X509NameConstraintsExtension Class
The name constraints extension, which MUST be used only in a CA certificate, indicates a name space
within which all subject names in subsequent certificates in a certification path MUST be located.
Restrictions apply to the subject distinguished name and apply to subject alternative names.
Restrictions apply only when the specified name form is present. If no name of the type is in the
certificate, the certificate is acceptable. More details about Name constraints extension processing:
RFC 5280.
Namespace: SysadminsLV.PKI.Cryptography.X509CertificatesAssembly: SysadminsLV.PKI (in SysadminsLV.PKI.dll) Version: 4.0.1
public sealed class X509NameConstraintsExtension : X509Extension
Public NotInheritable Class X509NameConstraintsExtension
Inherits X509Extension
public ref class X509NameConstraintsExtension sealed : public X509Extension
[<SealedAttribute>]
type X509NameConstraintsExtension =
class
inherit X509Extension
end
- Inheritance
- X509Extension X509NameConstraintsExtension
ExcludedSubtree |
Gets a collection of explicitly disallowed names. Any name matching a restriction in this
collection is invalid regardless of information appearing in the PermittedSubtree
member.
|
PermittedSubtree |
Gets a collection of explicitly allowed names. Any name matching a restriction in this
collection is valid only if it is not listed in the ExcludedSubtree collection.
member.
|