NameConstraints

RFC 5280 §4.2.1.10 Name Constraints.

A CA certificate may restrict the namespace of all subject names in subsequent certificates in the path.

interface NameConstraints<TForm extends ParsedNameConstraintForm> {
	readonly permittedSubtrees?: readonly GeneralSubtree<TForm>[];
	readonly excludedSubtrees?: readonly GeneralSubtree<TForm>[];
}

Properties

• readonly permittedSubtrees?: readonly GeneralSubtree<TForm>[] — Names that MUST fall within these subtrees to be valid.
• readonly excludedSubtrees?: readonly GeneralSubtree<TForm>[] — Names that MUST NOT fall within these subtrees. Takes precedence over permitted.