Skip to main content

Subject

The subject defines the distinguished name (DN) information included in the certificate. Global platform certificate templates support the subject_identifier attribute, which can be sourced from an enrollment request or configured as a fixed value.

JSON structure example

Hex_string encoding for subject_identifier

"subject": {
    "attributes": [
      {
        "type": "subject_identifier",
        "encoding": "hex_string",
        "allowed_source": [
          "user_supplied",
          "fixed_value"
        ]
      }
    ]
  }

Auto encoding for subject_identifier

"subject": {
    "attributes": [
      {
        "type": "subject_identifier",
        "encoding": "auto",
        "allowed_source": [
          "user_supplied",
          "fixed_value"
        ]
      }
    ]
  }

Parameters

Tabelle 1. Parameters: Subject attributes

Name

Type

Required/optional

Possible values

subject

Object

Required

Defines the subject distinguished name (DN) attributes that can be included in the issued certificate

.. attributes

Array of objects

Required

Specifies the subject attributes that can be included in the certificate subject DN

.. .. type

String

Required

Specifies the subject attribute type. Supported values include:

  • subject_identifier

.. .. include

String

Optional

Specifies whether the attribute is required or optional in the certificate subject. Supported values:

  • yes (default)

  • no

  • optional

.. .. encoding

String

Optional

Specifies the encoding used for the subject attribute value. Supported values:

  • auto (default) - input value from the certificate request must be a plain text string

  • hex_stringutf8_string - input value from the certificate request must be a hex-encoded string

.. .. allowed_sorce

Array of strings

Required

Specifies the allowed sources for the subject attribute value. Supported values:

  • csr: Uses the attribute value provided in the certificate signing request (CSR)

  • user_supplied: Allows the attribute value to be provided in the enrollment request. Supported only for API, Portal, and Batch enrollment methods

  • fixed_value: Uses a predefined value configured in the certificate template. This value is used only when no value is provided in the CSR or enrollment request