passthroughExtensions property

CertificateExtensionConstraints? passthroughExtensions
getter/setter pair

Describes the set of X.509 extensions that may appear in a Certificate issued through this CaPool.

If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be dropped. If a certificate request uses a CertificateTemplate with predefined_values that don't appear here, the certificate issuance request will fail. If this is omitted, then this CaPool will not add restrictions on a certificate's X.509 extensions. These constraints do not apply to X.509 extensions set in this CaPool's baseline_values.

Optional.

Implementation

CertificateExtensionConstraints? passthroughExtensions;