z/OS Cryptographic Services PKI Services Guide and Reference
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


CRL extensions and CRL entry extensions

z/OS Cryptographic Services PKI Services Guide and Reference
SA23-2286-00

PKITP supports the following CRL and CRL entry extensions, which are checked for form only:

CRL extensions:
  • AuthorityKeyIdentifier
  • CRLNumber
  • IssuerAltName
  • IssuingDistributionPoint
CRL entry extensions:
  • CertificateIssuer
  • CRLReason
  • HoldInstructionCode
  • InvalidityDate
All other extensions are ignored if they are not marked critical. Unsupported critical extensions prevent certificate validation.
Parent topic: PKI Services Trust Policy (PKITP)

Go to the previous page Go to the next page

Notices | Terms of use | Support | Contact z/OS | zFavorites



Copyright IBM Corporation 1990, 2014