Cisco 11503 - CSS Content Services Switch Configuration Manual page 106

Configuring Virtual SSL Servers for an SSL Proxy List
Table 4-2 Client Certificate Fields Inserted in the HTTP Header (continued)
Client Certificate Field
ClientCert-Issuer
ClientCert-Not-After
ClientCert-Not-Before
ClientCert-Public-Key-Algorithm
ClientCert-RSA-Modulus-Size
ClientCert-RSA-Modulus
Cisco Content Services Switch SSL Configuration Guide
4-24
Description, Format, and Example
Description: X.509 Certificate Issuer's Distinguished Name
Format: String of characters representing the certificate authority
that issued this certificate
Example: ClientCert-Issuer: CN=Example CA, ST=Virginia,
C=US/Email=ca@exampleca.com, 0=Root
Description: Certificate is not valid after this date
Format: A universal time string or generalized time string in the
Not After date of the Validity field
Example: ClientCert-Not-After: 2003-1-27 23:59.59 UTC
Description: Certificate is not valid before this date
Format: A universal time string or generalized time string in the
Not Before date of the Validity field
Example: ClientCert-Not-Before: 2002-1-27 00:00:00.00 UTC
Description: The algorithm used for the public key
Format: The rsaEncryption, rsa, or dsaEncryption public key
algorithm used to create the public key in the certificate
Example: ClientCert-Public-Key-Algorithm: rsaEncryption
Description: Size of the RSA public key
Format: Number of bits as a whole integer of the RSA modulus
(typically 512, 1024, or 2048), followed by the word bit
Example: ClientCert-RSA-Modulus-Size: 1024 bit
Description: RSA modulus
Format: The RSA algorithm modulus (n) printed in big-endian
format hexadecimal, without leading 0x, and lowercase
alphanumeric characters separated by a colon (:) character.
Together with the exponent (e), this modulus forms the public key
portion in the RSA certificate
Example: ClientCert-RSA-Modulus: +
00:d8:1b:94:de:52:a1:20:51:b1:77
Chapter 4 Configuring SSL Termination
OL-5655-01