1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. CertificatesManagement
  5. Certificate
Oracle Cloud Infrastructure v2.31.0 published on Thursday, Apr 17, 2025 by Pulumi

oci.CertificatesManagement.Certificate

Explore with Pulumi AI

This resource provides the Certificate resource in Oracle Cloud Infrastructure Certificates Management service.

Creates a new certificate according to the details of the request.

Example Usage

Coming soon!
Coming soon!
Coming soon!
Coming soon!
Coming soon!
resources:
  testCertificate:
    type: oci:CertificatesManagement:Certificate
    name: test_certificate
    properties:
      certificateConfig:
        configType: ${certificateCertificateConfigConfigType}
        certChainPem: ${certificateCertificateConfigCertChainPem}
        certificatePem: ${certificateCertificateConfigCertificatePem}
        certificateProfileType: ${certificateCertificateConfigCertificateProfileType}
        csrPem: ${certificateCertificateConfigCsrPem}
        issuerCertificateAuthorityId: ${testCertificateAuthority.id}
        keyAlgorithm: ${certificateCertificateConfigKeyAlgorithm}
        privateKeyPem: ${certificateCertificateConfigPrivateKeyPem}
        privateKeyPemPassphrase: ${certificateCertificateConfigPrivateKeyPemPassphrase}
        signatureAlgorithm: ${certificateCertificateConfigSignatureAlgorithm}
        subject:
          commonName: ${certificateCertificateConfigSubjectCommonName}
          country: ${certificateCertificateConfigSubjectCountry}
          distinguishedNameQualifier: ${certificateCertificateConfigSubjectDistinguishedNameQualifier}
          domainComponent: ${certificateCertificateConfigSubjectDomainComponent}
          generationQualifier: ${certificateCertificateConfigSubjectGenerationQualifier}
          givenName: ${certificateCertificateConfigSubjectGivenName}
          initials: ${certificateCertificateConfigSubjectInitials}
          localityName: ${certificateCertificateConfigSubjectLocalityName}
          organization: ${certificateCertificateConfigSubjectOrganization}
          organizationalUnit: ${certificateCertificateConfigSubjectOrganizationalUnit}
          pseudonym: ${certificateCertificateConfigSubjectPseudonym}
          serialNumber: ${certificateCertificateConfigSubjectSerialNumber}
          stateOrProvinceName: ${certificateCertificateConfigSubjectStateOrProvinceName}
          street: ${certificateCertificateConfigSubjectStreet}
          surname: ${certificateCertificateConfigSubjectSurname}
          title: ${certificateCertificateConfigSubjectTitle}
          userId: ${testUser.id}
        subjectAlternativeNames:
          - type: ${certificateCertificateConfigSubjectAlternativeNamesType}
            value: ${certificateCertificateConfigSubjectAlternativeNamesValue}
        validity:
          timeOfValidityNotAfter: ${certificateCertificateConfigValidityTimeOfValidityNotAfter}
          timeOfValidityNotBefore: ${certificateCertificateConfigValidityTimeOfValidityNotBefore}
        versionName: ${certificateCertificateConfigVersionName}
      compartmentId: ${compartmentId}
      name: ${certificateName}
      certificateRules:
        - advanceRenewalPeriod: ${certificateCertificateRulesAdvanceRenewalPeriod}
          renewalInterval: ${certificateCertificateRulesRenewalInterval}
          ruleType: ${certificateCertificateRulesRuleType}
      definedTags:
        Operations.CostCenter: '42'
      description: ${certificateDescription}
      freeformTags:
        Department: Finance
Copy

