New CRL Profile

To create a new profile, clicking ‘New Profile’ will display the following new CRL profile creation screen.

On the above page:

Enter the Profile name

Enter validity in a number of days.

The Custom CRL number field is 1 by default. It is a monotonically increasing sequence number for a given CRL scope and the CRL issuer allows users to easily determine when a particular CRL succeeds another CRL

CRL Extensions:

The following is the list of extensions available for selection as part of the ‘CRL Extensions’ section. To select a specific extension, select the ‘Use’ checkbox attached to the respective extension. For selected extensions, an option to mark a specific section as ‘Critical’ is also provided.

The Issuer alternate name extension (optional) allows additional identities to be associated with the issuer of CRL

The Authority Information Access extension (optional) contains information about the issuer of the certificate. This extension helps to fetch immediate certificates from the issuing certification authority

Delta CRL extension (optional) contains all non-expired certificates that have been revoked since the last base CRL was published

The Freshest URL extension (optional) identifies the CRL to which a certificate user should refer to obtain the freshest revocation information

The Authority Key Identifier extension (mandatory) provides a means of identifying the public key corresponding to the private key used to sign a certificate

Once all the required details are selected, clicking on “Proceed” will display the following page.

In the above image, the Admin should enter their Username and token PIN and click on the ‘Authenticate’ button. The admin credentials will be validated

Clicking on the ‘Edit’ button will redirect the Admin to the first step with filled details where the Admin can modify the entered data

Once the validation is done, clicking on ‘Confirm’ will create the CRL profile and be viewed below

Clicking on ‘View all’ will redirect the Administrator to the ‘CRL Profiles’ page

Clicking on ‘+ New’ will redirect the Administrator to the step1 of certificate Profile creation where the admin should be able to create a new certificate profile

The created certificate profile will be updated on the ‘CRL Profiles’ page