Basic certificate policy

 

The supported fields for this policy are:

• OuterSigAlgID

• Signature

• Version

• SerialNumber

• InnerSigAlgID

• Issuer

• Validity

• SubjectName

• SubjectPublicKeyInfo

• IssuerUniqueID

• SubjectUniqueID

The supported extensions for this policy are:

• AuthorityKeyID

• SubjectKeyID

• IssuerAltName

• SubjectAltName

• KeyUsage

• BasicConstraints

• PrivateKeyUsage

• CRLDistributionPoints

  • DistributionPoint

    • DistributionPointName (X.500 Name and LDAP Format URI only)

    • NameRelativeToCRLIssuer (not supported)

    • Reasons (ignored)

    • CRLIssuer fields (not supported)

 

Parent topic:

Certificate validation and trust policy design on UNIX and Windows systems

sy12800_