`DnsServiceIdentityInput`

DNS hostname reference identifier.

interface DnsServiceIdentityInput {
	readonly type: "dns";
	readonly value: string;
	readonly allowCommonNameFallback?: boolean;
}

Properties

readonly type: "dns" — Discriminant for DNS hostname matching.
readonly value: string — The hostname to match (e.g. "mail.example.com"). Wildcard labels in the certificate are handled internally.
readonly allowCommonNameFallback?: boolean — When true, falls back to the subject CN if the SAN extension has no dns/uri/srv entries. Suppressed when any supported SAN type is present. RFC 9525 §4.1 forbids identifying a service by the Common Name RDN.

DnsServiceIdentityInput ​