permittedIPRanges
The IP ranges that are permitted in certificates issued by this CA.
var permittedIPRanges: IPRanges { get set }
These restrictions are expressed as a subnet, represented in an ASN.1 octet string. Due to the absence of a currency subnet and IP address type in Swift, these are preserved as octet strings.
As an example, the subnet 192.0.2.0/24 is encoded as the bytes 0xC0, 0x00, 0x02, 0x00, 0xFF, 0xFF, 0xFF, 0x00
. This represents a subnet root and its mask.
Any IP address attested that falls within one of these subnets matches the constraint.