Create Certificate Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Certificate(name: string, args: CertificateArgs, opts?: CustomResourceOptions);
@overload
def Certificate(resource_name: str,
                args: CertificateArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def Certificate(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                certificate_config: Optional[_certificatesmanagement.CertificateCertificateConfigArgs] = None,
                compartment_id: Optional[str] = None,
                certificate_rules: Optional[Sequence[_certificatesmanagement.CertificateCertificateRuleArgs]] = None,
                defined_tags: Optional[Mapping[str, str]] = None,
                description: Optional[str] = None,
                freeform_tags: Optional[Mapping[str, str]] = None,
                name: Optional[str] = None)
func NewCertificate(ctx *Context, name string, args CertificateArgs, opts ...ResourceOption) (*Certificate, error)
public Certificate(string name, CertificateArgs args, CustomResourceOptions? opts = null)
public Certificate(String name, CertificateArgs args)
public Certificate(String name, CertificateArgs args, CustomResourceOptions options)
type: oci:CertificatesManagement:Certificate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. CertificateArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. CertificateArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. CertificateArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. CertificateArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. CertificateArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var ociCertificateResource = new Oci.CertificatesManagement.Certificate("ociCertificateResource", new()
{
    CertificateConfig = new Oci.CertificatesManagement.Inputs.CertificateCertificateConfigArgs
    {
        ConfigType = "string",
        CertificateProfileType = "string",
        CsrPem = "string",
        IssuerCertificateAuthorityId = "string",
        KeyAlgorithm = "string",
        SignatureAlgorithm = "string",
        Subject = new Oci.CertificatesManagement.Inputs.CertificateCertificateConfigSubjectArgs
        {
            CommonName = "string",
            Country = "string",
            DistinguishedNameQualifier = "string",
            DomainComponent = "string",
            GenerationQualifier = "string",
            GivenName = "string",
            Initials = "string",
            LocalityName = "string",
            Organization = "string",
            OrganizationalUnit = "string",
            Pseudonym = "string",
            SerialNumber = "string",
            StateOrProvinceName = "string",
            Street = "string",
            Surname = "string",
            Title = "string",
            UserId = "string",
        },
        SubjectAlternativeNames = new[]
        {
            new Oci.CertificatesManagement.Inputs.CertificateCertificateConfigSubjectAlternativeNameArgs
            {
                Type = "string",
                Value = "string",
            },
        },
        Validity = new Oci.CertificatesManagement.Inputs.CertificateCertificateConfigValidityArgs
        {
            TimeOfValidityNotAfter = "string",
            TimeOfValidityNotBefore = "string",
        },
        VersionName = "string",
    },
    CompartmentId = "string",
    CertificateRules = new[]
    {
        new Oci.CertificatesManagement.Inputs.CertificateCertificateRuleArgs
        {
            AdvanceRenewalPeriod = "string",
            RenewalInterval = "string",
            RuleType = "string",
        },
    },
    DefinedTags = 
    {
        { "string", "string" },
    },
    Description = "string",
    FreeformTags = 
    {
        { "string", "string" },
    },
    Name = "string",
});
Copy
example, err := CertificatesManagement.NewCertificate(ctx, "ociCertificateResource", &CertificatesManagement.CertificateArgs{
	CertificateConfig: &certificatesmanagement.CertificateCertificateConfigArgs{
		ConfigType:                   pulumi.String("string"),
		CertificateProfileType:       pulumi.String("string"),
		CsrPem:                       pulumi.String("string"),
		IssuerCertificateAuthorityId: pulumi.String("string"),
		KeyAlgorithm:                 pulumi.String("string"),
		SignatureAlgorithm:           pulumi.String("string"),
		Subject: &certificatesmanagement.CertificateCertificateConfigSubjectArgs{
			CommonName:                 pulumi.String("string"),
			Country:                    pulumi.String("string"),
			DistinguishedNameQualifier: pulumi.String("string"),
			DomainComponent:            pulumi.String("string"),
			GenerationQualifier:        pulumi.String("string"),
			GivenName:                  pulumi.String("string"),
			Initials:                   pulumi.String("string"),
			LocalityName:               pulumi.String("string"),
			Organization:               pulumi.String("string"),
			OrganizationalUnit:         pulumi.String("string"),
			Pseudonym:                  pulumi.String("string"),
			SerialNumber:               pulumi.String("string"),
			StateOrProvinceName:        pulumi.String("string"),
			Street:                     pulumi.String("string"),
			Surname:                    pulumi.String("string"),
			Title:                      pulumi.String("string"),
			UserId:                     pulumi.String("string"),
		},
		SubjectAlternativeNames: certificatesmanagement.CertificateCertificateConfigSubjectAlternativeNameArray{
			&certificatesmanagement.CertificateCertificateConfigSubjectAlternativeNameArgs{
				Type:  pulumi.String("string"),
				Value: pulumi.String("string"),
			},
		},
		Validity: &certificatesmanagement.CertificateCertificateConfigValidityArgs{
			TimeOfValidityNotAfter:  pulumi.String("string"),
			TimeOfValidityNotBefore: pulumi.String("string"),
		},
		VersionName: pulumi.String("string"),
	},
	CompartmentId: pulumi.String("string"),
	CertificateRules: certificatesmanagement.CertificateCertificateRuleArray{
		&certificatesmanagement.CertificateCertificateRuleArgs{
			AdvanceRenewalPeriod: pulumi.String("string"),
			RenewalInterval:      pulumi.String("string"),
			RuleType:             pulumi.String("string"),
		},
	},
	DefinedTags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Description: pulumi.String("string"),
	FreeformTags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Name: pulumi.String("string"),
})
Copy
var ociCertificateResource = new Certificate("ociCertificateResource", CertificateArgs.builder()
    .certificateConfig(CertificateCertificateConfigArgs.builder()
        .configType("string")
        .certificateProfileType("string")
        .csrPem("string")
        .issuerCertificateAuthorityId("string")
        .keyAlgorithm("string")
        .signatureAlgorithm("string")
        .subject(CertificateCertificateConfigSubjectArgs.builder()
            .commonName("string")
            .country("string")
            .distinguishedNameQualifier("string")
            .domainComponent("string")
            .generationQualifier("string")
            .givenName("string")
            .initials("string")
            .localityName("string")
            .organization("string")
            .organizationalUnit("string")
            .pseudonym("string")
            .serialNumber("string")
            .stateOrProvinceName("string")
            .street("string")
            .surname("string")
            .title("string")
            .userId("string")
            .build())
        .subjectAlternativeNames(CertificateCertificateConfigSubjectAlternativeNameArgs.builder()
            .type("string")
            .value("string")
            .build())
        .validity(CertificateCertificateConfigValidityArgs.builder()
            .timeOfValidityNotAfter("string")
            .timeOfValidityNotBefore("string")
            .build())
        .versionName("string")
        .build())
    .compartmentId("string")
    .certificateRules(CertificateCertificateRuleArgs.builder()
        .advanceRenewalPeriod("string")
        .renewalInterval("string")
        .ruleType("string")
        .build())
    .definedTags(Map.of("string", "string"))
    .description("string")
    .freeformTags(Map.of("string", "string"))
    .name("string")
    .build());
Copy
oci_certificate_resource = oci.certificates_management.Certificate("ociCertificateResource",
    certificate_config={
        "config_type": "string",
        "certificate_profile_type": "string",
        "csr_pem": "string",
        "issuer_certificate_authority_id": "string",
        "key_algorithm": "string",
        "signature_algorithm": "string",
        "subject": {
            "common_name": "string",
            "country": "string",
            "distinguished_name_qualifier": "string",
            "domain_component": "string",
            "generation_qualifier": "string",
            "given_name": "string",
            "initials": "string",
            "locality_name": "string",
            "organization": "string",
            "organizational_unit": "string",
            "pseudonym": "string",
            "serial_number": "string",
            "state_or_province_name": "string",
            "street": "string",
            "surname": "string",
            "title": "string",
            "user_id": "string",
        },
        "subject_alternative_names": [{
            "type": "string",
            "value": "string",
        }],
        "validity": {
            "time_of_validity_not_after": "string",
            "time_of_validity_not_before": "string",
        },
        "version_name": "string",
    },
    compartment_id="string",
    certificate_rules=[{
        "advance_renewal_period": "string",
        "renewal_interval": "string",
        "rule_type": "string",
    }],
    defined_tags={
        "string": "string",
    },
    description="string",
    freeform_tags={
        "string": "string",
    },
    name="string")
Copy
const ociCertificateResource = new oci.certificatesmanagement.Certificate("ociCertificateResource", {
    certificateConfig: {
        configType: "string",
        certificateProfileType: "string",
        csrPem: "string",
        issuerCertificateAuthorityId: "string",
        keyAlgorithm: "string",
        signatureAlgorithm: "string",
        subject: {
            commonName: "string",
            country: "string",
            distinguishedNameQualifier: "string",
            domainComponent: "string",
            generationQualifier: "string",
            givenName: "string",
            initials: "string",
            localityName: "string",
            organization: "string",
            organizationalUnit: "string",
            pseudonym: "string",
            serialNumber: "string",
            stateOrProvinceName: "string",
            street: "string",
            surname: "string",
            title: "string",
            userId: "string",
        },
        subjectAlternativeNames: [{
            type: "string",
            value: "string",
        }],
        validity: {
            timeOfValidityNotAfter: "string",
            timeOfValidityNotBefore: "string",
        },
        versionName: "string",
    },
    compartmentId: "string",
    certificateRules: [{
        advanceRenewalPeriod: "string",
        renewalInterval: "string",
        ruleType: "string",
    }],
    definedTags: {
        string: "string",
    },
    description: "string",
    freeformTags: {
        string: "string",
    },
    name: "string",
});
Copy
type: oci:CertificatesManagement:Certificate
properties:
    certificateConfig:
        certificateProfileType: string
        configType: string
        csrPem: string
        issuerCertificateAuthorityId: string
        keyAlgorithm: string
        signatureAlgorithm: string
        subject:
            commonName: string
            country: string
            distinguishedNameQualifier: string
            domainComponent: string
            generationQualifier: string
            givenName: string
            initials: string
            localityName: string
            organization: string
            organizationalUnit: string
            pseudonym: string
            serialNumber: string
            stateOrProvinceName: string
            street: string
            surname: string
            title: string
            userId: string
        subjectAlternativeNames:
            - type: string
              value: string
        validity:
            timeOfValidityNotAfter: string
            timeOfValidityNotBefore: string
        versionName: string
    certificateRules:
        - advanceRenewalPeriod: string
          renewalInterval: string
          ruleType: string
    compartmentId: string
    definedTags:
        string: string
    description: string
    freeformTags:
        string: string
    name: string
Copy

Certificate Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Certificate resource accepts the following input properties:

CertificateConfig This property is required. CertificateCertificateConfig
(Updatable) The details of the contents of the certificate and certificate metadata.
CompartmentId This property is required. string
(Updatable) The OCID of the compartment where you want to create the certificate.
CertificateRules List<CertificateCertificateRule>
(Updatable) An optional list of rules that control how the certificate is used and managed.
DefinedTags Dictionary<string, string>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
Description string
(Updatable) A brief description of the certificate. Avoid entering confidential information.
FreeformTags Dictionary<string, string>
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
Name Changes to this property will trigger replacement. string

A user-friendly name for the certificate. Names are unique within a compartment. Avoid entering confidential information. Valid characters are uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

CertificateConfig This property is required. CertificateCertificateConfigArgs
(Updatable) The details of the contents of the certificate and certificate metadata.
CompartmentId This property is required. string
(Updatable) The OCID of the compartment where you want to create the certificate.
CertificateRules []CertificateCertificateRuleArgs
(Updatable) An optional list of rules that control how the certificate is used and managed.
DefinedTags map[string]string
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
Description string
(Updatable) A brief description of the certificate. Avoid entering confidential information.
FreeformTags map[string]string
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
Name Changes to this property will trigger replacement. string

A user-friendly name for the certificate. Names are unique within a compartment. Avoid entering confidential information. Valid characters are uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

certificateConfig This property is required. CertificateCertificateConfig
(Updatable) The details of the contents of the certificate and certificate metadata.
compartmentId This property is required. String
(Updatable) The OCID of the compartment where you want to create the certificate.
certificateRules List<CertificateCertificateRule>
(Updatable) An optional list of rules that control how the certificate is used and managed.
definedTags Map<String,String>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
description String
(Updatable) A brief description of the certificate. Avoid entering confidential information.
freeformTags Map<String,String>
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
name Changes to this property will trigger replacement. String

