Certificate
fun CertificateTemplateIdentityConstraints(allowSubjectAltNamesPassthrough: Boolean, allowSubjectPassthrough: Boolean, celExpression: CertificateTemplateIdentityConstraintsCelExpression? = null)