# Google Certificate Authority Service V1 Client - Class CertificateIdentityConstraints (2.4.0)

2.4.0 (latest) 2.3.0 2.2.2 2.1.1 2.0.3 1.7.3 1.5.0 1.4.2 1.3.1 1.2.2 1.1.0 1.0.3 Reference documentation and code samples for the Google Certificate Authority Service V1 Client class CertificateIdentityConstraints.

Describes constraints on a
[Certificate](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.Certificate)'s
[Subject](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.Subject) and
[SubjectAltNames](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.SubjectAltNames).

Generated from protobuf message `google.cloud.security.privateca.v1.CertificateIdentityConstraints`

## Namespace

Google \\ Cloud \\ Security \\ PrivateCA \\ V1

## Methods

### __construct

Constructor.

| **Parameters** ||
|---|---|
| **Name** | **Description** |
| `data` | `array` Optional. Data for populating the Message object. |
| `↳ cel_expression` | `https://docs.cloud.google.com/php/docs/reference/common-protos/latest/Type.Expr.html` Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see <https://cloud.google.com/certificate-authority-service/docs/using-cel> |
| `↳ allow_subject_passthrough` | `bool` Required. If this is true, the [Subject](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.Subject) field may be copied from a certificate request into the signed certificate. Otherwise, the requested [Subject](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.Subject) will be discarded. |
| `↳ allow_subject_alt_names_passthrough` | `bool` Required. If this is true, the [SubjectAltNames](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.SubjectAltNames) extension may be copied from a certificate request into the signed certificate. Otherwise, the requested [SubjectAltNames](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.SubjectAltNames) will be discarded. |

### getCelExpression

Optional. A CEL expression that may be used to validate the resolved X.509
Subject and/or Subject Alternative Name before a certificate is signed. To
see the full allowed syntax and some examples, see
<https://cloud.google.com/certificate-authority-service/docs/using-cel>

| **Returns** ||
|---|---|
| **Type** | **Description** |
| `https://docs.cloud.google.com/php/docs/reference/common-protos/latest/Type.Expr.html|null` |   |

### hasCelExpression

### clearCelExpression

### setCelExpression

Optional. A CEL expression that may be used to validate the resolved X.509
Subject and/or Subject Alternative Name before a certificate is signed. To
see the full allowed syntax and some examples, see
<https://cloud.google.com/certificate-authority-service/docs/using-cel>

| **Parameter** ||
|---|---|
| **Name** | **Description** |
| `var` | `https://docs.cloud.google.com/php/docs/reference/common-protos/latest/Type.Expr.html` |

| **Returns** ||
|---|---|
| **Type** | **Description** |
| `$this` |   |

### getAllowSubjectPassthrough

Required. If this is true, the
[Subject](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.Subject) field may be copied
from a certificate request into the signed certificate. Otherwise, the
requested [Subject](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.Subject) will be
discarded.

| **Returns** ||
|---|---|
| **Type** | **Description** |
| `bool` |   |

### hasAllowSubjectPassthrough

### clearAllowSubjectPassthrough

### setAllowSubjectPassthrough

Required. If this is true, the
[Subject](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.Subject) field may be copied
from a certificate request into the signed certificate. Otherwise, the
requested [Subject](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.Subject) will be
discarded.

| **Parameter** ||
|---|---|
| **Name** | **Description** |
| `var` | `bool` |

| **Returns** ||
|---|---|
| **Type** | **Description** |
| `$this` |   |

### getAllowSubjectAltNamesPassthrough

Required. If this is true, the
[SubjectAltNames](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.SubjectAltNames)
extension may be copied from a certificate request into the signed
certificate. Otherwise, the requested
[SubjectAltNames](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.SubjectAltNames) will
be discarded.

| **Returns** ||
|---|---|
| **Type** | **Description** |
| `bool` |   |

### hasAllowSubjectAltNamesPassthrough

### clearAllowSubjectAltNamesPassthrough

### setAllowSubjectAltNamesPassthrough

Required. If this is true, the
[SubjectAltNames](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.SubjectAltNames)
extension may be copied from a certificate request into the signed
certificate. Otherwise, the requested
[SubjectAltNames](https://docs.cloud.google.com/php/docs/reference/cloud-security-private-ca/latest/V1.SubjectAltNames) will
be discarded.

| **Parameter** ||
|---|---|
| **Name** | **Description** |
| `var` | `bool` |

| **Returns** ||
|---|---|
| **Type** | **Description** |
| `$this` |   |