A user-friendly name for the certificate. Names are unique within a compartment. Avoid entering confidential information. Valid characters are uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

certificateConfig This property is required. CertificateCertificateConfig
(Updatable) The details of the contents of the certificate and certificate metadata.
compartmentId This property is required. string
(Updatable) The OCID of the compartment where you want to create the certificate.
certificateRules CertificateCertificateRule[]
(Updatable) An optional list of rules that control how the certificate is used and managed.
definedTags {[key: string]: string}
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
description string
(Updatable) A brief description of the certificate. Avoid entering confidential information.
freeformTags {[key: string]: string}
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
name Changes to this property will trigger replacement. string

A user-friendly name for the certificate. Names are unique within a compartment. Avoid entering confidential information. Valid characters are uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

certificate_config This property is required. certificatesmanagement.CertificateCertificateConfigArgs
(Updatable) The details of the contents of the certificate and certificate metadata.
compartment_id This property is required. str
(Updatable) The OCID of the compartment where you want to create the certificate.
certificate_rules Sequence[certificatesmanagement.CertificateCertificateRuleArgs]
(Updatable) An optional list of rules that control how the certificate is used and managed.
defined_tags Mapping[str, str]
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
description str
(Updatable) A brief description of the certificate. Avoid entering confidential information.
freeform_tags Mapping[str, str]
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
name Changes to this property will trigger replacement. str

A user-friendly name for the certificate. Names are unique within a compartment. Avoid entering confidential information. Valid characters are uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

certificateConfig This property is required. Property Map
(Updatable) The details of the contents of the certificate and certificate metadata.
compartmentId This property is required. String
(Updatable) The OCID of the compartment where you want to create the certificate.
certificateRules List<Property Map>
(Updatable) An optional list of rules that control how the certificate is used and managed.
definedTags Map<String>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
description String
(Updatable) A brief description of the certificate. Avoid entering confidential information.
freeformTags Map<String>
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
name Changes to this property will trigger replacement. String

A user-friendly name for the certificate. Names are unique within a compartment. Avoid entering confidential information. Valid characters are uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

Outputs

All input properties are implicitly available as output properties. Additionally, the Certificate resource produces the following output properties:

CertificateProfileType string
The name of the profile used to create the certificate, which depends on the type of certificate you need.
CertificateRevocationListDetails List<CertificateCertificateRevocationListDetail>
The details of the certificate revocation list (CRL).
ConfigType string
The origin of the certificate.
CurrentVersions List<CertificateCurrentVersion>
The details of the certificate version. This object does not contain the certificate contents.
Id string
The provider-assigned unique ID for this managed resource.
IssuerCertificateAuthorityId string
The OCID of the certificate authority (CA) that issued the certificate.
KeyAlgorithm string
The algorithm used to create key pairs.
LifecycleDetails string
Additional information about the current lifecycle state of the certificate.
SignatureAlgorithm string
The algorithm used to sign the public key certificate.
State string
The current lifecycle state of the certificate.
Subjects List<CertificateSubject>
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
TimeCreated string
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
TimeOfDeletion string
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
CertificateProfileType string
The name of the profile used to create the certificate, which depends on the type of certificate you need.
CertificateRevocationListDetails []CertificateCertificateRevocationListDetail
The details of the certificate revocation list (CRL).
ConfigType string
The origin of the certificate.
CurrentVersions []CertificateCurrentVersion
The details of the certificate version. This object does not contain the certificate contents.
Id string
The provider-assigned unique ID for this managed resource.
IssuerCertificateAuthorityId string
The OCID of the certificate authority (CA) that issued the certificate.
KeyAlgorithm string
The algorithm used to create key pairs.
LifecycleDetails string
Additional information about the current lifecycle state of the certificate.
SignatureAlgorithm string
The algorithm used to sign the public key certificate.
State string
The current lifecycle state of the certificate.
Subjects []CertificateSubject
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
TimeCreated string
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
TimeOfDeletion string
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
certificateProfileType String
The name of the profile used to create the certificate, which depends on the type of certificate you need.
certificateRevocationListDetails List<CertificateCertificateRevocationListDetail>
The details of the certificate revocation list (CRL).
configType String
The origin of the certificate.
currentVersions List<CertificateCurrentVersion>
The details of the certificate version. This object does not contain the certificate contents.
id String
The provider-assigned unique ID for this managed resource.
issuerCertificateAuthorityId String
The OCID of the certificate authority (CA) that issued the certificate.
keyAlgorithm String
The algorithm used to create key pairs.
lifecycleDetails String
Additional information about the current lifecycle state of the certificate.
signatureAlgorithm String
The algorithm used to sign the public key certificate.
state String
The current lifecycle state of the certificate.
subjects List<CertificateSubject>
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
timeCreated String
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfDeletion String
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
certificateProfileType string
The name of the profile used to create the certificate, which depends on the type of certificate you need.
certificateRevocationListDetails CertificateCertificateRevocationListDetail[]
The details of the certificate revocation list (CRL).
configType string
The origin of the certificate.
currentVersions CertificateCurrentVersion[]
The details of the certificate version. This object does not contain the certificate contents.
id string
The provider-assigned unique ID for this managed resource.
issuerCertificateAuthorityId string
The OCID of the certificate authority (CA) that issued the certificate.
keyAlgorithm string
The algorithm used to create key pairs.
lifecycleDetails string
Additional information about the current lifecycle state of the certificate.
signatureAlgorithm string
The algorithm used to sign the public key certificate.
state string
The current lifecycle state of the certificate.
subjects CertificateSubject[]
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
timeCreated string
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfDeletion string
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
certificate_profile_type str
The name of the profile used to create the certificate, which depends on the type of certificate you need.
certificate_revocation_list_details Sequence[certificatesmanagement.CertificateCertificateRevocationListDetail]
The details of the certificate revocation list (CRL).
config_type str
The origin of the certificate.
current_versions Sequence[certificatesmanagement.CertificateCurrentVersion]
The details of the certificate version. This object does not contain the certificate contents.
id str
The provider-assigned unique ID for this managed resource.
issuer_certificate_authority_id str
The OCID of the certificate authority (CA) that issued the certificate.
key_algorithm str
The algorithm used to create key pairs.
lifecycle_details str
Additional information about the current lifecycle state of the certificate.
signature_algorithm str
The algorithm used to sign the public key certificate.
state str
The current lifecycle state of the certificate.
subjects Sequence[certificatesmanagement.CertificateSubject]
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
time_created str
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
time_of_deletion str
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
certificateProfileType String
The name of the profile used to create the certificate, which depends on the type of certificate you need.
certificateRevocationListDetails List<Property Map>
The details of the certificate revocation list (CRL).
configType String
The origin of the certificate.
currentVersions List<Property Map>
The details of the certificate version. This object does not contain the certificate contents.
id String
The provider-assigned unique ID for this managed resource.
issuerCertificateAuthorityId String
The OCID of the certificate authority (CA) that issued the certificate.
keyAlgorithm String
The algorithm used to create key pairs.
lifecycleDetails String
Additional information about the current lifecycle state of the certificate.
signatureAlgorithm String
The algorithm used to sign the public key certificate.
state String
The current lifecycle state of the certificate.
subjects List<Property Map>
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
timeCreated String
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfDeletion String
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

