Lines Matching full:extension
5 x509v3_config - X509 V3 certificate extension configuration format
20 Each entry in the extension section takes the form:
24 If B<critical> is present then the extension will be marked as critical.
26 If multiple entries are processed for the same extension name,
31 There are four main types of extension:
59 If an extension is multi-value and a field value must contain a comma the long
96 the extension but should be documented.
97 See L</Certificate Policies> for an example of a raw extension.
99 If an extension type is unsupported, then the I<arbitrary> extension syntax
104 The following sections describe the syntax of each supported extension.
105 They do not define the semantics of the extension.
109 This is a multi-valued extension which indicates whether a certificate is
124 or omit the extension entirely.
131 Key usage is a multi-valued extension consisting of a list of names of
144 This extension consists of a list of values indicating purposes for which
175 The SKID extension specification has a value with three choices.
176 If the value is the word B<none> then no SKID extension will be included.
191 The AKID extension specification may have the value B<none>
220 This is a multi-valued extension that supports several types of name
233 contained in the certificate subject name in the extension.
235 from the certificate subject name to the extension.
279 This extension supports most of the options of subject alternative name;
290 This extension gives details about how to retrieve information that
310 This is a multi-valued extension whose values can be either a name-value
314 When a name-value pair is used, a DistributionPoint extension will
371 This extension should only appear in CRLs. It is a multi-valued extension
373 points extension. The following names have meaning:
412 This is a I<raw> extension that supports all of the defined fields of the
413 certificate extension.
466 This is a multi-valued extension which consisting of the names
476 This is a string extension whose value must be a non negative integer.
484 This is a multi-valued extension. The name should
501 This is a string extension. It is parsed, but ignored.
509 This is a multi-valued extension consisting of a list of TLS extension
511 When a TLS client sends a listed extension, the TLS server is expected to
512 include that extension in its reply.
527 Netscape Comment (B<nsComment>) is a string extension containing a comment
545 If an extension is not supported by the OpenSSL code then it must be encoded
546 using the arbitrary extension format. It is also possible to use the arbitrary
548 the data is formatted correctly for the given extension type.
552 The first way is to use the word ASN1 followed by the extension content
565 extension.
570 The value following DER is a hex dump of the DER encoding of the extension
571 Any extension can be placed in this form to override the default behaviour.
579 extension. It may therefore be sometimes possible to use certificates for