RtsX509CertCheckFlags (ENUM)ΒΆ

TYPE RtsX509CertCheckFlags :

Attributes:
qualified_only
InOut:

Name

Initial

Comment

FORCE_SUBJECT

16#1

Forces that the hostname / IP address is part OF certificate subject. Otherwhise part OF subject alternative name is accepted.

DISABLE_WILDCARDS

16#2

Disable support FOR wildcard checking. *.example.com in a certificate is NOT accepted. Only FOR X509CertCheckHost.

DISABLE_PARTIAL_WILDCARDS

16#4

Disable support FOR partial wildcard checking. ww*.example.com OR *ww.example.com. Only FOR X509CertCheckHost.

ALLOW_MULTILABLE_WILDCARDS

16#8

Allow that wildcards replace multiple subdomains. *.example.com will accept www.SUB.example.com. Only FOR X509CertCheckHost.

FORCE_SINGLE_SUBDOMAIN

16#10

Forces that .example.com will only accept a single subdomain e.f. SUB.example.com, but NOT www.SUB.example.com. Only FOR X509CertCheckHost.