Look up Existing Certificate Resource

Get an existing Certificate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: CertificateState, opts?: CustomResourceOptions): Certificate
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        certificate_config: Optional[_certificatesmanagement.CertificateCertificateConfigArgs] = None,
        certificate_profile_type: Optional[str] = None,
        certificate_revocation_list_details: Optional[Sequence[_certificatesmanagement.CertificateCertificateRevocationListDetailArgs]] = None,
        certificate_rules: Optional[Sequence[_certificatesmanagement.CertificateCertificateRuleArgs]] = None,
        compartment_id: Optional[str] = None,
        config_type: Optional[str] = None,
        current_versions: Optional[Sequence[_certificatesmanagement.CertificateCurrentVersionArgs]] = None,
        defined_tags: Optional[Mapping[str, str]] = None,
        description: Optional[str] = None,
        freeform_tags: Optional[Mapping[str, str]] = None,
        issuer_certificate_authority_id: Optional[str] = None,
        key_algorithm: Optional[str] = None,
        lifecycle_details: Optional[str] = None,
        name: Optional[str] = None,
        signature_algorithm: Optional[str] = None,
        state: Optional[str] = None,
        subjects: Optional[Sequence[_certificatesmanagement.CertificateSubjectArgs]] = None,
        time_created: Optional[str] = None,
        time_of_deletion: Optional[str] = None) -> Certificate
func GetCertificate(ctx *Context, name string, id IDInput, state *CertificateState, opts ...ResourceOption) (*Certificate, error)
public static Certificate Get(string name, Input<string> id, CertificateState? state, CustomResourceOptions? opts = null)
public static Certificate get(String name, Output<String> id, CertificateState state, CustomResourceOptions options)
resources:  _:    type: oci:CertificatesManagement:Certificate    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
CertificateConfig CertificateCertificateConfig
(Updatable) The details of the contents of the certificate and certificate metadata.
CertificateProfileType string
The name of the profile used to create the certificate, which depends on the type of certificate you need.
CertificateRevocationListDetails List<CertificateCertificateRevocationListDetail>
The details of the certificate revocation list (CRL).
CertificateRules List<CertificateCertificateRule>
(Updatable) An optional list of rules that control how the certificate is used and managed.
CompartmentId string
(Updatable) The OCID of the compartment where you want to create the certificate.
ConfigType string
The origin of the certificate.
CurrentVersions List<CertificateCurrentVersion>
The details of the certificate version. This object does not contain the certificate contents.
DefinedTags Dictionary<string, string>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
Description string
(Updatable) A brief description of the certificate. Avoid entering confidential information.
FreeformTags Dictionary<string, string>
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
IssuerCertificateAuthorityId string
The OCID of the certificate authority (CA) that issued the certificate.
KeyAlgorithm string
The algorithm used to create key pairs.
LifecycleDetails string
Additional information about the current lifecycle state of the certificate.
Name Changes to this property will trigger replacement. string

A user-friendly name for the certificate. Names are unique within a compartment. Avoid entering confidential information. Valid characters are uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

SignatureAlgorithm string
The algorithm used to sign the public key certificate.
State string
The current lifecycle state of the certificate.
Subjects List<CertificateSubject>
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
TimeCreated string
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
TimeOfDeletion string
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
CertificateConfig CertificateCertificateConfigArgs
(Updatable) The details of the contents of the certificate and certificate metadata.
CertificateProfileType string
The name of the profile used to create the certificate, which depends on the type of certificate you need.
CertificateRevocationListDetails []CertificateCertificateRevocationListDetailArgs
The details of the certificate revocation list (CRL).
CertificateRules []CertificateCertificateRuleArgs
(Updatable) An optional list of rules that control how the certificate is used and managed.
CompartmentId string
(Updatable) The OCID of the compartment where you want to create the certificate.
ConfigType string
The origin of the certificate.
CurrentVersions []CertificateCurrentVersionArgs
The details of the certificate version. This object does not contain the certificate contents.
DefinedTags map[string]string
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
Description string
(Updatable) A brief description of the certificate. Avoid entering confidential information.
FreeformTags map[string]string
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
IssuerCertificateAuthorityId string
The OCID of the certificate authority (CA) that issued the certificate.
KeyAlgorithm string
The algorithm used to create key pairs.
LifecycleDetails string
Additional information about the current lifecycle state of the certificate.
Name Changes to this property will trigger replacement. string

A user-friendly name for the certificate. Names are unique within a compartment. Avoid entering confidential information. Valid characters are uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

SignatureAlgorithm string
The algorithm used to sign the public key certificate.
State string
The current lifecycle state of the certificate.
Subjects []CertificateSubjectArgs
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
TimeCreated string
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
TimeOfDeletion string
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
certificateConfig CertificateCertificateConfig
(Updatable) The details of the contents of the certificate and certificate metadata.
certificateProfileType String
The name of the profile used to create the certificate, which depends on the type of certificate you need.
certificateRevocationListDetails List<CertificateCertificateRevocationListDetail>
The details of the certificate revocation list (CRL).
certificateRules List<CertificateCertificateRule>
(Updatable) An optional list of rules that control how the certificate is used and managed.
compartmentId String
(Updatable) The OCID of the compartment where you want to create the certificate.
configType String
The origin of the certificate.
currentVersions List<CertificateCurrentVersion>
The details of the certificate version. This object does not contain the certificate contents.
definedTags Map<String,String>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
description String
(Updatable) A brief description of the certificate. Avoid entering confidential information.
freeformTags Map<String,String>
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
issuerCertificateAuthorityId String
The OCID of the certificate authority (CA) that issued the certificate.
keyAlgorithm String
The algorithm used to create key pairs.
lifecycleDetails String
Additional information about the current lifecycle state of the certificate.
name Changes to this property will trigger replacement. String

A user-friendly name for the certificate. Names are unique within a compartment. Avoid entering confidential information. Valid characters are uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

signatureAlgorithm String
The algorithm used to sign the public key certificate.
state String
The current lifecycle state of the certificate.
subjects List<CertificateSubject>
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
timeCreated String
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfDeletion String
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
certificateConfig CertificateCertificateConfig
(Updatable) The details of the contents of the certificate and certificate metadata.
certificateProfileType string
The name of the profile used to create the certificate, which depends on the type of certificate you need.
certificateRevocationListDetails CertificateCertificateRevocationListDetail[]
The details of the certificate revocation list (CRL).
certificateRules CertificateCertificateRule[]
(Updatable) An optional list of rules that control how the certificate is used and managed.
compartmentId string
(Updatable) The OCID of the compartment where you want to create the certificate.
configType string
The origin of the certificate.
currentVersions CertificateCurrentVersion[]
The details of the certificate version. This object does not contain the certificate contents.
definedTags {[key: string]: string}
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
description string
(Updatable) A brief description of the certificate. Avoid entering confidential information.
freeformTags {[key: string]: string}
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
issuerCertificateAuthorityId string
The OCID of the certificate authority (CA) that issued the certificate.
keyAlgorithm string
The algorithm used to create key pairs.
lifecycleDetails string
Additional information about the current lifecycle state of the certificate.
name Changes to this property will trigger replacement. string

A user-friendly name for the certificate. Names are unique within a compartment. Avoid entering confidential information. Valid characters are uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

signatureAlgorithm string
The algorithm used to sign the public key certificate.
state string
The current lifecycle state of the certificate.
subjects CertificateSubject[]
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
timeCreated string
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfDeletion string
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
certificate_config certificatesmanagement.CertificateCertificateConfigArgs
(Updatable) The details of the contents of the certificate and certificate metadata.
certificate_profile_type str
The name of the profile used to create the certificate, which depends on the type of certificate you need.
certificate_revocation_list_details Sequence[certificatesmanagement.CertificateCertificateRevocationListDetailArgs]
The details of the certificate revocation list (CRL).
certificate_rules Sequence[certificatesmanagement.CertificateCertificateRuleArgs]
(Updatable) An optional list of rules that control how the certificate is used and managed.
compartment_id str
(Updatable) The OCID of the compartment where you want to create the certificate.
config_type str
The origin of the certificate.
current_versions Sequence[certificatesmanagement.CertificateCurrentVersionArgs]
The details of the certificate version. This object does not contain the certificate contents.
defined_tags Mapping[str, str]
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
description str
(Updatable) A brief description of the certificate. Avoid entering confidential information.
freeform_tags Mapping[str, str]
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
issuer_certificate_authority_id str
The OCID of the certificate authority (CA) that issued the certificate.
key_algorithm str
The algorithm used to create key pairs.
lifecycle_details str
Additional information about the current lifecycle state of the certificate.
name Changes to this property will trigger replacement. str

A user-friendly name for the certificate. Names are unique within a compartment. Avoid entering confidential information. Valid characters are uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

signature_algorithm str
The algorithm used to sign the public key certificate.
state str
The current lifecycle state of the certificate.
subjects Sequence[certificatesmanagement.CertificateSubjectArgs]
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
time_created str
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
time_of_deletion str
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
certificateConfig Property Map
(Updatable) The details of the contents of the certificate and certificate metadata.
certificateProfileType String
The name of the profile used to create the certificate, which depends on the type of certificate you need.
certificateRevocationListDetails List<Property Map>
The details of the certificate revocation list (CRL).
certificateRules List<Property Map>
(Updatable) An optional list of rules that control how the certificate is used and managed.
compartmentId String
(Updatable) The OCID of the compartment where you want to create the certificate.
configType String
The origin of the certificate.
currentVersions List<Property Map>
The details of the certificate version. This object does not contain the certificate contents.
definedTags Map<String>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
description String
(Updatable) A brief description of the certificate. Avoid entering confidential information.
freeformTags Map<String>
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
issuerCertificateAuthorityId String
The OCID of the certificate authority (CA) that issued the certificate.
keyAlgorithm String
The algorithm used to create key pairs.
lifecycleDetails String
Additional information about the current lifecycle state of the certificate.
name Changes to this property will trigger replacement. String

