...
- subjectAltName: e.g., an e-mail address in the form email:<email address>
- crlDistributionPoints: comma-separated addresses of Certificate Revocation List in the form URI:<address.{pem|crl}>, e.g., crlDistributionPoints=URI:http://scrldp1.ica.cz/sica09.crl,URI:http://scrldp2.ica.cz/sica09.crl
General explanation of this fields can be found in OpenSSL x509v3_config. Description of values for this parameters in the context of epSOS can be found in epSOS D3.4.2, section 5.4.2 "Certificate Profile - Certificate Extensions".
...