Constraints ReferenceChapter 10 Certificate Profiles 477No ConstraintThis constraint implements no constraint. When chosen along with a default, thereare not constraints placed on that default.Netscape Certificate Type Extension ConstraintThe Netscape certificate type extension constraint checks if the Netscape certificatetype extension in the certificate request satisfies the criteria set in this constraint.encipherOnly Specifies whether to set the extension if the public key is to beused only for enciphering data. If this bit is set, keyAgreementshould also be set. Select true to allow this to be set; select falseto not allow this to be set; select “-” to indicate no constraintsare placed for this parameter.decipherOnly Specifies whether to set the extension if the public key is to beused only for deciphering data. If this bit is set, keyAgreementshould also be set. Select true to allow this to be set; select falseto not allow this to be set; select “-” to indicate no constraintsare placed for this parameter.Table 10-22 Netscape Certificate Type Extension Constraint Configuration ParametersParameter Descriptioncritical Select true to allow this extension to be marked critical;select false to keep this extension from being markedcritical; select “-” to indicate no constraints are placed forthis parameter.SSLClient Specifies that the certificate can be used by clients forauthentication during SSL connections. Select true to allowthis capability; select false to not allow this capability;select “-” to indicate no constraints are placed for thisparameter.Table 10-21 Key Usage Extension Constraint Configuration Parameters (Continued)Parameter Description
