Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. CertificatesManagement
  5. getCertificateAuthorities
Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi
pulumi/pulumi-oci

oci.CertificatesManagement.getCertificateAuthorities

Explore with Pulumi AI

oci logo
Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi
pulumi/pulumi-oci

    This data source provides the list of Certificate Authorities in Oracle Cloud Infrastructure Certificates Management service.

    Lists all certificate authorities (CAs) in the specified compartment. Optionally, you can use the parameter FilterByCertificateAuthorityIdQueryParam to limit the results to a single item that matches the specified CA.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testCertificateAuthorities = oci.CertificatesManagement.getCertificateAuthorities({
    certificateAuthorityId: testCertificateAuthority.id,
    compartmentId: compartmentId,
    issuerCertificateAuthorityId: testCertificateAuthority.id,
    name: certificateAuthorityName,
    state: certificateAuthorityState,
});

    import pulumi
import pulumi_oci as oci

test_certificate_authorities = oci.CertificatesManagement.get_certificate_authorities(certificate_authority_id=test_certificate_authority["id"],
    compartment_id=compartment_id,
    issuer_certificate_authority_id=test_certificate_authority["id"],
    name=certificate_authority_name,
    state=certificate_authority_state)

    package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v2/go/oci/certificatesmanagement"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificatesmanagement.GetCertificateAuthorities(ctx, &certificatesmanagement.GetCertificateAuthoritiesArgs{
			CertificateAuthorityId:       pulumi.StringRef(testCertificateAuthority.Id),
			CompartmentId:                pulumi.StringRef(compartmentId),
			IssuerCertificateAuthorityId: pulumi.StringRef(testCertificateAuthority.Id),
			Name:                         pulumi.StringRef(certificateAuthorityName),
			State:                        pulumi.StringRef(certificateAuthorityState),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testCertificateAuthorities = Oci.CertificatesManagement.GetCertificateAuthorities.Invoke(new()
    {
        CertificateAuthorityId = testCertificateAuthority.Id,
        CompartmentId = compartmentId,
        IssuerCertificateAuthorityId = testCertificateAuthority.Id,
        Name = certificateAuthorityName,
        State = certificateAuthorityState,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.CertificatesManagement.CertificatesManagementFunctions;
import com.pulumi.oci.CertificatesManagement.inputs.GetCertificateAuthoritiesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testCertificateAuthorities = CertificatesManagementFunctions.getCertificateAuthorities(GetCertificateAuthoritiesArgs.builder()
            .certificateAuthorityId(testCertificateAuthority.id())
            .compartmentId(compartmentId)
            .issuerCertificateAuthorityId(testCertificateAuthority.id())
            .name(certificateAuthorityName)
            .state(certificateAuthorityState)
            .build());

    }
}

    variables:
  testCertificateAuthorities:
    fn::invoke:
      function: oci:CertificatesManagement:getCertificateAuthorities
      arguments:
        certificateAuthorityId: ${testCertificateAuthority.id}
        compartmentId: ${compartmentId}
        issuerCertificateAuthorityId: ${testCertificateAuthority.id}
        name: ${certificateAuthorityName}
        state: ${certificateAuthorityState}

    Using getCertificateAuthorities

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getCertificateAuthorities(args: GetCertificateAuthoritiesArgs, opts?: InvokeOptions): Promise<GetCertificateAuthoritiesResult>
function getCertificateAuthoritiesOutput(args: GetCertificateAuthoritiesOutputArgs, opts?: InvokeOptions): Output<GetCertificateAuthoritiesResult>
    def get_certificate_authorities(certificate_authority_id: Optional[str] = None,
                                compartment_id: Optional[str] = None,
                                filters: Optional[Sequence[GetCertificateAuthoritiesFilter]] = None,
                                issuer_certificate_authority_id: Optional[str] = None,
                                name: Optional[str] = None,
                                state: Optional[str] = None,
                                opts: Optional[InvokeOptions] = None) -> GetCertificateAuthoritiesResult
def get_certificate_authorities_output(certificate_authority_id: Optional[pulumi.Input[str]] = None,
                                compartment_id: Optional[pulumi.Input[str]] = None,
                                filters: Optional[pulumi.Input[Sequence[pulumi.Input[GetCertificateAuthoritiesFilterArgs]]]] = None,
                                issuer_certificate_authority_id: Optional[pulumi.Input[str]] = None,
                                name: Optional[pulumi.Input[str]] = None,
                                state: Optional[pulumi.Input[str]] = None,
                                opts: Optional[InvokeOptions] = None) -> Output[GetCertificateAuthoritiesResult]
    func GetCertificateAuthorities(ctx *Context, args *GetCertificateAuthoritiesArgs, opts ...InvokeOption) (*GetCertificateAuthoritiesResult, error)
func GetCertificateAuthoritiesOutput(ctx *Context, args *GetCertificateAuthoritiesOutputArgs, opts ...InvokeOption) GetCertificateAuthoritiesResultOutput

