permittedIPRanges

The IP ranges that are permitted in certificates issued by this CA.

NameConstraints.swift:461
var permittedIPRanges: IPRanges { get set }

These restrictions are expressed as a subnet, represented in an ASN.1 octet string. Due to the absence of a currency subnet and IP address type in Swift, these are preserved as octet strings.

As an example, the subnet 192.0.2.0/24 is encoded as the bytes 0xC0, 0x00, 0x02, 0x00, 0xFF, 0xFF, 0xFF, 0x00. This represents a subnet root and its mask.

Any IP address attested that falls within one of these subnets matches the constraint.