/<operation>

<FORM ACTION="https://certs.mydom.com/displayBySerial" METHOD="POST">
Serial Number: <INPUT TYPE="TEXT" NAME="serialNumber">
<INPUT TYPE="SUBMIT" VALUE="Display This Certificate">
</FORM>

<SCRIPT LANGUAGE="JavaScript">
var header = new Object();
var fixed = new Object();
var recordSet = new Array;
var result = new Object();
var httpParamsCount = 0;
var httpHeadersCount = 0;
var authTokenCount = 0;
var serverAttrsCount = 0;
header.HTTP_PARAMS = new Array;
header.HTTP_HEADERS = new Array;
header.AUTH_TOKEN = new Array;
header.SERVER_ATTRS = new Array;
header.certPrettyPrint = [long string containing pretty- printed certificate]
header.noCertImport = false;
header.certFingerprint = [string containing certificate fingerprints]
header.authorityid = "ca";
header.serialNumber = 5;
header.emailCert = true;
header.certChainBase64 = [string containing base-64 encoded certificate]
result.header = header;
result.fixed = fixed;
result.recordSet = recordSet;
</SCRIPT>

<SCRIPT LANGUAGE="JavaScript">
var header = new Object();
var result = new Object();
header.errorDetails = [a string describing the context of the error]
header.errorDescription = [a string describing the error]
result.header = header;
</SCRIPT>

i18nCharset.<lang>=<charset>

i18nCharset.ko=EUC_KR

Table 24.1 Languages and Default Character Sets

Figure 24.1 End-entity services interface

Table 24.2 Forms for end-entity enrollment

Table 24.3 Forms for certificate renewal

Table 24.4 Forms for certificate revocation

Table 24.5 Forms provided for certificate retrieval

Table 24.6 Form for encryption private key recovery

Table 24.7 Files and forms used by other forms

Table 24.8 Response templates used by the end-entity interface

Figure 24.2 Various parts of the Agent Services interface

<server_root> is the directory where the CMS binaries are kept, as specified during installation.

<instance_id> is the ID for this instance of Certificate Management System. You specified this ID during installation.

<subsystem> refers to the forms directory pertaining to a subsystem, the Certificate Manager (ca), Registration Manager (ra), or Data Recovery Manager (kra).

<SCRIPT LANGUAGE="JavaScript">

var header = new Object();

var fixed = new Object();

var recordSet = new Array;

var result = new Object();

var httpParamsCount = 0;

var httpHeadersCount = 0;

var authTokenCount = 0;

var serverAttrsCount = 0;

header.HTTP_PARAMS = new Array;

header.HTTP_HEADERS = new Array;

header.AUTH_TOKEN = new Array;

header.SERVER_ATTRS = new Array;

fixed.preserved = "foo";

var recordCount = 0;

var record;

record = new Object;

record.HTTP_PARAMS = new Array;

record.HTTP_HEADERS = new Array;

record.AUTH_TOKEN = new Array;

record.SERVER_ATTRS = new Array;

recordSet[recordCount++] = record;

result.header = header;

result.fixed = fixed;

result.recordSet = recordSet;

</SCRIPT>

Table 24.9 Variables Returned by the Base JavaScript

header.AUTH_TOKEN[0].name = "fooValid";

header.AUTH_TOKEN[0].value = "false";

header.AUTH_TOKEN[1].name = "barValid";

header.AUTH_TOKEN[1].value = "true";

header.HTTP_HEADERS[0].name = "accept-language"

header.HTTP_HEADERS[0].value = "en";

header.HTTP_HEADERS[1].name = "user-agent"

header.HTTP_HEADERS[1].value = "Mozilla/4.51 (X11; U; SunOS 5.7 
sun4u)";

header.HTTP_PARAMS[0].name = "uid"

header.HTTP_PARAMS[0].value = "userOne";

recordCount = 0;

record.serialNumber = 1;

recordSet[recordCount++] = record;

record.serialNumber = 2;

recordSet[recordCount++] = record;

header.SERVER_ATTRS[0].name = "requestStatus";

header.SERVER_ATTRS[0].value = "pending";

Table 24.10 End-Entity Interfaces

> crypto ca identity Example

Table 24.11 Parameters Accepted by the Challenge Revocation Interface

Table 24.12 Parameters Accepted by the Display Certificate By Serial Number Interface

Table 24.16 Parameters Accepted by the Enrollment Interface

Table 24.18 Variables Returned by the Enrollment Interface

Table 24.21 Variables Returned by the Get Certificate By Serial Number Interface

importUserCertificates(result.fixed.nickname, 
result.fixed.cmmfResponse, true);

Table 24.23 Variables Returned by the Get Certificate From Request Interface

importUserCertificates(result.fixed.nickname, 
result.fixed.cmmfResponse, true);

Table 24.26 Parameters Accepted by the List Certificates Interface

(&(certStatus=VALID)(|(x509cert.nsExtension.SSLClient=on)(x509cer
t.nsExtension.SecureEmail=on)))

Table 24.27 List Certificates queryCertFilter Parameters

Object lowDate = new Date(1999,00,01);

Object highDate = new Date(1999,11,31);

form.queryCertFilter.value =

	"(&(certCreateTime>=" + lowDate + ")" +

	"(certCreateTime<=" + highDate + ")";

(&(certRecordId>=100)(certRecordId<=199))

(|(x509cert.certRevoInfo=0)(x509cert.certRevoInfo=1))

(x509cert.nsExtension.SSLClient=on)

(x509cert.subject=*E=*jdoe*)

(|(x509cert.subject=*E=jdoe@example.com,*)

  (x509cert.subject=*E=jdoe@example.com))

Table 24.32 Agent Interfaces