Request message for
[CertificateAuthorityService.ActivateCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.ActivateCertificateAuthority].
Request message for
[CertificateAuthorityService.ActivateCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.ActivateCertificateAuthority].
[AttributeType][google.cloud.security.privateca.v1.AttributeType] specifies
the type of Attribute in a relative distinguished name.
[AttributeTypeAndValue][google.cloud.security.privateca.v1.AttributeTypeAndValue]
specifies an attribute type and value.
[AttributeTypeAndValue][google.cloud.security.privateca.v1.AttributeTypeAndValue]
specifies an attribute type and value.
A [CaPool][google.cloud.security.privateca.v1.CaPool] represents a group of
[CertificateAuthorities][google.cloud.security.privateca.v1.CertificateAuthority]
that form a trust anchor.
A [CaPool][google.cloud.security.privateca.v1.CaPool] represents a group of
[CertificateAuthorities][google.cloud.security.privateca.v1.CertificateAuthority]
that form a trust anchor.
Defines controls over all certificate issuance within a
[CaPool][google.cloud.security.privateca.v1.CaPool].
Describes a "type" of key that may be used in a
[Certificate][google.cloud.security.privateca.v1.Certificate] issued from
a [CaPool][google.cloud.security.privateca.v1.CaPool].
Describes a "type" of key that may be used in a
[Certificate][google.cloud.security.privateca.v1.Certificate] issued from
a [CaPool][google.cloud.security.privateca.v1.CaPool].
Describes an Elliptic Curve key that may be used in a
[Certificate][google.cloud.security.privateca.v1.Certificate] issued
from a [CaPool][google.cloud.security.privateca.v1.CaPool].
Describes an Elliptic Curve key that may be used in a
[Certificate][google.cloud.security.privateca.v1.Certificate] issued
from a [CaPool][google.cloud.security.privateca.v1.CaPool].
Describes an elliptic curve-based signature algorithm that may be
used in a
[Certificate][google.cloud.security.privateca.v1.Certificate] issued
from a [CaPool][google.cloud.security.privateca.v1.CaPool].
Describes an RSA key that may be used in a
[Certificate][google.cloud.security.privateca.v1.Certificate] issued
from a [CaPool][google.cloud.security.privateca.v1.CaPool].
Describes an RSA key that may be used in a
[Certificate][google.cloud.security.privateca.v1.Certificate] issued
from a [CaPool][google.cloud.security.privateca.v1.CaPool].
Defines controls over all certificate issuance within a
[CaPool][google.cloud.security.privateca.v1.CaPool].
[IssuanceModes][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes]
specifies the allowed ways in which
[Certificates][google.cloud.security.privateca.v1.Certificate] may be
requested from this [CaPool][google.cloud.security.privateca.v1.CaPool].
[IssuanceModes][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes]
specifies the allowed ways in which
[Certificates][google.cloud.security.privateca.v1.Certificate] may be
requested from this [CaPool][google.cloud.security.privateca.v1.CaPool].
Options relating to the publication of each
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]'s
CA certificate and CRLs and their inclusion as extensions in issued
[Certificates][google.cloud.security.privateca.v1.Certificate].
Options relating to the publication of each
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]'s
CA certificate and CRLs and their inclusion as extensions in issued
[Certificates][google.cloud.security.privateca.v1.Certificate].
Supported encoding formats for publishing.
The tier of a [CaPool][google.cloud.security.privateca.v1.CaPool],
indicating its supported functionality and/or billing SKU.
Builder for projects/{project}/locations/{location}/caPools/{ca_pool}.
A [Certificate][google.cloud.security.privateca.v1.Certificate] corresponds
to a signed X.509 certificate issued by a
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority].
A [Certificate][google.cloud.security.privateca.v1.Certificate] corresponds
to a signed X.509 certificate issued by a
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority].
Describes fields that are relavent to the revocation of a
[Certificate][google.cloud.security.privateca.v1.Certificate].
Describes fields that are relavent to the revocation of a
[Certificate][google.cloud.security.privateca.v1.Certificate].
A
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
represents an individual Certificate Authority.
URLs where a
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
will publish content.
URLs where a
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
will publish content.
A
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
represents an individual Certificate Authority.
A Cloud KMS key configuration that a
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
will use.
A Cloud KMS key configuration that a
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
will use.
