}
                        ],
                        "combined_validation_context": {
                          "default_validation_context": {
                            "match_typed_subject_alt_names": [
                              {
                                "san_type": "URI",
                                "matcher": {
                                  "prefix": "spiffe://cluster.local/"