SubjectRequestMode(value)Describes the way in which a Certificate's Subject and/or SubjectAltNames will be resolved.
Enums |
|
|---|---|
| Name | Description |
SUBJECT_REQUEST_MODE_UNSPECIFIED |
Not specified. |
DEFAULT |
The default mode used in most cases. Indicates that the certificate's Subject and/or SubjectAltNames are specified in the certificate request. This mode requires the caller to have the `privateca.certificates.create` permission. |
RDN_SEQUENCE |
A mode used to get an accurate representation of the Subject field's distinguished name. Indicates that the certificate's Subject and/or SubjectAltNames are specified in the certificate request. When parsing a PEM CSR this mode will maintain the sequence of RDNs found in the CSR's subject field in the issued Certificate. This mode requires the caller to have the `privateca.certificates.create` permission. |
REFLECTED_SPIFFE |
A mode reserved for special cases. Indicates that the certificate should have one SPIFFE SubjectAltNames set by the service based on the caller's identity. This mode will ignore any explicitly specified Subject and/or SubjectAltNames in the certificate request. This mode requires the caller to have the `privateca.certificates.createForSelf` permission. |