    > Note: This function is named GetCertificateAuthorities in the Go SDK.

    public static class GetCertificateAuthorities 
{
    public static Task<GetCertificateAuthoritiesResult> InvokeAsync(GetCertificateAuthoritiesArgs args, InvokeOptions? opts = null)
    public static Output<GetCertificateAuthoritiesResult> Invoke(GetCertificateAuthoritiesInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetCertificateAuthoritiesResult> getCertificateAuthorities(GetCertificateAuthoritiesArgs args, InvokeOptions options)
public static Output<GetCertificateAuthoritiesResult> getCertificateAuthorities(GetCertificateAuthoritiesArgs args, InvokeOptions options)

    fn::invoke:
  function: oci:CertificatesManagement/getCertificateAuthorities:getCertificateAuthorities
  arguments:
    # arguments dictionary

    The following arguments are supported:

    CertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    CompartmentId string
    A filter that returns only resources that match the given compartment OCID.
    Filters List<GetCertificateAuthoritiesFilter>
    IssuerCertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    Name string
    A filter that returns only resources that match the specified name.
    State string
    A filter that returns only resources that match the given lifecycle state. The state value is case-insensitive.
    CertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    CompartmentId string
    A filter that returns only resources that match the given compartment OCID.
    Filters []GetCertificateAuthoritiesFilter
    IssuerCertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    Name string
    A filter that returns only resources that match the specified name.
    State string
    A filter that returns only resources that match the given lifecycle state. The state value is case-insensitive.
    certificateAuthorityId String
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    compartmentId String
    A filter that returns only resources that match the given compartment OCID.
    filters List<GetCertificateAuthoritiesFilter>
    issuerCertificateAuthorityId String
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    name String
    A filter that returns only resources that match the specified name.
    state String
    A filter that returns only resources that match the given lifecycle state. The state value is case-insensitive.
    certificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    compartmentId string
    A filter that returns only resources that match the given compartment OCID.
    filters GetCertificateAuthoritiesFilter[]
    issuerCertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    name string
    A filter that returns only resources that match the specified name.
    state string
    A filter that returns only resources that match the given lifecycle state. The state value is case-insensitive.
    certificate_authority_id str
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    compartment_id str
    A filter that returns only resources that match the given compartment OCID.
    filters Sequence[GetCertificateAuthoritiesFilter]
    issuer_certificate_authority_id str
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    name str
    A filter that returns only resources that match the specified name.
    state str
    A filter that returns only resources that match the given lifecycle state. The state value is case-insensitive.
    certificateAuthorityId String
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    compartmentId String
    A filter that returns only resources that match the given compartment OCID.
    filters List<Property Map>
    issuerCertificateAuthorityId String
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    name String
    A filter that returns only resources that match the specified name.
    state String
    A filter that returns only resources that match the given lifecycle state. The state value is case-insensitive.

    getCertificateAuthorities Result

    The following output properties are available:

    CertificateAuthorityCollections List<GetCertificateAuthoritiesCertificateAuthorityCollection>
    The list of certificate_authority_collection.
    Id string
    The provider-assigned unique ID for this managed resource.
    CertificateAuthorityId string
    The OCID of the CA.
    CompartmentId string
    The OCID of the compartment under which the CA is created.
    Filters List<GetCertificateAuthoritiesFilter>
    IssuerCertificateAuthorityId string
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    Name string
    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.
    State string
    The current lifecycle state of the certificate authority.
    CertificateAuthorityCollections []GetCertificateAuthoritiesCertificateAuthorityCollection
    The list of certificate_authority_collection.
    Id string
    The provider-assigned unique ID for this managed resource.
    CertificateAuthorityId string
    The OCID of the CA.
    CompartmentId string
    The OCID of the compartment under which the CA is created.
    Filters []GetCertificateAuthoritiesFilter
    IssuerCertificateAuthorityId string
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    Name string
    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.
    State string
    The current lifecycle state of the certificate authority.
    certificateAuthorityCollections List<GetCertificateAuthoritiesCertificateAuthorityCollection>
    The list of certificate_authority_collection.
    id String
    The provider-assigned unique ID for this managed resource.
    certificateAuthorityId String
    The OCID of the CA.
    compartmentId String
    The OCID of the compartment under which the CA is created.
    filters List<GetCertificateAuthoritiesFilter>
    issuerCertificateAuthorityId String
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    name String
    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.
    state String
    The current lifecycle state of the certificate authority.
    certificateAuthorityCollections GetCertificateAuthoritiesCertificateAuthorityCollection[]
    The list of certificate_authority_collection.
    id string
    The provider-assigned unique ID for this managed resource.
    certificateAuthorityId string
    The OCID of the CA.
    compartmentId string
    The OCID of the compartment under which the CA is created.
    filters GetCertificateAuthoritiesFilter[]
    issuerCertificateAuthorityId string
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    name string
    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.
    state string
    The current lifecycle state of the certificate authority.
    certificate_authority_collections Sequence[GetCertificateAuthoritiesCertificateAuthorityCollection]
    The list of certificate_authority_collection.
    id str
    The provider-assigned unique ID for this managed resource.
    certificate_authority_id str
    The OCID of the CA.
    compartment_id str
    The OCID of the compartment under which the CA is created.
    filters Sequence[GetCertificateAuthoritiesFilter]
    issuer_certificate_authority_id str
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    name str
    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.
    state str
    The current lifecycle state of the certificate authority.
    certificateAuthorityCollections List<Property Map>
    The list of certificate_authority_collection.
    id String
    The provider-assigned unique ID for this managed resource.
    certificateAuthorityId String
    The OCID of the CA.
    compartmentId String
    The OCID of the compartment under which the CA is created.
    filters List<Property Map>
    issuerCertificateAuthorityId String
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    name String
    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.
    state String
    The current lifecycle state of the certificate authority.

