NameConstraintForm

NameConstraintForm

A name form used as a constraint base in namEConstraints. Distinct from SubjectAltName because IP constraints carry address + mask bytes (8 for IPv4, 32 for IPv6) rather than bare addresses.

type NameConstraintForm = {
  readonly type: "dns";
  readonly value: string
} | {
  readonly type: "email";
  readonly value: string
} | {
  readonly type: "uri";
  readonly value: string
} | {
  readonly type: "ip";
  readonly addressBytes: Uint8Array;
  readonly maskBytes: Uint8Array
} | {
  readonly type: "directoryName";
  readonly derHex: string
} | {
  readonly type: "srv";
  readonly value: string
}