The algorithm of a Cloud KMS CryptoKeyVersion of a
[CryptoKey][google.cloud.kms.v1.CryptoKey] with the
[CryptoKeyPurpose][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose] value
`ASYMMETRIC_SIGN`.
The state of a
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority],
indicating if it can be used.
The type of a
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority],
indicating its issuing chain.
User-defined URLs for accessing content published by this
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority].
User-defined URLs for accessing content published by this
[CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority].
Builder for
projects/{project}/locations/{location}/caPools/{ca_pool}/certificateAuthorities/{certificate_authority}.
A [CertificateConfig][google.cloud.security.privateca.v1.CertificateConfig]
describes an X.509 certificate or CSR that is to be created, as an
alternative to using ASN.1.
A [CertificateConfig][google.cloud.security.privateca.v1.CertificateConfig]
describes an X.509 certificate or CSR that is to be created, as an
alternative to using ASN.1.
A KeyId identifies a specific public key, usually by hashing the public
key.
A KeyId identifies a specific public key, usually by hashing the public
key.
These values are used to create the distinguished name and subject
alternative name fields in an X.509 certificate.
These values are used to create the distinguished name and subject
alternative name fields in an X.509 certificate.
A
[CertificateDescription][google.cloud.security.privateca.v1.CertificateDescription]
describes an X.509 certificate or CSR that has been issued, as an alternative
to using ASN.1 / X.509.
A
[CertificateDescription][google.cloud.security.privateca.v1.CertificateDescription]
describes an X.509 certificate or CSR that has been issued, as an alternative
to using ASN.1 / X.509.
A group of fingerprints for the x509 certificate.
A group of fingerprints for the x509 certificate.
A KeyId identifies a specific public key, usually by hashing the public
key.
A KeyId identifies a specific public key, usually by hashing the public
key.
These values describe fields in an issued X.509 certificate such as the
distinguished name, subject alternative names, serial number, and lifetime.
These values describe fields in an issued X.509 certificate such as the
distinguished name, subject alternative names, serial number, and lifetime.
Describes a set of X.509 extensions that may be part of some certificate
issuance controls.
Describes a set of X.509 extensions that may be part of some certificate
issuance controls.
Describes well-known X.509 extensions that can appear in a
[Certificate][google.cloud.security.privateca.v1.Certificate], not
including the
[SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames]
extension.
Describes constraints on a
[Certificate][google.cloud.security.privateca.v1.Certificate]'s
[Subject][google.cloud.security.privateca.v1.Subject] and
[SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames].
Describes constraints on a
[Certificate][google.cloud.security.privateca.v1.Certificate]'s
[Subject][google.cloud.security.privateca.v1.Subject] and
[SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames].
Builder for
projects/{project}/locations/{location}/caPools/{ca_pool}/certificates/{certificate}.
A
[CertificateRevocationList][google.cloud.security.privateca.v1.CertificateRevocationList]
corresponds to a signed X.509 certificate Revocation List (CRL).
A
[CertificateRevocationList][google.cloud.security.privateca.v1.CertificateRevocationList]
corresponds to a signed X.509 certificate Revocation List (CRL).
Describes a revoked
[Certificate][google.cloud.security.privateca.v1.Certificate].
Describes a revoked
[Certificate][google.cloud.security.privateca.v1.Certificate].
The state of a
[CertificateRevocationList][google.cloud.security.privateca.v1.CertificateRevocationList],
indicating if it is current.
Builder for
projects/{project}/locations/{location}/caPools/{ca_pool}/certificateAuthorities/{certificate_authority}/certificateRevocationLists/{certificate_revocation_list}.
A
[CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
refers to a managed template for certificate issuance.
A
[CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
refers to a managed template for certificate issuance.
Builder for
projects/{project}/locations/{location}/certificateTemplates/{certificate_template}.
Request message for
[CertificateAuthorityService.CreateCaPool][google.cloud.security.privateca.v1.CertificateAuthorityService.CreateCaPool].
Request message for
[CertificateAuthorityService.CreateCaPool][google.cloud.security.privateca.v1.CertificateAuthorityService.CreateCaPool].
Request message for
[CertificateAuthorityService.CreateCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.CreateCertificateAuthority].
Request message for
[CertificateAuthorityService.CreateCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.CreateCertificateAuthority].
Request message for
[CertificateAuthorityService.CreateCertificate][google.cloud.security.privateca.v1.CertificateAuthorityService.CreateCertificate].
