Extension-Specific Policy Module Reference522 Netscape Certificate Management System Administrator’s Guide • February 2003CRLDistributionPointsExtThe CRLDistributionPointsExt plug-in module enables you to add the CRLDistribution Points Extension to certificates. This extension, when present in acertificate, identifies one or more locations from where the application that isvalidating the certificate can obtain the CRL information (to verify the revocationstatus of the certificate).• If you selected ediPartyName, the value must be an IA5String. Forexample, Example Corporation.• If you selected URL, the value must be a non-relative URI, including both ascheme (for example, http) and a fully qualified domain name or IPaddress of the host. For example, http://webSite.example.com.• If you selected iPAddress, the value must be a valid IP address specified indot-separated numeric component notation. The syntax for specifying the IPaddress is as follows:IPv4 address must be in the n.n.n.n format; for example, 128.21.39.40.IPv4 address with netmask must be in the n.n.n.n,m.m.m.m format. Forexample, 128.21.39.40,255.255.255.00.For IP version 6 (IPv6), the address should be in the form with netmaskseparated by a comma. Examples of IPv6 addresses with no netmask are0:0:0:0:0:0:13.1.68.3 and FF01::43. Examples of IPv6 addresseswith netmask are0:0:0:0:0:0:13.1.68.3,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:255.255.255.0 andFF01::43,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FF00:0000.• If you selected OID, the value must be a unique, valid OID specified indot-separated numeric component notation. Although you can invent yourown OIDs for the purposes of evaluating and testing this server, in aproduction environment, you should comply with the ISO rules for definingOIDs and for registering subtrees of IDs. See Appendix H, “ObjectIdentifiers” for information on allocating private OIDs. For example,1.2.3.4.55.6.5.99.• If you selected otherName, the value must be the absolute path to the filethat contains the base-64 encoded string for the site. For example,/usr/netscape/servers/ext/aia/othername.txt.entry_port_numberSpecifies the port number.Example: 8888Table 11-20 CertificateScopeOfUseExt Configuration Parameters (Continued)Parameter Description
