Keywords › ALTNAME Keyword—SubjectAltname Values

ALTNAME Keyword—SubjectAltname Values

Valid on z/OS.

Use the ALTNAME keyword to specify the appropriate values for the SubjectAltname extension, of which one or more values might be coded. There is no default for ALTNAME.

This keyword has the following format:

TSS GENCERT(acid) ALTNAME('IP=nnn.nnn.nnn.nnn
                          DOMAIN=domain‑name
                          EMAIL=email‑address
                          URI=uri')

IP

Specifies a string containing a fully qualified IP address in IPV4 dotted decimal form, which is four decimal numbers (each number must be a value from 0‑255) separated by periods. For example:

ALTNAME('IP=123.123.123.123)

DOMAIN

Specifies a string containing a fully qualified internet domain name. For example:

ALTNAME(DOMAIN=CA.COM)

EMAIL

Specifies a string containing a fully qualified email address. For example:

ALTNAME('EMAIL=david@kindgom.net')

URI

Specifies the universal resource identifier. For example:

ALTNAME('URI=www.ca.com')

Note: When you specify multiple parameters to ALTNAME, include one single quote at the beginning and end of the parameter list. Multiple parameters are separated with a space. For example:

ALTNAME('IP=200.100.10.1 EMAIL=my.email@test.net')

This keyword is used with:

• The GENCERT command
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN) authority for users within their scope, and MISC4(CERTGEN).
• MISC4(CERTSITE) authority for CERTSITE ACID and MISC4(CERTAUTH) for CERTAUTH ACID.

Example: ALTNAME keyword

This example specifies the values EMAIL=DAVID@KINDGOM.and NET IP=123.123.123.123 values for the SubjectAltname extension:

TSS GENCERT(acid) DIGICERT(cert01)
                  SUBJECTN('CN=CERT01')
                  KEYUSAGE(HANDSHAKE)
                  ALTNAME('EMAIL=DAVID@KINDGOM.NET IP=123.123.123.123')

Note: Include single quotes if specifying more than one value with KEYUSAGE. For example:

KEYUSAGE('HANDSHAKE DATAENCRYPT')