Specifies the domains of the role.
Defines allowed custom OID/UTF8-string SANs.
Defines allowed URI Subject Alternative Names.
Adds the C (Country) value in the subject field of issued certificates.
Specifies the allowed extended key usage constraint on issued certificates.
Add an extended usage OID.
Adds the L (Locality) value in the subject field of issued certificates.
Adds an O (Organization) value in the subject field of issued certificates.
Adds an OU (OrganizationalUnit) value in the subject field of issued certificates.
Add a policy identifier OID.
Adds a Postal Code values in the subject field of issued certificates.
Adds the ST (Province) values in the subject field of issued certificates.
Adds a Street Address values in the subject field of issued certificates.
Specifies if clients can request any CN.
Specifies if clients can request certificates matching the value of the actual domains themselves; e.g.
Allows names specified in allowed_domains to contain glob patterns (e.g.
Specifies if clients can request IP Subject Alternative Names.
Specifies if clients can request certificates for localhost as one of the requested common names.
Specifies if clients can request certificates with CNs that are subdomains of the CNs allowed by the other role options.
Mark Basic Constraints valid when issuing non-CA certificates.
Fluent API builder for configuring a request.
Specifies if certificates are flagged for client use.
Specifies if certificates are flagged for code signing use.
Specifies if certificates are flagged for email protection use.
Specifies if only valid host names are allowed for CNs, DNS SANs, and the host part of email addresses.
Specifies if certificates issued/signed against this role will have Vault leases attached to them.
PkiRole.Request.keyBits(int keyBits)
Specifies the number of bits to use for the generated keys.
Specifies the type of key to generate for generated private keys and the type of key expected for submitted CSRs.
Configure list of usages.
Specifies the maximum Time To Live.
PkiRole.Request.noStore(boolean noStore)
If set, certificates issued/signed against this role will not be stored in the storage backend.
Specifies the duration by which to backdate the NotBefore property.
If set to false, makes the common name field optional while generating a certificate.
Specifies the Serial Number, if any.
Specifies if certificates are flagged for server use.
Specifies the Time To Live value.
When used with the CSR signing endpoint, the common name in the CSR will be used instead of taken from the JSON data.
When used with the CSR signing endpoint, the subject alternate names in the CSR will be used instead of taken from the
JSON data.