Request message for
[CertificateAuthorityService.CreateCertificate][google.cloud.security.privateca.v1.CertificateAuthorityService.CreateCertificate].
Request message for
[CertificateAuthorityService.CreateCertificateTemplate][google.cloud.security.privateca.v1.CertificateAuthorityService.CreateCertificateTemplate].
Request message for
[CertificateAuthorityService.CreateCertificateTemplate][google.cloud.security.privateca.v1.CertificateAuthorityService.CreateCertificateTemplate].
Request message for
[CertificateAuthorityService.DeleteCaPool][google.cloud.security.privateca.v1.CertificateAuthorityService.DeleteCaPool].
Request message for
[CertificateAuthorityService.DeleteCaPool][google.cloud.security.privateca.v1.CertificateAuthorityService.DeleteCaPool].
Request message for
[CertificateAuthorityService.DeleteCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.DeleteCertificateAuthority].
Request message for
[CertificateAuthorityService.DeleteCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.DeleteCertificateAuthority].
Request message for
[CertificateAuthorityService.DeleteCertificateTemplate][google.cloud.security.privateca.v1.CertificateAuthorityService.DeleteCertificateTemplate].
Request message for
[CertificateAuthorityService.DeleteCertificateTemplate][google.cloud.security.privateca.v1.CertificateAuthorityService.DeleteCertificateTemplate].
Request message for
[CertificateAuthorityService.DisableCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.DisableCertificateAuthority].
Request message for
[CertificateAuthorityService.DisableCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.DisableCertificateAuthority].
Request message for
[CertificateAuthorityService.EnableCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.EnableCertificateAuthority].
Request message for
[CertificateAuthorityService.EnableCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.EnableCertificateAuthority].
Request message for
[CertificateAuthorityService.FetchCaCerts][google.cloud.security.privateca.v1.CertificateAuthorityService.FetchCaCerts].
Request message for
[CertificateAuthorityService.FetchCaCerts][google.cloud.security.privateca.v1.CertificateAuthorityService.FetchCaCerts].
Response message for
[CertificateAuthorityService.FetchCaCerts][google.cloud.security.privateca.v1.CertificateAuthorityService.FetchCaCerts].
Response message for
[CertificateAuthorityService.FetchCaCerts][google.cloud.security.privateca.v1.CertificateAuthorityService.FetchCaCerts].
Protobuf type google.cloud.security.privateca.v1.FetchCaCertsResponse.CertChain
Protobuf type google.cloud.security.privateca.v1.FetchCaCertsResponse.CertChain
Request message for
[CertificateAuthorityService.FetchCertificateAuthorityCsr][google.cloud.security.privateca.v1.CertificateAuthorityService.FetchCertificateAuthorityCsr].
Request message for
[CertificateAuthorityService.FetchCertificateAuthorityCsr][google.cloud.security.privateca.v1.CertificateAuthorityService.FetchCertificateAuthorityCsr].
Response message for
[CertificateAuthorityService.FetchCertificateAuthorityCsr][google.cloud.security.privateca.v1.CertificateAuthorityService.FetchCertificateAuthorityCsr].
Response message for
[CertificateAuthorityService.FetchCertificateAuthorityCsr][google.cloud.security.privateca.v1.CertificateAuthorityService.FetchCertificateAuthorityCsr].
Request message for
[CertificateAuthorityService.GetCaPool][google.cloud.security.privateca.v1.CertificateAuthorityService.GetCaPool].
Request message for
[CertificateAuthorityService.GetCaPool][google.cloud.security.privateca.v1.CertificateAuthorityService.GetCaPool].
Request message for
[CertificateAuthorityService.GetCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.GetCertificateAuthority].
Request message for
[CertificateAuthorityService.GetCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.GetCertificateAuthority].
Request message for
[CertificateAuthorityService.GetCertificate][google.cloud.security.privateca.v1.CertificateAuthorityService.GetCertificate].
Request message for
[CertificateAuthorityService.GetCertificate][google.cloud.security.privateca.v1.CertificateAuthorityService.GetCertificate].
Request message for
[CertificateAuthorityService.GetCertificateRevocationList][google.cloud.security.privateca.v1.CertificateAuthorityService.GetCertificateRevocationList].
Request message for
[CertificateAuthorityService.GetCertificateRevocationList][google.cloud.security.privateca.v1.CertificateAuthorityService.GetCertificateRevocationList].
Request message for
[CertificateAuthorityService.GetCertificateTemplate][google.cloud.security.privateca.v1.CertificateAuthorityService.GetCertificateTemplate].
