Certificate Profile Constraints - dogtagpki/pki GitHub Wiki

Built-in Constraints

Name Class

Signing Algorithm Constraint

com.netscape.cms.profile.constraint.SigningAlgConstraint

Authz Realm Constraint

com.netscape.cms.profile.constraint.AuthzRealmConstraint

Extension Constraint

com.netscape.cms.profile.constraint.ExtensionConstraint

Basic Constraints Extension Constraint

com.netscape.cms.profile.constraint.BasicConstraintsExtConstraint

Key Constraint

com.netscape.cms.profile.constraint.KeyConstraint

Extended Key Usage Extension Constraint

com.netscape.cms.profile.constraint.ExtendedKeyUsageExtConstraint

Key Usage Extension Constraint

com.netscape.cms.profile.constraint.KeyUsageExtConstraint

Netscape Certificate Type Extension Constraint

com.netscape.cms.profile.constraint.NSCertTypeExtConstraint

No Constraint

com.netscape.cms.profile.constraint.NoConstraint

Subject Name Constraint

com.netscape.cms.profile.constraint.SubjectNameConstraint

Unique Subject Name Constraint

com.netscape.cms.profile.constraint.UniqueSubjectNameConstraint

User Subject Name Constraint

com.netscape.cms.profile.constraint.UserSubjectNameConstraint

CMC Shared Token request User Subject Name Constraint

com.netscape.cms.profile.constraint.CMCSharedTokenSubjectNameConstraint

CMC User-Signed request User Subject Name Constraint

com.netscape.cms.profile.constraint.CMCUserSignedSubjectNameConstraint

Validity Constraint

com.netscape.cms.profile.constraint.ValidityConstraint

CA Validity Constraint

com.netscape.cms.profile.constraint.CAValidityConstraint

Renewal Grace Period Constraint

com.netscape.cms.profile.constraint.RenewGracePeriodConstraint

Unique Public Key Constraint

com.netscape.cms.profile.constraint.UniqueKeyConstraint

External Process Constraint

com.netscape.cms.profile.constraint.ExternalProcessConstraint

Certificate Constraints

⚠️ **GitHub.com Fallback** ⚠️