Certificate Extension Parameter (platCrypto-CertificateExtensionParameter)

The Certificate Extension Parameter component allows you to configure a Certificate Extension that will be applied to the CSR to be submitted for signing.

You can access this component from the signingService palette by expanding Unconfigured components > CertificateParameters, and add the desired Certificate Parameter component to a Signing Profile or a Signed Cert Config component. As of Niagara 4.14, the extension parameter “Subject Alternative Name” is added by default to the serverProfile.

PropertyValueDescription
Parameter Typeread-onlySpecifies the type of certificate parameter.
Extension OidstringSpecifies the object Id of the certificate extension.
valueadditional propertiesLists information that is configuration-specific to the selected type of extension. As of Niagara 4.14, the following added special format options are available:
  • %niagaraStationAddressOrHostnameOrIpAddress%: This option first will attempt to locate a corresponding NiagaraStation in the NiagaraNetwork of the local station, which is the SigningService station, to find a match for the requester. If located, the Address property value of that NiagaraStation will be used. If not located, it will next attempt to use the Host Name of the requester. If the Host Name is not available, it will use the IP Address of the requester.

  • %niagaraStationAddressOrHostname%: This option will first attempt to locate a corresponding NiagaraStation in the NiagaraNetwork of the local station, which is the SigningService station, to find a match for the requester. If located, the Address property value of that NiagaraStation will be used. If not found, it will use the Host Name of the requester.

  • %niagaraStationAddressOrIpAddress%: This option will first attempt to locate a corresponding NiagaraStation in the NiagaraNetwork of the local station, which is the SigningService station, to find a match for the requester. If located, the Address property value of that NiagaraStation will be used. If not found, it will use the IP Address of the requester.