Callback to determine whether the owner of oldCert is allowed to obtain a certificate of newSubjectName. It should throw to disallow assignment.
oldCert
newSubjectName
Callback to determine whether the owner of
oldCertis allowed to obtain a certificate ofnewSubjectName. It should throw to disallow assignment.