X509CertificateTemplateSubjectNameFlag enumeration

The X509CertificateTemplateSubjectNameFlag enumeration contains values that specify server and client actions concerning subject names.

Syntax

typedef enum X509CertificateTemplateSubjectNameFlag { 
  SubjectNameEnrolleeSupplies                   = CT_FLAG_ENROLLEE_SUPPLIES_SUBJECT,
  SubjectNameRequireDirectoryPath               = CT_FLAG_SUBJECT_REQUIRE_DIRECTORY_PATH,
  SubjectNameRequireCommonName                  = CT_FLAG_SUBJECT_REQUIRE_COMMON_NAME,
  SubjectNameRequireEmail                       = CT_FLAG_SUBJECT_REQUIRE_EMAIL,
  SubjectNameRequireDNS                         = CT_FLAG_SUBJECT_REQUIRE_DNS_AS_CN,
  SubjectNameAndAlternativeNameOldCertSupplies  = CT_FLAG_OLD_CERT_SUPPLIES_SUBJECT_AND_ALT_NAME,
  SubjectAlternativeNameEnrolleeSupplies        = CT_FLAG_ENROLLEE_SUPPLIES_SUBJECT_ALT_NAME,
  SubjectAlternativeNameRequireDirectoryGUID    = CT_FLAG_SUBJECT_ALT_REQUIRE_DIRECTORY_GUID,
  SubjectAlternativeNameRequireUPN              = CT_FLAG_SUBJECT_ALT_REQUIRE_UPN,
  SubjectAlternativeNameRequireEmail            = CT_FLAG_SUBJECT_ALT_REQUIRE_EMAIL,
  SubjectAlternativeNameRequireSPN              = CT_FLAG_SUBJECT_ALT_REQUIRE_SPN,
  SubjectAlternativeNameRequireDNS              = CT_FLAG_SUBJECT_ALT_REQUIRE_DNS,
  SubjectAlternativeNameRequireDomainDNS        = CT_FLAG_SUBJECT_ALT_REQUIRE_DOMAIN_DNS
} X509CertificateTemplateSubjectNameFlag;

Constants

SubjectNameEnrolleeSupplies

Instructs the client to provide subject information in the certificate request.

SubjectNameRequireDirectoryPath

Instructs the certification authority (CA) to specify the requestor's Active Directory distinguished name as the subject name in the issued certificate.

SubjectNameRequireCommonName

Instructs the certification authority (CA) to specify the requestor's Active Directory common name (CN) as the subject name in the issued certificate.

SubjectNameRequireEmail

Instructs the CA to specify the value of the e-mail attribute in the requestor's Active Directory user object as the subject name in the issued certificate.

SubjectNameRequireDNS

Instructs the CA to specify the value of the DNS attribute in the requestor's Active Directory user object as the subject name in the issued certificate.

SubjectNameAndAlternativeNameOldCertSupplies

Instructs the client to reuse the subject name and alternative subject name extensions from an existing valid certificate when creating a renewal certificate request. This flag can only be used when the SubjectNameEnrolleeSupplies or the SubjectAlternativeNameEnrolleeSupplies flag is specified.

SubjectAlternativeNameEnrolleeSupplies

Instructs the client to provide subject alternative name information in the certificate request.

SubjectAlternativeNameRequireDirectoryGUID

Instructs the CA to add the value of the objectGUID attribute in the requestor's Active Directory user object to the Subject Alternative Name extension in the issued certificate.

SubjectAlternativeNameRequireUPN

Instructs the CA to add the value of the UPN attribute in the requestor's Active Directory user object to the Subject Alternative Name extension in the issued certificate.

SubjectAlternativeNameRequireEmail

Instructs the CA to add the value of the e-mail attribute in the requestor's Active Directory user object to the Subject Alternative Name extension in the issued certificate.

SubjectAlternativeNameRequireSPN

Instructs the CA to add the value of the SPN attribute in the requestor's Active Directory user object to the Subject Alternative Name extension in the issued certificate.

SubjectAlternativeNameRequireDNS

Instructs the CA to add the value of the DNS attribute in the requestor's Active Directory user object to the Subject Alternative Name extension in the issued certificate.

SubjectAlternativeNameRequireDomainDNS

Instructs the CA to add the value of the DNS of the root domain to the Subject Alternative Name extension in the issued certificate.

Requirements

Send comments about this topic to Microsoft

Build date: 10/26/2012