Cisco 11503 - CSS Content Services Switch

4-23
Cisco Content Services Switch SSL Configuration Guide
OL-5655-01
Chapter 4 Configuring SSL Termination
Configuring Virtual SSL Servers for an SSL Proxy List
ClientCert-Serial-Number Description: Certificate serial number
Format: A whole integer value assigned by the certificate
authority; this can be any arbitrary integer value
Example: ClientCert-Serial-Number: 2
ClientCert-Data-Signature-
Algorithm
Description: X.509 Hashing and Encryption Method
Format: The md5WithRSAEncryption, sha1WithRSAEncryption,
or dsaWithSHA1 algorithm used to sign the certificate and
algorithm parameters
Example: ClientCert-Signature-Algorithm:
md5WithRSAEncryption
ClientCert-DSA-Public-Key-Size Description: The size in bits of the DSA public key, if the
certificate contains a DSA key.
Format: Number of bits as a whole integer followed by the word
bit
Example: ClientCert-DSA-Public-Key-Size: 1024 bit
ClientCert-DSA-Public-Key Description: The DSA algorithm public key. Only used if the
certificate contains a DSA key.
Format: The key is printed in big-endian format hexadecimal,
without leading 0x, and lowercase alphanumeric characters
separated by a colon (:) character
Example: ClientCert-DSA-Public-Key:
00:d8:1b:94:de:52:a1:20:51:b1:77
ClientCert-Subject Description: X.509 subject’s distinguished name
Format: String of characters representing the subject that owns
the private key being certified
Example: ClientCert-Subject: CN=Example, ST=Virginia,
C=US/Email=ca@example.com, 0=Root
Table 4-2 Client Certificate Fields Inserted in the HTTP Header (continued)
Client Certificate Field Description, Format, and Example