ALTNAME Keyword—SubjectAltname Values

Keywords › ALTNAME Keyword—SubjectAltname Values

ALTNAME Keyword—SubjectAltname Values

Valid on z/OS.

Use the ALTNAME keyword to specify the appropriate values for the SubjectAltname extension, of which one or more values might be coded. There is no default for ALTNAME.

This keyword has the following format:

TSS GENCERT(acid) ALTNAME('IP=nnn.nnn.nnn.nnn
                          DOMAIN=domain‑name
                          EMAIL=email‑address
                          URI=uri')

IP

Specifies a string containing a fully qualified numeric IP address. The format can be:

IPv4 dotted decimal

Four decimal numbers between 0 and 255 separated by periods. For example:

141.202.1.255

IPv6

Eight parts divided by colons with each part a hexadecimal number between 0 and FFFF. For example:

1080:23B4:324:4:3BCD:26:39F4:332

IPv4 compatible IPv6 address

A combination of the two, six parts of the IPv6 followed by the IPv4 address. For example:

0:0:0:0:0:FFFF:141.202.1.255

The maximum field size is 45 bytes.

DOMAIN

Specifies a string containing a fully qualified internet domain name. For example:

ALTNAME(DOMAIN=CA.COM)

EMAIL

Specifies a string containing a fully qualified email address. For example:

ALTNAME('EMAIL=david@kindgom.net')

URI

Specifies the universal resource identifier. For example:

ALTNAME('URI=www.ca.com')

Note: When you specify multiple parameters to ALTNAME, include one single quote at the beginning and end of the parameter list. Multiple parameters are separated with a space. For example:

ALTNAME('IP=200.100.10.1 EMAIL=my.email@test.net')

This keyword is used with:

The GENCERT and RENEW commands
The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
ACID(MAINTAIN) authority for users within their scope, and MISC4(CERTGEN).
MISC4(CERTSITE) authority for CERTSITE ACID and MISC4(CERTAUTH) for CERTAUTH ACID.

Example: ALTNAME keyword

This example specifies the values EMAIL=DAVID@KINDGOM.and NET IP=123.123.123.123 values for the SubjectAltname extension:

TSS GENCERT(acid) DIGICERT(cert01)
                  SUBJECTN('CN=CERT01')
                  KEYUSAGE(HANDSHAKE)
                  ALTNAME('EMAIL=DAVID@KINDGOM.NET IP=123.123.123.123')

Note: Include single quotes if specifying more than one value with KEYUSAGE. For example:

KEYUSAGE('HANDSHAKE DATAENCRYPT')