[ NoAccessorMethod ]
public string phase2_subject_match { owned get; set; }
Substring to be matched against the subject of the certificate presented by the authentication server during the inner "phase 2" authentication.
When unset, no verification of the authentication server certificate's subject is performed.