Reference documentation and code samples for the Certificate Authority v1 API enum SubjectRequestMode.
Describes the way in which a
[Certificate][google.cloud.security.privateca.v1.Certificate]'s
[Subject][google.cloud.security.privateca.v1.Subject] and/or
[SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames] will be
resolved.
The default mode used in most cases. Indicates that the certificate's
[Subject][google.cloud.security.privateca.v1.Subject] and/or
[SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames] are
specified in the certificate request. This mode requires the caller to have
the privateca.certificates.create permission.
RdnSequence
A mode used to get an accurate representation of the Subject
field's distinguished name. Indicates that the certificate's
[Subject][google.cloud.security.privateca.v1.Subject] and/or
[SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames] are
specified in the certificate request. When parsing a PEM CSR this mode will
maintain the sequence of RDNs found in the CSR's subject field in the
issued [Certificate][google.cloud.security.privateca.v1.Certificate]. This
mode requires the caller to have the privateca.certificates.create
permission.
ReflectedSpiffe
A mode reserved for special cases. Indicates that the certificate should
have one SPIFFE
[SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames] set
by the service based on the caller's identity. This mode will ignore any
explicitly specified [Subject][google.cloud.security.privateca.v1.Subject]
and/or
[SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames] in
the certificate request. This mode requires the caller to have the
privateca.certificates.createForSelf permission.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis webpage provides reference documentation for the \u003ccode\u003eSubjectRequestMode\u003c/code\u003e enum within the Google Cloud Security Private CA v1 API, specifically for .NET.\u003c/p\u003e\n"],["\u003cp\u003eThe latest version of the documentation available is version 3.9.0, but it also includes documentation for version releases spanning from 1.0.0 up to version 3.8.0.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eSubjectRequestMode\u003c/code\u003e enum describes how a certificate's Subject and/or SubjectAltNames are resolved, offering options like \u003ccode\u003eDefault\u003c/code\u003e, \u003ccode\u003eReflectedSpiffe\u003c/code\u003e, and \u003ccode\u003eUnspecified\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eDefault\u003c/code\u003e mode utilizes the Subject and SubjectAltNames specified in the certificate request, while \u003ccode\u003eReflectedSpiffe\u003c/code\u003e mode generates the SubjectAltNames based on the caller's identity.\u003c/p\u003e\n"]]],[],null,[]]
