import { GeneralSubtree } from "../x509/extensions.js";
//#region src/verify/name-constraints.d.ts
/**
 * Input for `createNameConstraintValidationState`.
 *
 * Seeds the name-constraint engine with trust-anchor-level subtree
 * restrictions that apply before any certificate in the chain is processed.
 */
interface InitialNameConstraintsInput {
  /** Subtrees within which all subsequent subject names must fall. Default: unconstrained. */
  readonly permittedSubtrees?: readonly GeneralSubtree[];
  /** Subtrees that no subsequent subject name may fall within. Default: none. */
  readonly excludedSubtrees?: readonly GeneralSubtree[];
}
//#endregion
export { InitialNameConstraintsInput };
//# sourceMappingURL=name-constraints.d.ts.map