Cisco 11503 - CSS Content Services Switch Configuration Manual page 107

Chapter 4 Configuring SSL Termination
Table 4-2 Client Certificate Fields Inserted in the HTTP Header (continued)
Client Certificate Field
ClientCert-RSA-Exponent
ClientCert-Subject-Key-Identifier
ClientCert-Authority-Key
-Identifier
ClientCert-Basic-Constraints
ClientCert-Signature-Algorithm
ClientCert-Signature
OL-5655-01
Configuring Virtual SSL Servers for an SSL Proxy List
Description, Format, and Example
Description: The public RSA exponent
Format: Printed as a whole integer for the RSA algorithm
exponent (e)
Example: ClientCert-RSA-Exponent: 65537
Description: X.509 subject key identifier
Format: ASCII string of hexadecimal bytes separated by colons
for the X.509 version 3 subject key identifier
Example: ClientCert-Subject-Key-Identifier:
16:13:15:97:FD:8E:16:B9:D2:99
Description: X.509 authority key identifier
Format: ASCII string of hexadecimal bytes separated by colons
for the X.509 version 3 Authority Key Identifier
Example: ClientCert-Authority-Key-Identifier:
16:13:15:97:FD:8E:16:B9:D2:99
Description: X.509 basic constraints
Format: String listing whether the certificate subject can act as a
certificate authority. Possible values are CA=TRUE or
CA=FALSE basic constraints
Example: ClientCert-Basic-Constraints: CA=TRUE
Description: Certificate signature algorithm
Format: The md5WithRSAEncryption, sha1WithRSAEncryption,
or dsaWithSHA1 for the secure hash algorithm
Example: ClientCert-Signature-Algorithm:
md5WithRSAEncryption
Description: Certificate signature
Format: Secure hash of the other fields in the certificate and a
digital signature of the hash printed in big-endian format
hexadecimal, without leading 0x, and lowercase alphanumeric
characters separated by a colon (:) character
Example: ClientCert-Signature: 33:75:8e:a4:05:92:65
Cisco Content Services Switch SSL Configuration Guide
4-25