 2003CRL Distribution Points Extension DefaultThis default populates the CRL Distribution points extension in the certificaterequest. This extension, when present in a certificate, identifies one or morelocations from which an application that is validating the certificate can obtain theCRL information (to verify the revocation status of the certificate).For general information about this extension, see “CRLDistributionPoints” onpage 726.You can define the following constraints with this default:• Extension Constraint, see “Extension Constraint,” on page 475• No Constraints, see “No Constraint,” on page 477This default allows you to define 5 locations and specify parameters for eachlocation. The parameters are marked with an in the table to distinguish that theparameter is associated with one of the five possible locations.Table 10-3 CRL Distribution Points Extension Configuration ParametersParameter DescriptionCritical Select true to mark this extension critical; select false tomark the extension noncritical.Type_ Specifies the type of the CRL distribution point.Permissible values: DirectoryName, URIName, orRelativeToIssuer. The type you select mustcorrespond to the value in the Name field.Name_ Specifies the name of the CRL distribution point, thename can be in any of the following formats:• An X.500 directory name in the RFC 2253 syntax. Forexample, the name would look similar to the subjectname in a certificate, like this: CN=CA Central,OU=Research Dept, O=Example Corporation,C=US• A URIName; for example, it would look similar tothis:http://testCA.example.com:80• An RDN which specifies a location relative to the CRLIssuer. In this case, the value of the Type attributemust be RelativeToIssuer.
