Extension-Specific Policy Module Reference546 Netscape Certificate Management System Administrator’s Guide • June 2003NSCCommentExtThe NSCCommentExt plug-in module enables you to add the Netscape CertificateComment Extension to certificates. The extension can be used to include textualcomments in certificates. Applications that are capable of interpreting the commentmay display it to a relying party when the certificate is used or viewed.For general information about this extension, see “netscape-comment” onpage 776.During installation, CMS automatically creates an instance of the Netscapecertificate comment extension policy, named NSCCommentExt, that is disabled bydefault.Table 11-30 NSCCommentExt Configuration ParametersParameter Descriptionenable Specifies whether the rule is enabled or disabled. Select to enable, deselect to disable(default).predicate Specifies the predicate expression for this rule. If you want this rule to be applied toall certificate requests, leave the field blank (default). To form a predicate expression,see section “Using Predicates in Policy Rules” in Chapter 18, “Setting Up Policies” ofCMS Administrator’s Guide.Example: HTTP_PARAMS.certType==clientcritical Specifies whether the extension should be marked critical or noncritical. Select tomark critical, deselect to mark noncritical (default).inputType Specifies whether to embed a textual statement or to include a pointer to file thatcontains the textual statement in certificates. The extension value is interpretedaccording to the value specified for this parameter.You should consider putting the textual statement in a file because certainapplications may not have the capability to display the text embedded in certificates.Also, embedding a textual statement in a certificate increases its size. If you’re usingsmart cards for generating and storing certificates, you may not want to embedtextual statements in certificates because on a smart card the memory for a certificatemay be limited.Permissible values: Text or File.• Text specifies that the textual statement—the value of the displayText field—should be inserted in the extension (default).• File specifies that the path to the file that contains the textual statement—thevalue of the commentfile field—should be inserted in the extension.
