NameConstraints(mapping=None, *, ignore_unknown_fields=False, **kwargs)Describes the X.509 name constraints extension, per https://tools.ietf.org/html/rfc5280#section-4.2.1.10
Attributes |
|
|---|---|
| Name | Description |
critical |
bool
Indicates whether or not the name constraints are marked critical. |
permitted_dns_names |
MutableSequence[str]
Contains permitted DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, example.com, www.example.com,
www.sub.example.com would satisfy example.com while
example1.com does not.
|
excluded_dns_names |
MutableSequence[str]
Contains excluded DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, example.com, www.example.com,
www.sub.example.com would satisfy example.com while
example1.com does not.
|
permitted_ip_ranges |
MutableSequence[str]
Contains the permitted IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses. |
excluded_ip_ranges |
MutableSequence[str]
Contains the excluded IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses. |
permitted_email_addresses |
MutableSequence[str]
Contains the permitted email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. .example.com) to indicate all email addresses in
that domain.
|
excluded_email_addresses |
MutableSequence[str]
Contains the excluded email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. .example.com) to indicate all email addresses in
that domain.
|
permitted_uris |
MutableSequence[str]
Contains the permitted URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like .example.com)
|
excluded_uris |
MutableSequence[str]
Contains the excluded URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like .example.com)
|