domain_suffix_match


Description:

[ NoAccessorMethod ]
[ Version ( since = "1.2" ) ]
public string domain_suffix_match { owned get; set; }

Constraint for server domain name.

If set, this FQDN is used as a suffix match requirement for dNSName element(s) of the certificate presented by the authentication server. If a matching dNSName is found, this constraint is met. If no dNSName values are present, this constraint is matched against SubjectName CN using same suffix match comparison. Since version 1.24, multiple valid FQDNs can be passed as a ";" delimited list.