A user-friendly name for the certificate. Names are unique within a compartment. Avoid entering confidential information. Valid characters are uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

signatureAlgorithm String
The algorithm used to sign the public key certificate.
state String
The current lifecycle state of the certificate.
subjects List<Property Map>
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
timeCreated String
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfDeletion String
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

Supporting Types

CertificateCertificateConfig
, CertificateCertificateConfigArgs

ConfigType This property is required. string
(Updatable) The origin of the certificate.
CertificateProfileType Changes to this property will trigger replacement. string
The name of the profile used to create the certificate, which depends on the type of certificate you need.
CsrPem string
(Updatable) The certificate signing request (in PEM format).
IssuerCertificateAuthorityId Changes to this property will trigger replacement. string
The OCID of the private CA.
KeyAlgorithm Changes to this property will trigger replacement. string
The algorithm to use to create key pairs.
SignatureAlgorithm Changes to this property will trigger replacement. string
The algorithm to use to sign the public key certificate.
Subject Changes to this property will trigger replacement. CertificateCertificateConfigSubject
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
SubjectAlternativeNames Changes to this property will trigger replacement. List<CertificateCertificateConfigSubjectAlternativeName>
A list of subject alternative names.
Validity CertificateCertificateConfigValidity
(Updatable) An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
VersionName string
(Updatable) A name for the certificate. When the value is not null, a name is unique across versions of a given certificate.
ConfigType This property is required. string
(Updatable) The origin of the certificate.
CertificateProfileType Changes to this property will trigger replacement. string
The name of the profile used to create the certificate, which depends on the type of certificate you need.
CsrPem string
(Updatable) The certificate signing request (in PEM format).
IssuerCertificateAuthorityId Changes to this property will trigger replacement. string
The OCID of the private CA.
KeyAlgorithm Changes to this property will trigger replacement. string
The algorithm to use to create key pairs.
SignatureAlgorithm Changes to this property will trigger replacement. string
The algorithm to use to sign the public key certificate.
Subject Changes to this property will trigger replacement. CertificateCertificateConfigSubject
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
SubjectAlternativeNames Changes to this property will trigger replacement. []CertificateCertificateConfigSubjectAlternativeName
A list of subject alternative names.
Validity CertificateCertificateConfigValidity
(Updatable) An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
VersionName string
(Updatable) A name for the certificate. When the value is not null, a name is unique across versions of a given certificate.
configType This property is required. String
(Updatable) The origin of the certificate.
certificateProfileType Changes to this property will trigger replacement. String
The name of the profile used to create the certificate, which depends on the type of certificate you need.
csrPem String
(Updatable) The certificate signing request (in PEM format).
issuerCertificateAuthorityId Changes to this property will trigger replacement. String
The OCID of the private CA.
keyAlgorithm Changes to this property will trigger replacement. String
The algorithm to use to create key pairs.
signatureAlgorithm Changes to this property will trigger replacement. String
The algorithm to use to sign the public key certificate.
subject Changes to this property will trigger replacement. CertificateCertificateConfigSubject
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
subjectAlternativeNames Changes to this property will trigger replacement. List<CertificateCertificateConfigSubjectAlternativeName>
A list of subject alternative names.
validity CertificateCertificateConfigValidity
(Updatable) An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
versionName String
(Updatable) A name for the certificate. When the value is not null, a name is unique across versions of a given certificate.
configType This property is required. string
(Updatable) The origin of the certificate.
certificateProfileType Changes to this property will trigger replacement. string
The name of the profile used to create the certificate, which depends on the type of certificate you need.
csrPem string
(Updatable) The certificate signing request (in PEM format).
issuerCertificateAuthorityId Changes to this property will trigger replacement. string
The OCID of the private CA.
keyAlgorithm Changes to this property will trigger replacement. string
The algorithm to use to create key pairs.
signatureAlgorithm Changes to this property will trigger replacement. string
The algorithm to use to sign the public key certificate.
subject Changes to this property will trigger replacement. CertificateCertificateConfigSubject
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
subjectAlternativeNames Changes to this property will trigger replacement. CertificateCertificateConfigSubjectAlternativeName[]
A list of subject alternative names.
validity CertificateCertificateConfigValidity
(Updatable) An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
versionName string
(Updatable) A name for the certificate. When the value is not null, a name is unique across versions of a given certificate.
config_type This property is required. str
(Updatable) The origin of the certificate.
certificate_profile_type Changes to this property will trigger replacement. str
The name of the profile used to create the certificate, which depends on the type of certificate you need.
csr_pem str
(Updatable) The certificate signing request (in PEM format).
issuer_certificate_authority_id Changes to this property will trigger replacement. str
The OCID of the private CA.
key_algorithm Changes to this property will trigger replacement. str
The algorithm to use to create key pairs.
signature_algorithm Changes to this property will trigger replacement. str
The algorithm to use to sign the public key certificate.
subject Changes to this property will trigger replacement. certificatesmanagement.CertificateCertificateConfigSubject
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
subject_alternative_names Changes to this property will trigger replacement. Sequence[certificatesmanagement.CertificateCertificateConfigSubjectAlternativeName]
A list of subject alternative names.
validity certificatesmanagement.CertificateCertificateConfigValidity
(Updatable) An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
version_name str
(Updatable) A name for the certificate. When the value is not null, a name is unique across versions of a given certificate.
configType This property is required. String
(Updatable) The origin of the certificate.
certificateProfileType Changes to this property will trigger replacement. String
The name of the profile used to create the certificate, which depends on the type of certificate you need.
csrPem String
(Updatable) The certificate signing request (in PEM format).
issuerCertificateAuthorityId Changes to this property will trigger replacement. String
The OCID of the private CA.
keyAlgorithm Changes to this property will trigger replacement. String
The algorithm to use to create key pairs.
signatureAlgorithm Changes to this property will trigger replacement. String
The algorithm to use to sign the public key certificate.
subject Changes to this property will trigger replacement. Property Map
The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
subjectAlternativeNames Changes to this property will trigger replacement. List<Property Map>
A list of subject alternative names.
validity Property Map
(Updatable) An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
versionName String
(Updatable) A name for the certificate. When the value is not null, a name is unique across versions of a given certificate.