    Supporting Types

    GetCertificateAuthoritiesCertificateAuthorityCollection

    GetCertificateAuthoritiesCertificateAuthorityCollectionItem

    CertificateAuthorityConfigs List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfig>
    CertificateAuthorityRules List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityRule>
    An optional list of rules that control how the CA is used and managed.
    CertificateRevocationListDetails List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateRevocationListDetail>
    The details of the certificate revocation list (CRL).
    CompartmentId string
    A filter that returns only resources that match the given compartment OCID.
    ConfigType string
    The origin of the CA.
    CurrentVersions List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersion>
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    DefinedTags Dictionary<string, string>
    Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    Description string
    A brief description of the CA.
    FreeformTags Dictionary<string, string>
    Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    Id string
    The OCID of the CA.
    IssuerCertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    KmsKeyId string
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    LifecycleDetails string
    Additional information about the current CA lifecycle state.
    Name string
    A filter that returns only resources that match the specified name.
    SigningAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    State string
    A filter that returns only resources that match the given lifecycle state. The state value is case-insensitive.
    Subjects List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemSubject>
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    TimeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    CertificateAuthorityConfigs []GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfig
    CertificateAuthorityRules []GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityRule
    An optional list of rules that control how the CA is used and managed.
    CertificateRevocationListDetails []GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateRevocationListDetail
    The details of the certificate revocation list (CRL).
    CompartmentId string
    A filter that returns only resources that match the given compartment OCID.
    ConfigType string
    The origin of the CA.
    CurrentVersions []GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersion
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    DefinedTags map[string]string
    Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    Description string
    A brief description of the CA.
    FreeformTags map[string]string
    Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    Id string
    The OCID of the CA.
    IssuerCertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    KmsKeyId string
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    LifecycleDetails string
    Additional information about the current CA lifecycle state.
    Name string
    A filter that returns only resources that match the specified name.
    SigningAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    State string
    A filter that returns only resources that match the given lifecycle state. The state value is case-insensitive.
    Subjects []GetCertificateAuthoritiesCertificateAuthorityCollectionItemSubject
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    TimeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    certificateAuthorityConfigs List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfig>
    certificateAuthorityRules List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityRule>
    An optional list of rules that control how the CA is used and managed.
    certificateRevocationListDetails List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateRevocationListDetail>
    The details of the certificate revocation list (CRL).
    compartmentId String
    A filter that returns only resources that match the given compartment OCID.
    configType String
    The origin of the CA.
    currentVersions List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersion>
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    definedTags Map<String,String>
    Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    description String
    A brief description of the CA.
    freeformTags Map<String,String>
    Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    id String
    The OCID of the CA.
    issuerCertificateAuthorityId String
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    kmsKeyId String
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    lifecycleDetails String
    Additional information about the current CA lifecycle state.
    name String
    A filter that returns only resources that match the specified name.
    signingAlgorithm String
    The algorithm used to sign public key certificates that the CA issues.
    state String
    A filter that returns only resources that match the given lifecycle state. The state value is case-insensitive.
    subjects List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemSubject>
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    timeCreated String
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion String
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    certificateAuthorityConfigs GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfig[]
    certificateAuthorityRules GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityRule[]
    An optional list of rules that control how the CA is used and managed.
    certificateRevocationListDetails GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateRevocationListDetail[]
    The details of the certificate revocation list (CRL).
    compartmentId string
    A filter that returns only resources that match the given compartment OCID.
    configType string
    The origin of the CA.
    currentVersions GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersion[]
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    definedTags {[key: string]: string}
    Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    description string
    A brief description of the CA.
    freeformTags {[key: string]: string}
    Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    id string
    The OCID of the CA.
    issuerCertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    kmsKeyId string
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    lifecycleDetails string
    Additional information about the current CA lifecycle state.
    name string
    A filter that returns only resources that match the specified name.
    signingAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    state string
    A filter that returns only resources that match the given lifecycle state. The state value is case-insensitive.
    subjects GetCertificateAuthoritiesCertificateAuthorityCollectionItemSubject[]
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    timeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    certificate_authority_configs Sequence[GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfig]
    certificate_authority_rules Sequence[GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityRule]
    An optional list of rules that control how the CA is used and managed.
    certificate_revocation_list_details Sequence[GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateRevocationListDetail]
    The details of the certificate revocation list (CRL).
    compartment_id str
    A filter that returns only resources that match the given compartment OCID.
    config_type str
    The origin of the CA.
    current_versions Sequence[GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersion]
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    defined_tags Mapping[str, str]
    Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    description str
    A brief description of the CA.
    freeform_tags Mapping[str, str]
    Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    id str
    The OCID of the CA.
    issuer_certificate_authority_id str
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    kms_key_id str
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    lifecycle_details str
    Additional information about the current CA lifecycle state.
    name str
    A filter that returns only resources that match the specified name.
    signing_algorithm str
    The algorithm used to sign public key certificates that the CA issues.
    state str
    A filter that returns only resources that match the given lifecycle state. The state value is case-insensitive.
    subjects Sequence[GetCertificateAuthoritiesCertificateAuthorityCollectionItemSubject]
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    time_created str
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_deletion str
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    certificateAuthorityConfigs List<Property Map>
    certificateAuthorityRules List<Property Map>
    An optional list of rules that control how the CA is used and managed.
    certificateRevocationListDetails List<Property Map>
    The details of the certificate revocation list (CRL).
    compartmentId String
    A filter that returns only resources that match the given compartment OCID.
    configType String
    The origin of the CA.
    currentVersions List<Property Map>
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    definedTags Map<String>
    Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    description String
    A brief description of the CA.
    freeformTags Map<String>
    Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    id String
    The OCID of the CA.
    issuerCertificateAuthorityId String
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    kmsKeyId String
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    lifecycleDetails String
    Additional information about the current CA lifecycle state.
    name String
    A filter that returns only resources that match the specified name.
    signingAlgorithm String
    The algorithm used to sign public key certificates that the CA issues.
    state String
    A filter that returns only resources that match the given lifecycle state. The state value is case-insensitive.
    subjects List<Property Map>
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    timeCreated String
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion String
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

    GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfig

    ConfigType string
    The origin of the CA.
    IssuerCertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    SigningAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    Subjects List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfigSubject>
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    Validities List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfigValidity>
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    VersionName string
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    ConfigType string
    The origin of the CA.
    IssuerCertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    SigningAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    Subjects []GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfigSubject
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    Validities []GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfigValidity
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    VersionName string
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    configType String
    The origin of the CA.
    issuerCertificateAuthorityId String
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    signingAlgorithm String
    The algorithm used to sign public key certificates that the CA issues.
    subjects List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfigSubject>
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    validities List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfigValidity>
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    versionName String
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    configType string
    The origin of the CA.
    issuerCertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    signingAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    subjects GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfigSubject[]
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    validities GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfigValidity[]
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    versionName string
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    config_type str
    The origin of the CA.
    issuer_certificate_authority_id str
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    signing_algorithm str
    The algorithm used to sign public key certificates that the CA issues.
    subjects Sequence[GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfigSubject]
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    validities Sequence[GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfigValidity]
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    version_name str
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    configType String
    The origin of the CA.
    issuerCertificateAuthorityId String
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    signingAlgorithm String
    The algorithm used to sign public key certificates that the CA issues.
    subjects List<Property Map>
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    validities List<Property Map>
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    versionName String
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.

    GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfigSubject

    CommonName string
    Common name or fully-qualified domain name (RDN CN).
    Country string
    Country name (RDN C).
    DistinguishedNameQualifier string
    Distinguished name qualifier(RDN DNQ).
    DomainComponent string
    Domain component (RDN DC).
    GenerationQualifier string
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    GivenName string
    Personal given name (RDN G or GN).
    Initials string
    Personal initials.
    LocalityName string
    Locality (RDN L).
    Organization string
    Organization (RDN O).
    OrganizationalUnit string
    Organizational unit (RDN OU).
    Pseudonym string
    Subject pseudonym.
    SerialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    StateOrProvinceName string
    State or province name (RDN ST or S).
    Street string
    Street address (RDN STREET).
    Surname string
    Personal surname (RDN SN).
    Title string
    Title (RDN T or TITLE).
    UserId string
    User ID (RDN UID).
    CommonName string
    Common name or fully-qualified domain name (RDN CN).
    Country string
    Country name (RDN C).
    DistinguishedNameQualifier string
    Distinguished name qualifier(RDN DNQ).
    DomainComponent string
    Domain component (RDN DC).