Request message for
[CertificateAuthorityService.GetCertificateTemplate][google.cloud.security.privateca.v1.CertificateAuthorityService.GetCertificateTemplate].
A [KeyUsage][google.cloud.security.privateca.v1.KeyUsage] describes key usage
values that may appear in an X.509 certificate.
A [KeyUsage][google.cloud.security.privateca.v1.KeyUsage] describes key usage
values that may appear in an X.509 certificate.
[KeyUsage.ExtendedKeyUsageOptions][google.cloud.security.privateca.v1.KeyUsage.ExtendedKeyUsageOptions]
has fields that correspond to certain common OIDs that could be specified
as an extended key usage value.
[KeyUsage.ExtendedKeyUsageOptions][google.cloud.security.privateca.v1.KeyUsage.ExtendedKeyUsageOptions]
has fields that correspond to certain common OIDs that could be specified
as an extended key usage value.
[KeyUsage.KeyUsageOptions][google.cloud.security.privateca.v1.KeyUsage.KeyUsageOptions]
corresponds to the key usage values described in
https://tools.ietf.org/html/rfc5280#section-4.2.1.3.
[KeyUsage.KeyUsageOptions][google.cloud.security.privateca.v1.KeyUsage.KeyUsageOptions]
corresponds to the key usage values described in
https://tools.ietf.org/html/rfc5280#section-4.2.1.3.
Request message for
[CertificateAuthorityService.ListCaPools][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCaPools].
Request message for
[CertificateAuthorityService.ListCaPools][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCaPools].
Response message for
[CertificateAuthorityService.ListCaPools][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCaPools].
Response message for
[CertificateAuthorityService.ListCaPools][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCaPools].
Request message for
[CertificateAuthorityService.ListCertificateAuthorities][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificateAuthorities].
Request message for
[CertificateAuthorityService.ListCertificateAuthorities][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificateAuthorities].
Response message for
[CertificateAuthorityService.ListCertificateAuthorities][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificateAuthorities].
Response message for
[CertificateAuthorityService.ListCertificateAuthorities][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificateAuthorities].
Request message for
[CertificateAuthorityService.ListCertificateRevocationLists][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificateRevocationLists].
Request message for
[CertificateAuthorityService.ListCertificateRevocationLists][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificateRevocationLists].
Response message for
[CertificateAuthorityService.ListCertificateRevocationLists][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificateRevocationLists].
Response message for
[CertificateAuthorityService.ListCertificateRevocationLists][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificateRevocationLists].
Request message for
[CertificateAuthorityService.ListCertificates][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificates].
Request message for
[CertificateAuthorityService.ListCertificates][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificates].
Response message for
[CertificateAuthorityService.ListCertificates][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificates].
Response message for
[CertificateAuthorityService.ListCertificates][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificates].
Request message for
[CertificateAuthorityService.ListCertificateTemplates][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificateTemplates].
Request message for
[CertificateAuthorityService.ListCertificateTemplates][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificateTemplates].
Response message for
[CertificateAuthorityService.ListCertificateTemplates][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificateTemplates].
Response message for
[CertificateAuthorityService.ListCertificateTemplates][google.cloud.security.privateca.v1.CertificateAuthorityService.ListCertificateTemplates].
Builder for projects/{project}/locations/{location}.
An [ObjectId][google.cloud.security.privateca.v1.ObjectId] specifies an
object identifier (OID).
An [ObjectId][google.cloud.security.privateca.v1.ObjectId] specifies an
object identifier (OID).
Represents the metadata of the long-running operation.
Represents the metadata of the long-running operation.
A [PublicKey][google.cloud.security.privateca.v1.PublicKey] describes a
public key.
A [PublicKey][google.cloud.security.privateca.v1.PublicKey] describes a
public key.
Types of public keys formats that are supported.
[RelativeDistinguishedName][google.cloud.security.privateca.v1.RelativeDistinguishedName]
specifies a relative distinguished name which will be used to build a
distinguished name.
[RelativeDistinguishedName][google.cloud.security.privateca.v1.RelativeDistinguishedName]
specifies a relative distinguished name which will be used to build a
distinguished name.
A [RevocationReason][google.cloud.security.privateca.v1.RevocationReason]
indicates whether a
[Certificate][google.cloud.security.privateca.v1.Certificate] has been
revoked, and the reason for revocation.
