passthroughExtensions property
Describes the set of X.509 extensions that may appear in a Certificate issued through this CaPool.
If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be dropped. If a certificate request uses a CertificateTemplate with predefined_values that don't appear here, the certificate issuance request will fail. If this is omitted, then this CaPool will not add restrictions on a certificate's X.509 extensions. These constraints do not apply to X.509 extensions set in this CaPool's baseline_values.
Optional.
Implementation
CertificateExtensionConstraints? passthroughExtensions;