Class CertificateExtensionConstraints (1.10.2)

Version 1.10.2

• 1.13.1 (latest)
• 1.13.0
• 1.12.2
• 1.11.0
• 1.10.3
• 1.9.0
• 1.8.1
• 1.7.1
• 1.6.1
• 1.5.0
• 1.4.3
• 1.3.2
• 1.2.4
• 1.1.0
• 1.0.6
• 0.4.0
• 0.3.0
• 0.1.1

CertificateExtensionConstraints(
    mapping=None, *, ignore_unknown_fields=False, **kwargs
)

Describes a set of X.509 extensions that may be part of some certificate issuance controls.

Attributes
Name	Description
known_extensions	MutableSequence[google.cloud.security.privateca_v1.types.CertificateExtensionConstraints.KnownCertificateExtension] Optional. A set of named X.509 extensions. Will be combined with additional_extensions to determine the full set of X.509 extensions.
additional_extensions	MutableSequence[google.cloud.security.privateca_v1.types.ObjectId] Optional. A set of ObjectIds identifying custom X.509 extensions. Will be combined with known_extensions to determine the full set of X.509 extensions.

Classes

KnownCertificateExtension

KnownCertificateExtension(value)

Describes well-known X.509 extensions that can appear in a Certificate, not including the SubjectAltNames extension.

Values: KNOWN_CERTIFICATE_EXTENSION_UNSPECIFIED (0): Not specified. BASE_KEY_USAGE (1): Refers to a certificate's Key Usage extension, as described in RFC 5280 section 4.2.1.3 <https://tools.ietf.org/html/rfc5280#section-4.2.1.3>. This corresponds to the KeyUsage.base_key_usage field. EXTENDED_KEY_USAGE (2): Refers to a certificate's Extended Key Usage extension, as described in RFC 5280 section 4.2.1.12 <https://tools.ietf.org/html/rfc5280#section-4.2.1.12>. This corresponds to the KeyUsage.extended_key_usage message. CA_OPTIONS (3): Refers to a certificate's Basic Constraints extension, as described in RFC 5280 section 4.2.1.9 <https://tools.ietf.org/html/rfc5280#section-4.2.1.9>. This corresponds to the X509Parameters.ca_options field. POLICY_IDS (4): Refers to a certificate's Policy object identifiers, as described in RFC 5280 section 4.2.1.4 <https://tools.ietf.org/html/rfc5280#section-4.2.1.4>. This corresponds to the X509Parameters.policy_ids field. AIA_OCSP_SERVERS (5): Refers to OCSP servers in a certificate's Authority Information Access extension, as described in RFC 5280 section 4.2.2.1 <https://tools.ietf.org/html/rfc5280#section-4.2.2.1>, This corresponds to the X509Parameters.aia_ocsp_servers field. NAME_CONSTRAINTS (6): Refers to Name Constraints extension as described in RFC 5280 section 4.2.1.10 <https://tools.ietf.org/html/rfc5280#section-4.2.1.10>