    GenerationQualifier string
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    GivenName string
    Personal given name (RDN G or GN).
    Initials string
    Personal initials.
    LocalityName string
    Locality (RDN L).
    Organization string
    Organization (RDN O).
    OrganizationalUnit string
    Organizational unit (RDN OU).
    Pseudonym string
    Subject pseudonym.
    SerialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    StateOrProvinceName string
    State or province name (RDN ST or S).
    Street string
    Street address (RDN STREET).
    Surname string
    Personal surname (RDN SN).
    Title string
    Title (RDN T or TITLE).
    UserId string
    User ID (RDN UID).
    commonName String
    Common name or fully-qualified domain name (RDN CN).
    country String
    Country name (RDN C).
    distinguishedNameQualifier String
    Distinguished name qualifier(RDN DNQ).
    domainComponent String
    Domain component (RDN DC).
    generationQualifier String
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    givenName String
    Personal given name (RDN G or GN).
    initials String
    Personal initials.
    localityName String
    Locality (RDN L).
    organization String
    Organization (RDN O).
    organizationalUnit String
    Organizational unit (RDN OU).
    pseudonym String
    Subject pseudonym.
    serialNumber String
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stateOrProvinceName String
    State or province name (RDN ST or S).
    street String
    Street address (RDN STREET).
    surname String
    Personal surname (RDN SN).
    title String
    Title (RDN T or TITLE).
    userId String
    User ID (RDN UID).
    commonName string
    Common name or fully-qualified domain name (RDN CN).
    country string
    Country name (RDN C).
    distinguishedNameQualifier string
    Distinguished name qualifier(RDN DNQ).
    domainComponent string
    Domain component (RDN DC).
    generationQualifier string
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    givenName string
    Personal given name (RDN G or GN).
    initials string
    Personal initials.
    localityName string
    Locality (RDN L).
    organization string
    Organization (RDN O).
    organizationalUnit string
    Organizational unit (RDN OU).
    pseudonym string
    Subject pseudonym.
    serialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stateOrProvinceName string
    State or province name (RDN ST or S).
    street string
    Street address (RDN STREET).
    surname string
    Personal surname (RDN SN).
    title string
    Title (RDN T or TITLE).
    userId string
    User ID (RDN UID).
    common_name str
    Common name or fully-qualified domain name (RDN CN).
    country str
    Country name (RDN C).
    distinguished_name_qualifier str
    Distinguished name qualifier(RDN DNQ).
    domain_component str
    Domain component (RDN DC).
    generation_qualifier str
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    given_name str
    Personal given name (RDN G or GN).
    initials str
    Personal initials.
    locality_name str
    Locality (RDN L).
    organization str
    Organization (RDN O).
    organizational_unit str
    Organizational unit (RDN OU).
    pseudonym str
    Subject pseudonym.
    serial_number str
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    state_or_province_name str
    State or province name (RDN ST or S).
    street str
    Street address (RDN STREET).
    surname str
    Personal surname (RDN SN).
    title str
    Title (RDN T or TITLE).
    user_id str
    User ID (RDN UID).
    commonName String
    Common name or fully-qualified domain name (RDN CN).
    country String
    Country name (RDN C).
    distinguishedNameQualifier String
    Distinguished name qualifier(RDN DNQ).
    domainComponent String
    Domain component (RDN DC).
    generationQualifier String
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    givenName String
    Personal given name (RDN G or GN).
    initials String
    Personal initials.
    localityName String
    Locality (RDN L).
    organization String
    Organization (RDN O).
    organizationalUnit String
    Organizational unit (RDN OU).
    pseudonym String
    Subject pseudonym.
    serialNumber String
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stateOrProvinceName String
    State or province name (RDN ST or S).
    street String
    Street address (RDN STREET).
    surname String
    Personal surname (RDN SN).
    title String
    Title (RDN T or TITLE).
    userId String
    User ID (RDN UID).

    GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityConfigValidity

    TimeOfValidityNotAfter string
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfValidityNotBefore string
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfValidityNotAfter string
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfValidityNotBefore string
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotAfter String
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotBefore String
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotAfter string
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotBefore string
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_validity_not_after str
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_validity_not_before str
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotAfter String
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotBefore String
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

    GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateAuthorityRule

    CertificateAuthorityMaxValidityDuration string
    A property indicating the maximum validity duration, in days, of subordinate CA's issued by this CA. Expressed in ISO 8601 format.
    LeafCertificateMaxValidityDuration string
    A property indicating the maximum validity duration, in days, of leaf certificates issued by this CA. Expressed in ISO 8601 format.
    RuleType string
    The type of rule, whether a renewal rule regarding when to renew the CA or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid. (For internal use only) An internal issuance rule defines the number and type of certificates that the CA can issue.
    CertificateAuthorityMaxValidityDuration string
    A property indicating the maximum validity duration, in days, of subordinate CA's issued by this CA. Expressed in ISO 8601 format.
    LeafCertificateMaxValidityDuration string
    A property indicating the maximum validity duration, in days, of leaf certificates issued by this CA. Expressed in ISO 8601 format.
    RuleType string
    The type of rule, whether a renewal rule regarding when to renew the CA or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid. (For internal use only) An internal issuance rule defines the number and type of certificates that the CA can issue.
    certificateAuthorityMaxValidityDuration String
    A property indicating the maximum validity duration, in days, of subordinate CA's issued by this CA. Expressed in ISO 8601 format.
    leafCertificateMaxValidityDuration String
    A property indicating the maximum validity duration, in days, of leaf certificates issued by this CA. Expressed in ISO 8601 format.
    ruleType String
    The type of rule, whether a renewal rule regarding when to renew the CA or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid. (For internal use only) An internal issuance rule defines the number and type of certificates that the CA can issue.
    certificateAuthorityMaxValidityDuration string
    A property indicating the maximum validity duration, in days, of subordinate CA's issued by this CA. Expressed in ISO 8601 format.
    leafCertificateMaxValidityDuration string
    A property indicating the maximum validity duration, in days, of leaf certificates issued by this CA. Expressed in ISO 8601 format.
    ruleType string
    The type of rule, whether a renewal rule regarding when to renew the CA or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid. (For internal use only) An internal issuance rule defines the number and type of certificates that the CA can issue.
    certificate_authority_max_validity_duration str
    A property indicating the maximum validity duration, in days, of subordinate CA's issued by this CA. Expressed in ISO 8601 format.
    leaf_certificate_max_validity_duration str
    A property indicating the maximum validity duration, in days, of leaf certificates issued by this CA. Expressed in ISO 8601 format.
    rule_type str
    The type of rule, whether a renewal rule regarding when to renew the CA or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid. (For internal use only) An internal issuance rule defines the number and type of certificates that the CA can issue.
    certificateAuthorityMaxValidityDuration String
    A property indicating the maximum validity duration, in days, of subordinate CA's issued by this CA. Expressed in ISO 8601 format.
    leafCertificateMaxValidityDuration String
    A property indicating the maximum validity duration, in days, of leaf certificates issued by this CA. Expressed in ISO 8601 format.
    ruleType String
    The type of rule, whether a renewal rule regarding when to renew the CA or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid. (For internal use only) An internal issuance rule defines the number and type of certificates that the CA can issue.

    GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateRevocationListDetail

    CustomFormattedUrls List<string>
    Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    ObjectStorageConfigs List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateRevocationListDetailObjectStorageConfig>
    The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
    CustomFormattedUrls []string
    Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    ObjectStorageConfigs []GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateRevocationListDetailObjectStorageConfig
    The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
    customFormattedUrls List<String>
    Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    objectStorageConfigs List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateRevocationListDetailObjectStorageConfig>
    The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
    customFormattedUrls string[]
    Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    objectStorageConfigs GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateRevocationListDetailObjectStorageConfig[]
    The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
    custom_formatted_urls Sequence[str]
    Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    object_storage_configs Sequence[GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateRevocationListDetailObjectStorageConfig]
    The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
    customFormattedUrls List<String>
    Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    objectStorageConfigs List<Property Map>
    The details of the Object Storage bucket configured to store the certificate revocation list (CRL).

    GetCertificateAuthoritiesCertificateAuthorityCollectionItemCertificateRevocationListDetailObjectStorageConfig

    ObjectStorageBucketName string
    The name of the bucket where the CRL is stored.
    ObjectStorageNamespace string
    The tenancy of the bucket where the CRL is stored.
    ObjectStorageObjectNameFormat string
    The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    ObjectStorageBucketName string
    The name of the bucket where the CRL is stored.
    ObjectStorageNamespace string
    The tenancy of the bucket where the CRL is stored.
    ObjectStorageObjectNameFormat string
    The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    objectStorageBucketName String
    The name of the bucket where the CRL is stored.
    objectStorageNamespace String
    The tenancy of the bucket where the CRL is stored.
    objectStorageObjectNameFormat String
    The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    objectStorageBucketName string
    The name of the bucket where the CRL is stored.
    objectStorageNamespace string
    The tenancy of the bucket where the CRL is stored.
    objectStorageObjectNameFormat string
    The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    object_storage_bucket_name str
    The name of the bucket where the CRL is stored.
    object_storage_namespace str
    The tenancy of the bucket where the CRL is stored.
    object_storage_object_name_format str
    The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    objectStorageBucketName String
    The name of the bucket where the CRL is stored.
    objectStorageNamespace String
    The tenancy of the bucket where the CRL is stored.
    objectStorageObjectNameFormat String
    The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.

    GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersion

    CertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    IssuerCaVersionNumber string
    The version number of the issuing CA.
    RevocationStatuses List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersionRevocationStatus>
    The current revocation status of the entity.
    SerialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    Stages List<string>
    A list of rotation states for this CA version.
    TimeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    Validities List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersionValidity>
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    VersionName string
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    VersionNumber string
    The version number of the CA.
    CertificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    IssuerCaVersionNumber string
    The version number of the issuing CA.
    RevocationStatuses []GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersionRevocationStatus
    The current revocation status of the entity.
    SerialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    Stages []string
    A list of rotation states for this CA version.
    TimeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    Validities []GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersionValidity
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    VersionName string
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    VersionNumber string
    The version number of the CA.
    certificateAuthorityId String
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    issuerCaVersionNumber String
    The version number of the issuing CA.
    revocationStatuses List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersionRevocationStatus>
    The current revocation status of the entity.
    serialNumber String
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stages List<String>
    A list of rotation states for this CA version.
    timeCreated String
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion String
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    validities List<GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersionValidity>
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    versionName String
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    versionNumber String
    The version number of the CA.
    certificateAuthorityId string
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    issuerCaVersionNumber string
    The version number of the issuing CA.
    revocationStatuses GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersionRevocationStatus[]
    The current revocation status of the entity.
    serialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stages string[]
    A list of rotation states for this CA version.
    timeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    validities GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersionValidity[]
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    versionName string
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    versionNumber string
    The version number of the CA.
    certificate_authority_id str
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    issuer_ca_version_number str
    The version number of the issuing CA.
    revocation_statuses Sequence[GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersionRevocationStatus]
    The current revocation status of the entity.
    serial_number str
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stages Sequence[str]
    A list of rotation states for this CA version.
    time_created str
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_deletion str
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    validities Sequence[GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersionValidity]
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    version_name str
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    version_number str
    The version number of the CA.
    certificateAuthorityId String
    The OCID of the certificate authority (CA). If the parameter is set to null, the service lists all CAs.
    issuerCaVersionNumber String
    The version number of the issuing CA.
    revocationStatuses List<Property Map>
    The current revocation status of the entity.
    serialNumber String
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stages List<String>
    A list of rotation states for this CA version.
    timeCreated String
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion String
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    validities List<Property Map>
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    versionName String
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    versionNumber String
    The version number of the CA.

    GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersionRevocationStatus

    RevocationReason string
    The reason the certificate or certificate authority (CA) was revoked.
    TimeOfRevocation string
    The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    RevocationReason string
    The reason the certificate or certificate authority (CA) was revoked.
    TimeOfRevocation string
    The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    revocationReason String
    The reason the certificate or certificate authority (CA) was revoked.
    timeOfRevocation String
    The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    revocationReason string
    The reason the certificate or certificate authority (CA) was revoked.
    timeOfRevocation string
    The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    revocation_reason str
    The reason the certificate or certificate authority (CA) was revoked.
    time_of_revocation str
    The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    revocationReason String
    The reason the certificate or certificate authority (CA) was revoked.
    timeOfRevocation String
    The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

    GetCertificateAuthoritiesCertificateAuthorityCollectionItemCurrentVersionValidity

    TimeOfValidityNotAfter string
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfValidityNotBefore string
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfValidityNotAfter string
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfValidityNotBefore string
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotAfter String
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotBefore String
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotAfter string
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotBefore string
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_validity_not_after str
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_validity_not_before str
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotAfter String
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotBefore String
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

