3.1.2.4.2.2.2.7 Certificate.Template.msPKI-Enrollment-Flag
The following processing rules are applied to flags in the Certificate.Template.msPKI-Enrollment-Flag datum.
|
Flag |
Client processing |
|---|---|
|
0x00000001 |
CT_FLAG_INCLUDE_SYMMETRIC_ALGORITHMS The client MUST include a Secure/Multipurpose Internet Mail Extensions (S/MIME), as specified in [RFC4262], in the request. Note that although the flag contains the words "SYMMETRIC ALGORITHMS" as part of its name, it specifies only S/MIME extensions. |
|
0x00008000 |
CT_FLAG_INCLUDE_BASIC_CONSTRAINTS_FOR_EE_CERTS If this flag is set, the client SHOULD add a Basic Constraints extension (as specified in [RFC3280], section 4.2.1.10) to the certificate request and set the cA field to FALSE. The client SHOULD NOT include the pathLenConstraint field in the Basic Constraints extension. <56> |