CertificateCertificateConfigSubject
, CertificateCertificateConfigSubjectArgs

CommonName
This property is required.
Changes to this property will trigger replacement.
string
Common name or fully-qualified domain name (RDN CN).
Country Changes to this property will trigger replacement. string
Country name (RDN C).
DistinguishedNameQualifier Changes to this property will trigger replacement. string
Distinguished name qualifier(RDN DNQ).
DomainComponent Changes to this property will trigger replacement. string
Domain component (RDN DC).
GenerationQualifier Changes to this property will trigger replacement. string
Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
GivenName Changes to this property will trigger replacement. string
Personal given name (RDN G or GN).
Initials Changes to this property will trigger replacement. string
Personal initials.
LocalityName Changes to this property will trigger replacement. string
Locality (RDN L).
Organization Changes to this property will trigger replacement. string
Organization (RDN O).
OrganizationalUnit Changes to this property will trigger replacement. string
Organizational unit (RDN OU).
Pseudonym Changes to this property will trigger replacement. string
Subject pseudonym.
SerialNumber Changes to this property will trigger replacement. string
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
StateOrProvinceName Changes to this property will trigger replacement. string
State or province name (RDN ST or S).
Street Changes to this property will trigger replacement. string
Street address (RDN STREET).
Surname Changes to this property will trigger replacement. string
Personal surname (RDN SN).
Title Changes to this property will trigger replacement. string
Title (RDN T or TITLE).
UserId Changes to this property will trigger replacement. string
User ID (RDN UID).
CommonName
This property is required.
Changes to this property will trigger replacement.
string
Common name or fully-qualified domain name (RDN CN).
Country Changes to this property will trigger replacement. string
Country name (RDN C).
DistinguishedNameQualifier Changes to this property will trigger replacement. string
Distinguished name qualifier(RDN DNQ).
DomainComponent Changes to this property will trigger replacement. string
Domain component (RDN DC).
GenerationQualifier Changes to this property will trigger replacement. string
Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
GivenName Changes to this property will trigger replacement. string
Personal given name (RDN G or GN).
Initials Changes to this property will trigger replacement. string
Personal initials.
LocalityName Changes to this property will trigger replacement. string
Locality (RDN L).
Organization Changes to this property will trigger replacement. string
Organization (RDN O).
OrganizationalUnit Changes to this property will trigger replacement. string
Organizational unit (RDN OU).
Pseudonym Changes to this property will trigger replacement. string
Subject pseudonym.
SerialNumber Changes to this property will trigger replacement. string
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
StateOrProvinceName Changes to this property will trigger replacement. string
State or province name (RDN ST or S).
Street Changes to this property will trigger replacement. string
Street address (RDN STREET).
Surname Changes to this property will trigger replacement. string
Personal surname (RDN SN).
Title Changes to this property will trigger replacement. string
Title (RDN T or TITLE).
UserId Changes to this property will trigger replacement. string
User ID (RDN UID).
commonName
This property is required.
Changes to this property will trigger replacement.
String
Common name or fully-qualified domain name (RDN CN).
country Changes to this property will trigger replacement. String
Country name (RDN C).
distinguishedNameQualifier Changes to this property will trigger replacement. String
Distinguished name qualifier(RDN DNQ).
domainComponent Changes to this property will trigger replacement. String
Domain component (RDN DC).
generationQualifier Changes to this property will trigger replacement. String
Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
givenName Changes to this property will trigger replacement. String
Personal given name (RDN G or GN).
initials Changes to this property will trigger replacement. String
Personal initials.
localityName Changes to this property will trigger replacement. String
Locality (RDN L).
organization Changes to this property will trigger replacement. String
Organization (RDN O).
organizationalUnit Changes to this property will trigger replacement. String
Organizational unit (RDN OU).
pseudonym Changes to this property will trigger replacement. String
Subject pseudonym.
serialNumber Changes to this property will trigger replacement. String
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
stateOrProvinceName Changes to this property will trigger replacement. String
State or province name (RDN ST or S).
street Changes to this property will trigger replacement. String
Street address (RDN STREET).
surname Changes to this property will trigger replacement. String
Personal surname (RDN SN).
title Changes to this property will trigger replacement. String
Title (RDN T or TITLE).
userId Changes to this property will trigger replacement. String
User ID (RDN UID).
commonName
This property is required.
Changes to this property will trigger replacement.
string
Common name or fully-qualified domain name (RDN CN).
country Changes to this property will trigger replacement. string
Country name (RDN C).
distinguishedNameQualifier Changes to this property will trigger replacement. string
Distinguished name qualifier(RDN DNQ).
domainComponent Changes to this property will trigger replacement. string
Domain component (RDN DC).
generationQualifier Changes to this property will trigger replacement. string
Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
givenName Changes to this property will trigger replacement. string
Personal given name (RDN G or GN).
initials Changes to this property will trigger replacement. string
Personal initials.
localityName Changes to this property will trigger replacement. string
Locality (RDN L).
organization Changes to this property will trigger replacement. string
Organization (RDN O).
organizationalUnit Changes to this property will trigger replacement. string
Organizational unit (RDN OU).
pseudonym Changes to this property will trigger replacement. string
Subject pseudonym.
serialNumber Changes to this property will trigger replacement. string
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
stateOrProvinceName Changes to this property will trigger replacement. string
State or province name (RDN ST or S).
street Changes to this property will trigger replacement. string
Street address (RDN STREET).
surname Changes to this property will trigger replacement. string
Personal surname (RDN SN).
title Changes to this property will trigger replacement. string
Title (RDN T or TITLE).
userId Changes to this property will trigger replacement. string
User ID (RDN UID).
common_name
This property is required.
Changes to this property will trigger replacement.
str
Common name or fully-qualified domain name (RDN CN).
country Changes to this property will trigger replacement. str
Country name (RDN C).
distinguished_name_qualifier Changes to this property will trigger replacement. str
Distinguished name qualifier(RDN DNQ).
domain_component Changes to this property will trigger replacement. str
Domain component (RDN DC).
generation_qualifier Changes to this property will trigger replacement. str
Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
given_name Changes to this property will trigger replacement. str
Personal given name (RDN G or GN).
initials Changes to this property will trigger replacement. str
Personal initials.
locality_name Changes to this property will trigger replacement. str
Locality (RDN L).
organization Changes to this property will trigger replacement. str
Organization (RDN O).
organizational_unit Changes to this property will trigger replacement. str
Organizational unit (RDN OU).
pseudonym Changes to this property will trigger replacement. str
Subject pseudonym.
serial_number Changes to this property will trigger replacement. str
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
state_or_province_name Changes to this property will trigger replacement. str
State or province name (RDN ST or S).
street Changes to this property will trigger replacement. str
Street address (RDN STREET).
surname Changes to this property will trigger replacement. str
Personal surname (RDN SN).
title Changes to this property will trigger replacement. str
Title (RDN T or TITLE).
user_id Changes to this property will trigger replacement. str
User ID (RDN UID).
commonName
This property is required.
Changes to this property will trigger replacement.
String
Common name or fully-qualified domain name (RDN CN).
country Changes to this property will trigger replacement. String
Country name (RDN C).
distinguishedNameQualifier Changes to this property will trigger replacement. String
Distinguished name qualifier(RDN DNQ).
domainComponent Changes to this property will trigger replacement. String
Domain component (RDN DC).
generationQualifier Changes to this property will trigger replacement. String
Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
givenName Changes to this property will trigger replacement. String
Personal given name (RDN G or GN).
initials Changes to this property will trigger replacement. String
Personal initials.
localityName Changes to this property will trigger replacement. String
Locality (RDN L).
organization Changes to this property will trigger replacement. String
Organization (RDN O).
organizationalUnit Changes to this property will trigger replacement. String
Organizational unit (RDN OU).
pseudonym Changes to this property will trigger replacement. String
Subject pseudonym.
serialNumber Changes to this property will trigger replacement. String
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
stateOrProvinceName Changes to this property will trigger replacement. String
State or province name (RDN ST or S).
street Changes to this property will trigger replacement. String
Street address (RDN STREET).
surname Changes to this property will trigger replacement. String
Personal surname (RDN SN).
title Changes to this property will trigger replacement. String
Title (RDN T or TITLE).
userId Changes to this property will trigger replacement. String
User ID (RDN UID).

CertificateCertificateConfigSubjectAlternativeName
, CertificateCertificateConfigSubjectAlternativeNameArgs

Type
This property is required.
Changes to this property will trigger replacement.
string
The subject alternative name type. Currently only DNS domain or host names and IP addresses are supported.
Value
This property is required.
Changes to this property will trigger replacement.
string
The subject alternative name.
Type
This property is required.
Changes to this property will trigger replacement.
string
The subject alternative name type. Currently only DNS domain or host names and IP addresses are supported.
Value
This property is required.
Changes to this property will trigger replacement.
string
The subject alternative name.
type
This property is required.
Changes to this property will trigger replacement.
String
The subject alternative name type. Currently only DNS domain or host names and IP addresses are supported.
value
This property is required.
Changes to this property will trigger replacement.
String
The subject alternative name.
type
This property is required.
Changes to this property will trigger replacement.
string
The subject alternative name type. Currently only DNS domain or host names and IP addresses are supported.
value
This property is required.
Changes to this property will trigger replacement.
string
The subject alternative name.
type
This property is required.
Changes to this property will trigger replacement.
str
The subject alternative name type. Currently only DNS domain or host names and IP addresses are supported.
value
This property is required.
Changes to this property will trigger replacement.
str
The subject alternative name.
type
This property is required.
Changes to this property will trigger replacement.
String
The subject alternative name type. Currently only DNS domain or host names and IP addresses are supported.
value
This property is required.
Changes to this property will trigger replacement.
String
The subject alternative name.

