MatchServiceIdentityFailureDetails

MatchServiceIdentityFailureDetails

Diagnostic context attached to an identity-matching failure.

interface MatchServiceIdentityFailureDetails {
	readonly subjectCommonName?: string;
	readonly expected?: string;
	readonly actual?: string;
	readonly presentedIdentifierTypes?: readonly ("dns" | "uri" | "srv")[];
	readonly commonNameFallbackReason?: "disabled" | "suppressed_by_presented_identifier" | "common_name_missing" | "common_name_mismatch";
}

Properties

• readonly subjectCommonName?: string — CN of the certificate that was being matched, if present.
• readonly expected?: string — The reference identifier the caller asked to verify.
• readonly actual?: string — Comma-joined presented identifiers (from SAN) that were compared.
• readonly presentedIdentifierTypes?: readonly ("dns" | "uri" | "srv")[] — SAN types that were present, relevant to CN-fallback suppression logic.
• readonly commonNameFallbackReason?: "disabled" | "suppressed_by_presented_identifier" | "common_name_missing" | "common_name_mismatch" — Explains why CN fallback was not used or failed.