public sealed class CertificateExtensionConstraints : IMessage<CertificateExtensionConstraints>, IEquatable<CertificateExtensionConstraints>, IDeepCloneable<CertificateExtensionConstraints>, IBufferMessage, IMessage
Reference documentation and code samples for the Certificate Authority v1 API class CertificateExtensionConstraints.
Describes a set of X.509 extensions that may be part of some certificate
issuance controls.
public RepeatedField<ObjectId> AdditionalExtensions { get; }
Optional. A set of [ObjectIds][google.cloud.security.privateca.v1.ObjectId]
identifying custom X.509 extensions. Will be combined with
[known_extensions][google.cloud.security.privateca.v1.CertificateExtensionConstraints.known_extensions]
to determine the full set of X.509 extensions.
public RepeatedField<CertificateExtensionConstraints.Types.KnownCertificateExtension> KnownExtensions { get; }
Optional. A set of named X.509 extensions. Will be combined with
[additional_extensions][google.cloud.security.privateca.v1.CertificateExtensionConstraints.additional_extensions]
to determine the full set of X.509 extensions.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe latest version of the \u003ccode\u003eCertificateExtensionConstraints\u003c/code\u003e API is 3.9.0, and this document provides reference documentation and code samples for it.\u003c/p\u003e\n"],["\u003cp\u003eThis class, \u003ccode\u003eCertificateExtensionConstraints\u003c/code\u003e, describes the X.509 extensions that can be part of certificate issuance controls within the Google Cloud Security Private CA v1 API.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eCertificateExtensionConstraints\u003c/code\u003e class allows the definition of both custom X.509 extensions via \u003ccode\u003eAdditionalExtensions\u003c/code\u003e and named X.509 extensions via \u003ccode\u003eKnownExtensions\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThis class is built upon several interfaces, including \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, \u003ccode\u003eIDeepCloneable\u003c/code\u003e, and \u003ccode\u003eIBufferMessage\u003c/code\u003e, and also inherits members from the \u003ccode\u003eobject\u003c/code\u003e class.\u003c/p\u003e\n"],["\u003cp\u003eYou can view documentation for previous versions of this class, going all the way back to version 1.0.0, and is accessible from the provided links.\u003c/p\u003e\n"]]],[],null,["# Certificate Authority v1 API - Class CertificateExtensionConstraints (3.10.0)\n\nVersion latestkeyboard_arrow_down\n\n- [3.10.0 (latest)](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/latest/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [3.9.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/3.9.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [3.8.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/3.8.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [3.7.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/3.7.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [3.6.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/3.6.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [3.5.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/3.5.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [3.4.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/3.4.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [3.3.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/3.3.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [3.2.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/3.2.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [3.1.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/3.1.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [3.0.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/3.0.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [2.3.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/2.3.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [2.2.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/2.2.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [2.1.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/2.1.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [2.0.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/2.0.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints)\n- [1.0.0](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/1.0.0/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints) \n\n public sealed class CertificateExtensionConstraints : IMessage\u003cCertificateExtensionConstraints\u003e, IEquatable\u003cCertificateExtensionConstraints\u003e, IDeepCloneable\u003cCertificateExtensionConstraints\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Certificate Authority v1 API class CertificateExtensionConstraints.\n\nDescribes a set of X.509 extensions that may be part of some certificate\nissuance controls. \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e CertificateExtensionConstraints \n\nImplements\n----------\n\n[IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[CertificateExtensionConstraints](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/latest/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[CertificateExtensionConstraints](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/latest/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[CertificateExtensionConstraints](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/latest/Google.Cloud.Security.PrivateCA.V1.CertificateExtensionConstraints), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.Security.PrivateCA.V1](/dotnet/docs/reference/Google.Cloud.Security.PrivateCA.V1/latest/Google.Cloud.Security.PrivateCA.V1)\n\nAssembly\n--------\n\nGoogle.Cloud.Security.PrivateCA.V1.dll\n\nConstructors\n------------\n\n### CertificateExtensionConstraints()\n\n public CertificateExtensionConstraints()\n\n### CertificateExtensionConstraints(CertificateExtensionConstraints)\n\n public CertificateExtensionConstraints(CertificateExtensionConstraints other)\n\nProperties\n----------\n\n### AdditionalExtensions\n\n public RepeatedField\u003cObjectId\u003e AdditionalExtensions { get; }\n\nOptional. A set of \\[ObjectIds\\]\\[google.cloud.security.privateca.v1.ObjectId\\]\nidentifying custom X.509 extensions. Will be combined with\n\\[known_extensions\\]\\[google.cloud.security.privateca.v1.CertificateExtensionConstraints.known_extensions\\]\nto determine the full set of X.509 extensions.\n\n### KnownExtensions\n\n public RepeatedField\u003cCertificateExtensionConstraints.Types.KnownCertificateExtension\u003e KnownExtensions { get; }\n\nOptional. A set of named X.509 extensions. Will be combined with\n\\[additional_extensions\\]\\[google.cloud.security.privateca.v1.CertificateExtensionConstraints.additional_extensions\\]\nto determine the full set of X.509 extensions."]]
