Required Authority key identifiers are required elements in end entity certificates to properly establish the trust chain.
CRL Distribution Points
URI:http://{crl-server}{:crl-port}{/crl-path}
URI:ldap://{crl-server}{:crl-port}{/crl-dn} URLS and DNs that identify the location of CRLs in LDAP directories can be complex. Entities must be able to handle characters as defined by the LDAP URI specification in RFC 4516.
Recommended
Recommended
Extended Key Usage
id-kp-serverAuth = 1.3.6.1.5.5.7.3.2.1
id-kp-clientAuth = 1.3.6.1.5.5.7.3.2.2
Required
Optional Required if the same Identity Certificate is used when the server is acting as a client.
Key Usage
digitalSignature
nonRepudiation
keyEncipherment
dataEncipherment
All values are Optional. Values may vary as specified in RFC 5280 and RFC 3279.
Subject
CN={fqdn}
Required
Subject Alternative Name
IP:{ip}
DNS:{fqdn}
Optional For 96xx, 1XC SIP, and Avaya communicator SIP endpoints, PPM is defined as an IP address so PPM certificates must contain the IP:{ip} Subject Alternative Name entry when endpoints 96xx , 1XC SIP, and Avaya communicator SIP are part of the solution.
