Lines Matching full:extension
140 x509v3_config \- X509 V3 certificate extension configuration format
154 Each entry in the extension section takes the form:
160 If \fBcritical\fR is present then the extension will be marked as critical.
162 If multiple entries are processed for the same extension name,
167 There are four main types of extension:
201 If an extension is multi-value and a field value must contain a comma the long
246 the extension but should be documented.
247 See \*(L"Certificate Policies\*(R" for an example of a raw extension.
249 If an extension type is unsupported, then the \fIarbitrary\fR extension syntax
253 The following sections describe the syntax of each supported extension.
254 They do not define the semantics of the extension.
257 This is a multi-valued extension which indicates whether a certificate is
274 or omit the extension entirely.
280 Key usage is a multi-valued extension consisting of a list of names of
294 This extension consists of a list of values indicating purposes for which
328 The \s-1SKID\s0 extension specification has a value with three choices.
329 If the value is the word \fBnone\fR then no \s-1SKID\s0 extension will be included.
345 The \s-1AKID\s0 extension specification may have the value \fBnone\fR
375 This is a multi-valued extension that supports several types of name
388 contained in the certificate subject name in the extension.
390 from the certificate subject name to the extension.
437 This extension supports most of the options of subject alternative name;
449 This extension gives details about how to retrieve information that
470 This is a multi-valued extension whose values can be either a name-value
474 When a name-value pair is used, a DistributionPoint extension will
526 This extension should only appear in CRLs. It is a multi-valued extension
528 points extension. The following names have meaning:
560 This is a \fIraw\fR extension that supports all of the defined fields of the
561 certificate extension.
623 This is a multi-valued extension which consisting of the names
634 This is a string extension whose value must be a non negative integer.
643 This is a multi-valued extension. The name should
661 This is a string extension. It is parsed, but ignored.
670 This is a multi-valued extension consisting of a list of \s-1TLS\s0 extension
672 When a \s-1TLS\s0 client sends a listed extension, the \s-1TLS\s0 server is expected to
673 include that extension in its reply.
688 Netscape Comment (\fBnsComment\fR) is a string extension containing a comment
704 If an extension is not supported by the OpenSSL code then it must be encoded
705 using the arbitrary extension format. It is also possible to use the arbitrary
707 the data is formatted correctly for the given extension type.
711 The first way is to use the word \s-1ASN1\s0 followed by the extension content
726 extension.
733 The value following \s-1DER\s0 is a hex dump of the \s-1DER\s0 encoding of the extension
734 Any extension can be placed in this form to override the default behaviour.
743 extension. It may therefore be sometimes possible to use certificates for