CertificateCertificateConfigValidity
, CertificateCertificateConfigValidityArgs

TimeOfValidityNotAfter This property is required. string
(Updatable) The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
TimeOfValidityNotBefore string
(Updatable) The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
TimeOfValidityNotAfter This property is required. string
(Updatable) The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
TimeOfValidityNotBefore string
(Updatable) The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfValidityNotAfter This property is required. String
(Updatable) The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfValidityNotBefore String
(Updatable) The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfValidityNotAfter This property is required. string
(Updatable) The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfValidityNotBefore string
(Updatable) The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
time_of_validity_not_after This property is required. str
(Updatable) The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
time_of_validity_not_before str
(Updatable) The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfValidityNotAfter This property is required. String
(Updatable) The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfValidityNotBefore String
(Updatable) The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

CertificateCertificateRevocationListDetail
, CertificateCertificateRevocationListDetailArgs

CustomFormattedUrls List<string>
Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
ObjectStorageConfigs List<CertificateCertificateRevocationListDetailObjectStorageConfig>
The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
CustomFormattedUrls []string
Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
ObjectStorageConfigs []CertificateCertificateRevocationListDetailObjectStorageConfig
The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
customFormattedUrls List<String>
Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
objectStorageConfigs List<CertificateCertificateRevocationListDetailObjectStorageConfig>
The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
customFormattedUrls string[]
Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
objectStorageConfigs CertificateCertificateRevocationListDetailObjectStorageConfig[]
The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
custom_formatted_urls Sequence[str]
Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
object_storage_configs Sequence[certificatesmanagement.CertificateCertificateRevocationListDetailObjectStorageConfig]
The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
customFormattedUrls List<String>
Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
objectStorageConfigs List<Property Map>
The details of the Object Storage bucket configured to store the certificate revocation list (CRL).

CertificateCertificateRevocationListDetailObjectStorageConfig
, CertificateCertificateRevocationListDetailObjectStorageConfigArgs

ObjectStorageBucketName string
The name of the bucket where the CRL is stored.
ObjectStorageNamespace string
The tenancy of the bucket where the CRL is stored.
ObjectStorageObjectNameFormat string
The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
ObjectStorageBucketName string
The name of the bucket where the CRL is stored.
ObjectStorageNamespace string
The tenancy of the bucket where the CRL is stored.
ObjectStorageObjectNameFormat string
The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
objectStorageBucketName String
The name of the bucket where the CRL is stored.
objectStorageNamespace String
The tenancy of the bucket where the CRL is stored.
objectStorageObjectNameFormat String
The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
objectStorageBucketName string
The name of the bucket where the CRL is stored.
objectStorageNamespace string
The tenancy of the bucket where the CRL is stored.
objectStorageObjectNameFormat string
The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
object_storage_bucket_name str
The name of the bucket where the CRL is stored.
object_storage_namespace str
The tenancy of the bucket where the CRL is stored.
object_storage_object_name_format str
The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
objectStorageBucketName String
The name of the bucket where the CRL is stored.
objectStorageNamespace String
The tenancy of the bucket where the CRL is stored.
objectStorageObjectNameFormat String
The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.

CertificateCertificateRule
, CertificateCertificateRuleArgs

AdvanceRenewalPeriod This property is required. string
(Updatable) A property specifying the period of time, in days, before the certificate's targeted renewal that the process should occur. Expressed in ISO 8601 format.
RenewalInterval This property is required. string
(Updatable) A property specifying how often, in days, a certificate should be renewed. Expressed in ISO 8601 format.
RuleType This property is required. string
(Updatable) The type of rule.
AdvanceRenewalPeriod This property is required. string
(Updatable) A property specifying the period of time, in days, before the certificate's targeted renewal that the process should occur. Expressed in ISO 8601 format.
RenewalInterval This property is required. string
(Updatable) A property specifying how often, in days, a certificate should be renewed. Expressed in ISO 8601 format.
RuleType This property is required. string
(Updatable) The type of rule.
advanceRenewalPeriod This property is required. String
(Updatable) A property specifying the period of time, in days, before the certificate's targeted renewal that the process should occur. Expressed in ISO 8601 format.
renewalInterval This property is required. String
(Updatable) A property specifying how often, in days, a certificate should be renewed. Expressed in ISO 8601 format.
ruleType This property is required. String
(Updatable) The type of rule.
advanceRenewalPeriod This property is required. string
(Updatable) A property specifying the period of time, in days, before the certificate's targeted renewal that the process should occur. Expressed in ISO 8601 format.
renewalInterval This property is required. string
(Updatable) A property specifying how often, in days, a certificate should be renewed. Expressed in ISO 8601 format.
ruleType This property is required. string
(Updatable) The type of rule.
advance_renewal_period This property is required. str
(Updatable) A property specifying the period of time, in days, before the certificate's targeted renewal that the process should occur. Expressed in ISO 8601 format.
renewal_interval This property is required. str
(Updatable) A property specifying how often, in days, a certificate should be renewed. Expressed in ISO 8601 format.
rule_type This property is required. str
(Updatable) The type of rule.
advanceRenewalPeriod This property is required. String
(Updatable) A property specifying the period of time, in days, before the certificate's targeted renewal that the process should occur. Expressed in ISO 8601 format.
renewalInterval This property is required. String
(Updatable) A property specifying how often, in days, a certificate should be renewed. Expressed in ISO 8601 format.
ruleType This property is required. String
(Updatable) The type of rule.

CertificateCurrentVersion
, CertificateCurrentVersionArgs

CertificateId string
The OCID of the certificate.
IssuerCaVersionNumber string
The version number of the issuing certificate authority (CA).
RevocationStatuses List<CertificateCurrentVersionRevocationStatus>
The current revocation status of the entity.
SerialNumber string
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
Stages List<string>
A list of rotation states for this certificate version.
SubjectAlternativeNames List<CertificateCurrentVersionSubjectAlternativeName>
A list of subject alternative names.
TimeCreated string
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
TimeOfDeletion string
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
Validities List<CertificateCurrentVersionValidity>
An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
VersionName string
The name of the certificate version. When the value is not null, a name is unique across versions of a given certificate.
VersionNumber string
The version number of the certificate.
CertificateId string
The OCID of the certificate.
IssuerCaVersionNumber string
The version number of the issuing certificate authority (CA).
RevocationStatuses []CertificateCurrentVersionRevocationStatus
The current revocation status of the entity.
SerialNumber string
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
Stages []string
A list of rotation states for this certificate version.
SubjectAlternativeNames []CertificateCurrentVersionSubjectAlternativeName
A list of subject alternative names.
TimeCreated string
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
TimeOfDeletion string
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
Validities []CertificateCurrentVersionValidity
An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
VersionName string
The name of the certificate version. When the value is not null, a name is unique across versions of a given certificate.
VersionNumber string
The version number of the certificate.
certificateId String
The OCID of the certificate.
issuerCaVersionNumber String
The version number of the issuing certificate authority (CA).
revocationStatuses List<CertificateCurrentVersionRevocationStatus>
The current revocation status of the entity.
serialNumber String
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
stages List<String>
A list of rotation states for this certificate version.
subjectAlternativeNames List<CertificateCurrentVersionSubjectAlternativeName>
A list of subject alternative names.
timeCreated String
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfDeletion String
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
validities List<CertificateCurrentVersionValidity>
An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
versionName String
The name of the certificate version. When the value is not null, a name is unique across versions of a given certificate.
versionNumber String
The version number of the certificate.
certificateId string
The OCID of the certificate.
issuerCaVersionNumber string
The version number of the issuing certificate authority (CA).
revocationStatuses CertificateCurrentVersionRevocationStatus[]
The current revocation status of the entity.
serialNumber string
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
stages string[]
A list of rotation states for this certificate version.
subjectAlternativeNames CertificateCurrentVersionSubjectAlternativeName[]
A list of subject alternative names.
timeCreated string
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfDeletion string
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
validities CertificateCurrentVersionValidity[]
An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
versionName string
The name of the certificate version. When the value is not null, a name is unique across versions of a given certificate.
versionNumber string
The version number of the certificate.
certificate_id str
The OCID of the certificate.
issuer_ca_version_number str
The version number of the issuing certificate authority (CA).
revocation_statuses Sequence[certificatesmanagement.CertificateCurrentVersionRevocationStatus]
The current revocation status of the entity.
serial_number str
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
stages Sequence[str]
A list of rotation states for this certificate version.
subject_alternative_names Sequence[certificatesmanagement.CertificateCurrentVersionSubjectAlternativeName]
A list of subject alternative names.
time_created str
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
time_of_deletion str
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
validities Sequence[certificatesmanagement.CertificateCurrentVersionValidity]
An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
version_name str
The name of the certificate version. When the value is not null, a name is unique across versions of a given certificate.
version_number str
The version number of the certificate.
certificateId String
The OCID of the certificate.
issuerCaVersionNumber String
The version number of the issuing certificate authority (CA).
revocationStatuses List<Property Map>
The current revocation status of the entity.
serialNumber String
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
stages List<String>
A list of rotation states for this certificate version.
subjectAlternativeNames List<Property Map>
A list of subject alternative names.
timeCreated String
A property indicating when the certificate was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfDeletion String
An optional property indicating when to delete the certificate version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
validities List<Property Map>
An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
versionName String
The name of the certificate version. When the value is not null, a name is unique across versions of a given certificate.
versionNumber String
The version number of the certificate.

