Class CertificateIdentityConstraints

Describes constraints on a Certificate's Subject and SubjectAltNames.

Attributes
NameDescription
google.type.expr_pb2.Exprcel_expression
Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority- service/docs/using-cel
boolallow_subject_passthrough
Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded. This field is a member of `oneof`_ ``_allow_subject_passthrough``.
boolallow_subject_alt_names_passthrough
Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded. This field is a member of `oneof`_ ``_allow_subject_alt_names_passthrough``.

Inheritance

builtins.object > proto.message.Message > CertificateIdentityConstraints