Describes constraints on a
Certificate's
Subject and
SubjectAltNames.
Attributes
Name
Description
cel_expression
google.type.expr_pb2.Expr
Optional. A CEL expression that may be used
to validate the resolved X.509 Subject and/or
Subject Alternative Name before a certificate is
signed. To see the full allowed syntax and some
examples, see
https://cloud.google.com/certificate-authority-
service/docs/using-cel
allow_subject_passthrough
bool
Required. If this is true, the
Subject field
may be copied from a certificate request into the signed
certificate. Otherwise, the requested
Subject will
be discarded.
allow_subject_alt_names_passthrough
bool
Required. If this is true, the
SubjectAltNames
extension may be copied from a certificate request into the
signed certificate. Otherwise, the requested
SubjectAltNames
will be discarded.