CertificateCurrentVersionRevocationStatus
, CertificateCurrentVersionRevocationStatusArgs

RevocationReason string
The reason the certificate or certificate authority (CA) was revoked.
TimeOfRevocation string
The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
RevocationReason string
The reason the certificate or certificate authority (CA) was revoked.
TimeOfRevocation string
The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
revocationReason String
The reason the certificate or certificate authority (CA) was revoked.
timeOfRevocation String
The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
revocationReason string
The reason the certificate or certificate authority (CA) was revoked.
timeOfRevocation string
The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
revocation_reason str
The reason the certificate or certificate authority (CA) was revoked.
time_of_revocation str
The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
revocationReason String
The reason the certificate or certificate authority (CA) was revoked.
timeOfRevocation String
The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

CertificateCurrentVersionSubjectAlternativeName
, CertificateCurrentVersionSubjectAlternativeNameArgs

Type string
The subject alternative name type. Currently only DNS domain or host names and IP addresses are supported.
Value string
The subject alternative name.
Type string
The subject alternative name type. Currently only DNS domain or host names and IP addresses are supported.
Value string
The subject alternative name.
type String
The subject alternative name type. Currently only DNS domain or host names and IP addresses are supported.
value String
The subject alternative name.
type string
The subject alternative name type. Currently only DNS domain or host names and IP addresses are supported.
value string
The subject alternative name.
type str
The subject alternative name type. Currently only DNS domain or host names and IP addresses are supported.
value str
The subject alternative name.
type String
The subject alternative name type. Currently only DNS domain or host names and IP addresses are supported.
value String
The subject alternative name.

CertificateCurrentVersionValidity
, CertificateCurrentVersionValidityArgs

TimeOfValidityNotAfter string
The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
TimeOfValidityNotBefore string
The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
TimeOfValidityNotAfter string
The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
TimeOfValidityNotBefore string
The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfValidityNotAfter String
The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfValidityNotBefore String
The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfValidityNotAfter string
The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfValidityNotBefore string
The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
time_of_validity_not_after str
The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
time_of_validity_not_before str
The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfValidityNotAfter String
The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
timeOfValidityNotBefore String
The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

CertificateSubject
, CertificateSubjectArgs

CommonName string
Common name or fully-qualified domain name (RDN CN).
Country string
Country name (RDN C).
DistinguishedNameQualifier string
Distinguished name qualifier(RDN DNQ).
DomainComponent string
Domain component (RDN DC).
GenerationQualifier string
Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
GivenName string
Personal given name (RDN G or GN).
Initials string
Personal initials.
LocalityName string
Locality (RDN L).
Organization string
Organization (RDN O).
OrganizationalUnit string
Organizational unit (RDN OU).
Pseudonym string
Subject pseudonym.
SerialNumber string
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
StateOrProvinceName string
State or province name (RDN ST or S).
Street string
Street address (RDN STREET).
Surname string
Personal surname (RDN SN).
Title string
Title (RDN T or TITLE).
UserId string
User ID (RDN UID).
CommonName string
Common name or fully-qualified domain name (RDN CN).
Country string
Country name (RDN C).
DistinguishedNameQualifier string
Distinguished name qualifier(RDN DNQ).
DomainComponent string
Domain component (RDN DC).
GenerationQualifier string
Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
GivenName string
Personal given name (RDN G or GN).
Initials string
Personal initials.
LocalityName string
Locality (RDN L).
Organization string
Organization (RDN O).
OrganizationalUnit string
Organizational unit (RDN OU).
Pseudonym string
Subject pseudonym.
SerialNumber string
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
StateOrProvinceName string
State or province name (RDN ST or S).
Street string
Street address (RDN STREET).
Surname string
Personal surname (RDN SN).
Title string
Title (RDN T or TITLE).
UserId string
User ID (RDN UID).
commonName String
Common name or fully-qualified domain name (RDN CN).
country String
Country name (RDN C).
distinguishedNameQualifier String
Distinguished name qualifier(RDN DNQ).
domainComponent String
Domain component (RDN DC).
generationQualifier String
Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
givenName String
Personal given name (RDN G or GN).
initials String
Personal initials.
localityName String
Locality (RDN L).
organization String
Organization (RDN O).
organizationalUnit String
Organizational unit (RDN OU).
pseudonym String
Subject pseudonym.
serialNumber String
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
stateOrProvinceName String
State or province name (RDN ST or S).
street String
Street address (RDN STREET).
surname String
Personal surname (RDN SN).
title String
Title (RDN T or TITLE).
userId String
User ID (RDN UID).
commonName string
Common name or fully-qualified domain name (RDN CN).
country string
Country name (RDN C).
distinguishedNameQualifier string
Distinguished name qualifier(RDN DNQ).
domainComponent string
Domain component (RDN DC).
generationQualifier string
Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
givenName string
Personal given name (RDN G or GN).
initials string
Personal initials.
localityName string
Locality (RDN L).
organization string
Organization (RDN O).
organizationalUnit string
Organizational unit (RDN OU).
pseudonym string
Subject pseudonym.
serialNumber string
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
stateOrProvinceName string
State or province name (RDN ST or S).
street string
Street address (RDN STREET).
surname string
Personal surname (RDN SN).
title string
Title (RDN T or TITLE).
userId string
User ID (RDN UID).
common_name str
Common name or fully-qualified domain name (RDN CN).
country str
Country name (RDN C).
distinguished_name_qualifier str
Distinguished name qualifier(RDN DNQ).
domain_component str
Domain component (RDN DC).
generation_qualifier str
Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
given_name str
Personal given name (RDN G or GN).
initials str
Personal initials.
locality_name str
Locality (RDN L).
organization str
Organization (RDN O).
organizational_unit str
Organizational unit (RDN OU).
pseudonym str
Subject pseudonym.
serial_number str
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
state_or_province_name str
State or province name (RDN ST or S).
street str
Street address (RDN STREET).
surname str
Personal surname (RDN SN).
title str
Title (RDN T or TITLE).
user_id str
User ID (RDN UID).
commonName String
Common name or fully-qualified domain name (RDN CN).
country String
Country name (RDN C).
distinguishedNameQualifier String
Distinguished name qualifier(RDN DNQ).
domainComponent String
Domain component (RDN DC).
generationQualifier String
Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
givenName String
Personal given name (RDN G or GN).
initials String
Personal initials.
localityName String
Locality (RDN L).
organization String
Organization (RDN O).
organizationalUnit String
Organizational unit (RDN OU).
pseudonym String
Subject pseudonym.
serialNumber String
Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
stateOrProvinceName String
State or province name (RDN ST or S).
street String
Street address (RDN STREET).
surname String
Personal surname (RDN SN).
title String
Title (RDN T or TITLE).
userId String
User ID (RDN UID).

Import

Certificates can be imported using the id, e.g.

$ pulumi import oci:CertificatesManagement/certificate:Certificate test_certificate "id"
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
oci pulumi/pulumi-oci
License
Apache-2.0
Notes
This Pulumi package is based on the oci Terraform Provider.