[Version] Signature = "$Windows NT$" [PolicyStatementExtension] Policies = {Adatum}CPS [{Adatum}CPS] URL = http://www.{adatum.com}/pki/policies.html OID = 2.5.29.32.0 [certsrv_server] ; set certificate key length. This entry is used only during CA certificate renewal with new key pair. RenewalKeyLength = 2048 ; Set CRL validity period to 5 days CRLPeriodUnits = 5 CRLPeriod = days ; Set CRL overlap settings. Overlap extends CRL validity period to a reasonable time that may be ; necessary to resolve Active Directory replication latency. In a given example CRL validity is extended ; to 1 day. CRLOverlapUnits = 1 CRLOverlapPeriod = days ; Set Delta CRL publishing frequence to 12 hours CRLDeltaPeriodUnits = 12 CRLDeltaPeriod = hours ; Set alternate signature algorithm extensions. AlternateSignatureAlgorithm = 1