Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.
↳ allow_subject_alt_names_passthrough
bool
Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.
Required. If this is true, the
Subject field may be copied
from a certificate request into the signed certificate. Otherwise, the
requested Subject will be
discarded.
Returns
Type
Description
bool
hasAllowSubjectPassthrough
clearAllowSubjectPassthrough
setAllowSubjectPassthrough
Required. If this is true, the
Subject field may be copied
from a certificate request into the signed certificate. Otherwise, the
requested Subject will be
discarded.
Parameter
Name
Description
var
bool
Returns
Type
Description
$this
getAllowSubjectAltNamesPassthrough
Required. If this is true, the
SubjectAltNames
extension may be copied from a certificate request into the signed
certificate. Otherwise, the requested
SubjectAltNames will
be discarded.
Returns
Type
Description
bool
hasAllowSubjectAltNamesPassthrough
clearAllowSubjectAltNamesPassthrough
setAllowSubjectAltNamesPassthrough
Required. If this is true, the
SubjectAltNames
extension may be copied from a certificate request into the signed
certificate. Otherwise, the requested
SubjectAltNames will
be discarded.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[],[],null,["# Google Certificate Authority Service V1 Client - Class CertificateIdentityConstraints (2.1.1)\n\nVersion latestkeyboard_arrow_down\n\n- [2.1.1 (latest)](/php/docs/reference/cloud-security-private-ca/latest/V1.CertificateIdentityConstraints)\n- [2.1.0](/php/docs/reference/cloud-security-private-ca/2.1.0/V1.CertificateIdentityConstraints)\n- [2.0.3](/php/docs/reference/cloud-security-private-ca/2.0.3/V1.CertificateIdentityConstraints)\n- [1.7.3](/php/docs/reference/cloud-security-private-ca/1.7.3/V1.CertificateIdentityConstraints)\n- [1.5.0](/php/docs/reference/cloud-security-private-ca/1.5.0/V1.CertificateIdentityConstraints)\n- [1.4.2](/php/docs/reference/cloud-security-private-ca/1.4.2/V1.CertificateIdentityConstraints)\n- [1.3.1](/php/docs/reference/cloud-security-private-ca/1.3.1/V1.CertificateIdentityConstraints)\n- [1.2.2](/php/docs/reference/cloud-security-private-ca/1.2.2/V1.CertificateIdentityConstraints)\n- [1.1.0](/php/docs/reference/cloud-security-private-ca/1.1.0/V1.CertificateIdentityConstraints)\n- [1.0.3](/php/docs/reference/cloud-security-private-ca/1.0.3/V1.CertificateIdentityConstraints) \nReference documentation and code samples for the Google Certificate Authority Service V1 Client class CertificateIdentityConstraints.\n\nDescribes constraints on a\n[Certificate](/php/docs/reference/cloud-security-private-ca/latest/V1.Certificate)'s\n[Subject](/php/docs/reference/cloud-security-private-ca/latest/V1.Subject) and\n[SubjectAltNames](/php/docs/reference/cloud-security-private-ca/latest/V1.SubjectAltNames).\n\nGenerated from protobuf message `google.cloud.security.privateca.v1.CertificateIdentityConstraints`\n\nNamespace\n---------\n\nGoogle \\\\ Cloud \\\\ Security \\\\ PrivateCA \\\\ V1\n\nMethods\n-------\n\n### __construct\n\nConstructor.\n\n### getCelExpression\n\nOptional. A CEL expression that may be used to validate the resolved X.509\nSubject and/or Subject Alternative Name before a certificate is signed. To\nsee the full allowed syntax and some examples, see\n\u003chttps://cloud.google.com/certificate-authority-service/docs/using-cel\u003e\n\n### hasCelExpression\n\n### clearCelExpression\n\n### setCelExpression\n\nOptional. A CEL expression that may be used to validate the resolved X.509\nSubject and/or Subject Alternative Name before a certificate is signed. To\nsee the full allowed syntax and some examples, see\n\u003chttps://cloud.google.com/certificate-authority-service/docs/using-cel\u003e\n\n### getAllowSubjectPassthrough\n\nRequired. If this is true, the\n[Subject](/php/docs/reference/cloud-security-private-ca/latest/V1.Subject) field may be copied\nfrom a certificate request into the signed certificate. Otherwise, the\nrequested [Subject](/php/docs/reference/cloud-security-private-ca/latest/V1.Subject) will be\ndiscarded.\n\n### hasAllowSubjectPassthrough\n\n### clearAllowSubjectPassthrough\n\n### setAllowSubjectPassthrough\n\nRequired. If this is true, the\n[Subject](/php/docs/reference/cloud-security-private-ca/latest/V1.Subject) field may be copied\nfrom a certificate request into the signed certificate. Otherwise, the\nrequested [Subject](/php/docs/reference/cloud-security-private-ca/latest/V1.Subject) will be\ndiscarded.\n\n### getAllowSubjectAltNamesPassthrough\n\nRequired. If this is true, the\n[SubjectAltNames](/php/docs/reference/cloud-security-private-ca/latest/V1.SubjectAltNames)\nextension may be copied from a certificate request into the signed\ncertificate. Otherwise, the requested\n[SubjectAltNames](/php/docs/reference/cloud-security-private-ca/latest/V1.SubjectAltNames) will\nbe discarded.\n\n### hasAllowSubjectAltNamesPassthrough\n\n### clearAllowSubjectAltNamesPassthrough\n\n### setAllowSubjectAltNamesPassthrough\n\nRequired. If this is true, the\n[SubjectAltNames](/php/docs/reference/cloud-security-private-ca/latest/V1.SubjectAltNames)\nextension may be copied from a certificate request into the signed\ncertificate. Otherwise, the requested\n[SubjectAltNames](/php/docs/reference/cloud-security-private-ca/latest/V1.SubjectAltNames) will\nbe discarded."]]
