Lines Matching refs:extension
49 In particular, the subject key identifier extension, if present,
128 If the subject certificate has an authority key identifier extension,
179 the keyUsage extension (if present) of the candidate issuer certificate
283 CA certificates must explicitly include the keyUsage extension.
304 If a subjectAlternativeName extension is given it must not be empty.
328 Normally if an unhandled critical extension is present that is not
557 The basicConstraints extension CA flag is used to determine whether the
562 If the basicConstraints extension is absent,
571 If the keyUsage extension is present then additional restraints are
573 keyCertSign bit set if the keyUsage extension is present.
577 The extKeyUsage (EKU) extension places additional restrictions on the
578 certificate uses. If this extension is present (whether critical or not)
590 The extended key usage extension must be absent or include the "web client
591 authentication" OID. The keyUsage extension must be absent or it must have the
597 The extended key usage extension must be absent or include the "web client
600 This is used as a work around if the basicConstraints extension is absent.
604 The extended key usage extension must be absent or include the "web server
605 authentication" and/or one of the SGC OIDs. The keyUsage extension must be
612 The extended key usage extension must be absent or include the "web server
615 This is used as a work around if the basicConstraints extension is absent.
620 keyEncipherment bit set if the keyUsage extension is present. This isn't
626 The extended key usage extension must be absent or include the "email
635 the nonRepudiation bit must be set if the keyUsage extension is present.
640 if the keyUsage extension is present.
644 The extended key usage extension must be absent or include the "email
647 This is used as a work around if the basicConstraints extension is absent.
651 The keyUsage extension must be absent or it must have the CRL signing bit
656 The normal CA tests apply. Except in this case the basicConstraints extension
