ca-scripts/tpl/user-ext.tpl
2009-10-12 22:46:50 +01:00

18 lines
634 B
Smarty

basicConstraints = critical, CA:FALSE
nsCertType = client, objsign, email
nsRevocationUrl = %CA_CRL_URI%
%CA_CRT_COMMENT%
keyUsage = critical, keyEncipherment, keyAgreement, digitalSignature, nonRepudiation, dataEncipherment
extendedKeyUsage = clientAuth, codeSigning, emailProtection
issuerAltName = issuer:copy
subjectAltName = @user_altname
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer:always
authorityInfoAccess = caIssuers;URI:%CA_CRT_URI%
crlDistributionPoints = URI:%CA_CRL_URI%
[ user_altname ]
URI=%CA_CRT_URI%
email=move