Re: Additional Certificate Attributes

From: Hendrik Brockhaus (hendrik.brockhaus_at_siemens.com)
Date: 09/30/03 

Date: Tue, 30 Sep 2003 00:20:50 -0700

Thanks David for your reply, but I am sorry
the "SNA:dns=foo.bar" string in the Advanced Certificate
Request web page (in the Attributes text box) of my
Windows 2000 CA (stand-alone and enterprise) did not work.

Best Regards,
Hendrik

>-----Original Message-----
>Yes, this can be done: specify "SAN:dns=foo.bar" as a
request attribute in
>the Additional Attributes text.
>
>For key usage, this has to be defined by the CA template:
>
>Cert templates -
>http://www.microsoft.com/technet/prodtechnol/windowsserver
2003/deploy/confeat/ws03crtm.asp
>
>
>
>
>
>--
>David B. Cross [MS]
>
>--
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>http://support.microsoft.com
>
>"Hendrik Brockhaus" <hendrik.brockhaus@siemens.com> wrote
in message
>news:175201c38691$dbd8e330$a001280a@phx.gbl...
>> Hello David,
>>
>> As an example I would like to issue certificates with a
>> SubjectAlternativeName of the type DNSname and I would
>> like to input the DNS name value somewhere in the
Advanced
>> Certificate Request web page.
>> In the Advanced Certificate Request web page there is
the
>> Attributes text box in the Additional Options part of
the
>> page. My idea was to somehow input the SubjectAltName
>> request data in that box. Is that the only way to do it?
>> What kind of information can I provide in what format in
>> that box?
>> How can I provide a KeyUsage attribute and set it
critical?
>>
>> Kind regards,
>> Hendrik
>>
>> >-----Original Message-----
>> >Can you provide an example of what type of attribute
you
>> would like to be
>> >set? Some can be set at request time, some can be set
at
>> submission time.
>> >
>> >--
>> >
>> >
>> >David B. Cross [MS]
>> >
>> >--
>> >This posting is provided "AS IS" with no warranties,
and
>> confers no rights.
>> >
>> >http://support.microsoft.com
>> >
>> >"Hendrik Brockhaus" <hendrik.brockhaus@siemens.com>
wrote
>> in message
>> >news:180901c3865b$3f43a6d0$a301280a@phx.gbl...
>> >> How can I set additional attributes in the
certrqma.asp
>> >> web page for certificates to be issued by a Microsoft
>> >> Windows 2000 CA (either stand-alone or enterprise)?
>> >>
>> >
>> >
>> >.
>> >
>
>
>.
>

Loading