Cisco 11503 - CSS Content Services Switch

Chapter 4 Configuring SSL Termination
Configuring Virtual SSL Servers for an SSL Proxy List
4-30
Cisco Content Services Switch SSL Configuration Guide
OL-5655-01
ServerCert-Subject-Key-Identifier Description: X.509 subject key identifier
Format: ASCII string of hexadecimal bytes separated by
colons for the X.509 version 3 subject key identifier
Example: ServerCert-Subject-Key-Identifier:
16:13:15:97:FD:8E:16:B9:D2:99
ServerCert-Authority-Key-Identifier Description: X.509 authority key identifier
Format: ASCII string of hex bytes separated by colons for the
X.509 version 3 Authority Key Identifier
Example: ServerCert-Authority-Key-Identifier:
16:13:15:97:FD:8E:16:B9:D2:99
ServerCert-Basic-Constraints Description: X.509 basic constraints
Format: String listing whether the certificate subject can act
as a certificate authority. Possible values are CA=TRUE or
CA=FALSE
Example: ServerCert-Basic-Constraints: CA=TRUE
ServerCert-Signature-Algorithm Description: Certificate signature algorithm
Format: The md5WithRSAEncryption,
sha1WithRSAEncryption, or dsaWithSHA1 for the secure
hash algorithm
Example: ServerCert-Signature-Algorithm:
md5WithRSAEncryption
ServerCert-Signature Description: Certificate signature
Format: Secure hash of the other fields in the certificate and
a digital signature of the hash printed in big-endian format
hexadecimal, without leading 0x, and lowercase
alphanumeric characters and separated by a colon (:)
character
Example: ServerCert-Signature: 33:75:8e:a4:05:92:65
Table 4-3 Server Certificate Fields Inserted In the HTTP Header (continued)
Field Description