Request message for
[CertificateAuthorityService.RevokeCertificate][google.cloud.security.privateca.v1.CertificateAuthorityService.RevokeCertificate].
Request message for
[CertificateAuthorityService.RevokeCertificate][google.cloud.security.privateca.v1.CertificateAuthorityService.RevokeCertificate].
[Subject][google.cloud.security.privateca.v1.Subject] describes parts of a
distinguished name that, in turn, describes the subject of the certificate.
[Subject][google.cloud.security.privateca.v1.Subject] describes parts of a
distinguished name that, in turn, describes the subject of the certificate.
[SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames]
corresponds to a more modern way of listing what the asserted identity is in
a certificate (i.e., compared to the "common name" in the distinguished
name).
[SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames]
corresponds to a more modern way of listing what the asserted identity is in
a certificate (i.e., compared to the "common name" in the distinguished
name).
Describes the way in which a
[Certificate][google.cloud.security.privateca.v1.Certificate]'s
[Subject][google.cloud.security.privateca.v1.Subject] and/or
[SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames] will be
resolved.
Describes a subordinate CA's issuers.
Describes a subordinate CA's issuers.
This message describes a subordinate CA's issuer certificate chain.
This message describes a subordinate CA's issuer certificate chain.
Request message for
[CertificateAuthorityService.UndeleteCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.UndeleteCertificateAuthority].
Request message for
[CertificateAuthorityService.UndeleteCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.UndeleteCertificateAuthority].
Request message for
[CertificateAuthorityService.UpdateCaPool][google.cloud.security.privateca.v1.CertificateAuthorityService.UpdateCaPool].
Request message for
[CertificateAuthorityService.UpdateCaPool][google.cloud.security.privateca.v1.CertificateAuthorityService.UpdateCaPool].
Request message for
[CertificateAuthorityService.UpdateCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.UpdateCertificateAuthority].
Request message for
[CertificateAuthorityService.UpdateCertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthorityService.UpdateCertificateAuthority].
Request message for
[CertificateAuthorityService.UpdateCertificate][google.cloud.security.privateca.v1.CertificateAuthorityService.UpdateCertificate].
Request message for
[CertificateAuthorityService.UpdateCertificate][google.cloud.security.privateca.v1.CertificateAuthorityService.UpdateCertificate].
Request message for
[CertificateAuthorityService.UpdateCertificateRevocationList][google.cloud.security.privateca.v1.CertificateAuthorityService.UpdateCertificateRevocationList].
Request message for
[CertificateAuthorityService.UpdateCertificateRevocationList][google.cloud.security.privateca.v1.CertificateAuthorityService.UpdateCertificateRevocationList].
Request message for
[CertificateAuthorityService.UpdateCertificateTemplate][google.cloud.security.privateca.v1.CertificateAuthorityService.UpdateCertificateTemplate].
Request message for
[CertificateAuthorityService.UpdateCertificateTemplate][google.cloud.security.privateca.v1.CertificateAuthorityService.UpdateCertificateTemplate].
An [X509Extension][google.cloud.security.privateca.v1.X509Extension]
specifies an X.509 extension, which may be used in different parts of X.509
objects like certificates, CSRs, and CRLs.
An [X509Extension][google.cloud.security.privateca.v1.X509Extension]
specifies an X.509 extension, which may be used in different parts of X.509
objects like certificates, CSRs, and CRLs.
An [X509Parameters][google.cloud.security.privateca.v1.X509Parameters] is
used to describe certain fields of an X.509 certificate, such as the key
usage fields, fields specific to CA certificates, certificate policy
extensions and custom extensions.
An [X509Parameters][google.cloud.security.privateca.v1.X509Parameters] is
used to describe certain fields of an X.509 certificate, such as the key
usage fields, fields specific to CA certificates, certificate policy
extensions and custom extensions.
Describes the X.509 basic constraints extension, per [RFC 5280
section 4.2.1.9](https://tools.ietf.org/html/rfc5280#section-4.2.1.9)
Describes the X.509 basic constraints extension, per [RFC 5280
section 4.2.1.9](https://tools.ietf.org/html/rfc5280#section-4.2.1.9)
Describes the X.509 name constraints extension, per
https://tools.ietf.org/html/rfc5280#section-4.2.1.10
Describes the X.509 name constraints extension, per
https://tools.ietf.org/html/rfc5280#section-4.2.1.10