General Availability: You can create resources such as certificate authorities (CA) and certificate authority pools with X.509 name constraints

## Feature **General Availability**: You can create resources such as certificate authorities (CA) and certificate authority pools with X.509 name constraints. Name constraints on CA resources are enforced when issuing certificates, which lets you control which names are permitted or excluded. For more information, see [CA certificate name constraints](https://cloud.google.com/certificate-authority-service/docs/policy-controls#name-constraints).