    GetCertificateAuthoritiesCertificateAuthorityCollectionItemSubject

    CommonName string
    Common name or fully-qualified domain name (RDN CN).
    Country string
    Country name (RDN C).
    DistinguishedNameQualifier string
    Distinguished name qualifier(RDN DNQ).
    DomainComponent string
    Domain component (RDN DC).
    GenerationQualifier string
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    GivenName string
    Personal given name (RDN G or GN).
    Initials string
    Personal initials.
    LocalityName string
    Locality (RDN L).
    Organization string
    Organization (RDN O).
    OrganizationalUnit string
    Organizational unit (RDN OU).
    Pseudonym string
    Subject pseudonym.
    SerialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    StateOrProvinceName string
    State or province name (RDN ST or S).
    Street string
    Street address (RDN STREET).
    Surname string
    Personal surname (RDN SN).
    Title string
    Title (RDN T or TITLE).
    UserId string
    User ID (RDN UID).
    CommonName string
    Common name or fully-qualified domain name (RDN CN).
    Country string
    Country name (RDN C).
    DistinguishedNameQualifier string
    Distinguished name qualifier(RDN DNQ).
    DomainComponent string
    Domain component (RDN DC).
    GenerationQualifier string
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    GivenName string
    Personal given name (RDN G or GN).
    Initials string
    Personal initials.
    LocalityName string
    Locality (RDN L).
    Organization string
    Organization (RDN O).
    OrganizationalUnit string
    Organizational unit (RDN OU).
    Pseudonym string
    Subject pseudonym.
    SerialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    StateOrProvinceName string
    State or province name (RDN ST or S).
    Street string
    Street address (RDN STREET).
    Surname string
    Personal surname (RDN SN).
    Title string
    Title (RDN T or TITLE).
    UserId string
    User ID (RDN UID).
    commonName String
    Common name or fully-qualified domain name (RDN CN).
    country String
    Country name (RDN C).
    distinguishedNameQualifier String
    Distinguished name qualifier(RDN DNQ).
    domainComponent String
    Domain component (RDN DC).
    generationQualifier String
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    givenName String
    Personal given name (RDN G or GN).
    initials String
    Personal initials.
    localityName String
    Locality (RDN L).
    organization String
    Organization (RDN O).
    organizationalUnit String
    Organizational unit (RDN OU).
    pseudonym String
    Subject pseudonym.
    serialNumber String
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stateOrProvinceName String
    State or province name (RDN ST or S).
    street String
    Street address (RDN STREET).
    surname String
    Personal surname (RDN SN).
    title String
    Title (RDN T or TITLE).
    userId String
    User ID (RDN UID).
    commonName string
    Common name or fully-qualified domain name (RDN CN).
    country string
    Country name (RDN C).
    distinguishedNameQualifier string
    Distinguished name qualifier(RDN DNQ).
    domainComponent string
    Domain component (RDN DC).
    generationQualifier string
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    givenName string
    Personal given name (RDN G or GN).
    initials string
    Personal initials.
    localityName string
    Locality (RDN L).
    organization string
    Organization (RDN O).
    organizationalUnit string
    Organizational unit (RDN OU).
    pseudonym string
    Subject pseudonym.
    serialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stateOrProvinceName string
    State or province name (RDN ST or S).
    street string
    Street address (RDN STREET).
    surname string
    Personal surname (RDN SN).
    title string
    Title (RDN T or TITLE).
    userId string
    User ID (RDN UID).
    common_name str
    Common name or fully-qualified domain name (RDN CN).
    country str
    Country name (RDN C).
    distinguished_name_qualifier str
    Distinguished name qualifier(RDN DNQ).
    domain_component str
    Domain component (RDN DC).
    generation_qualifier str
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    given_name str
    Personal given name (RDN G or GN).
    initials str
    Personal initials.
    locality_name str
    Locality (RDN L).
    organization str
    Organization (RDN O).
    organizational_unit str
    Organizational unit (RDN OU).
    pseudonym str
    Subject pseudonym.
    serial_number str
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    state_or_province_name str
    State or province name (RDN ST or S).
    street str
    Street address (RDN STREET).
    surname str
    Personal surname (RDN SN).
    title str
    Title (RDN T or TITLE).
    user_id str
    User ID (RDN UID).
    commonName String
    Common name or fully-qualified domain name (RDN CN).
    country String
    Country name (RDN C).
    distinguishedNameQualifier String
    Distinguished name qualifier(RDN DNQ).
    domainComponent String
    Domain component (RDN DC).
    generationQualifier String
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    givenName String
    Personal given name (RDN G or GN).
    initials String
    Personal initials.
    localityName String
    Locality (RDN L).
    organization String
    Organization (RDN O).
    organizationalUnit String
    Organizational unit (RDN OU).
    pseudonym String
    Subject pseudonym.
    serialNumber String
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stateOrProvinceName String
    State or province name (RDN ST or S).
    street String
    Street address (RDN STREET).
    surname String
    Personal surname (RDN SN).
    title String
    Title (RDN T or TITLE).
    userId String
    User ID (RDN UID).

    GetCertificateAuthoritiesFilter

    Name string
    A filter that returns only resources that match the specified name.
    Values List<string>
    Regex bool
    Name string
    A filter that returns only resources that match the specified name.
    Values []string
    Regex bool
    name String
    A filter that returns only resources that match the specified name.
    values List<String>
    regex Boolean
    name string
    A filter that returns only resources that match the specified name.
    values string[]
    regex boolean
    name str
    A filter that returns only resources that match the specified name.
    values Sequence[str]
    regex bool
    name String
    A filter that returns only resources that match the specified name.
    values List<String>
    regex Boolean

    Package Details

    Repository
    oci pulumi/pulumi-oci
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the oci Terraform Provider.
    oci logo
    Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi
    pulumi/pulumi-oci