InitialNameConstraintsInput

Input for createNameConstraintValidationState.

Seeds the name-constraint engine with trust-anchor-level subtree restrictions that apply before any certificate in the chain is processed.

interface InitialNameConstraintsInput {
	readonly permittedSubtrees?: readonly GeneralSubtree[];
	readonly excludedSubtrees?: readonly GeneralSubtree[];
}

Properties

• readonly permittedSubtrees?: readonly GeneralSubtree[] — Subtrees within which all subsequent subject names must fall. Default: unconstrained.
• readonly excludedSubtrees?: readonly GeneralSubtree[] — Subtrees that no subsequent subject name may fall within. Default: none.