Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi
oci.Waas.getCertificate
Explore with Pulumi AI
This data source provides details about a specific Certificate resource in Oracle Cloud Infrastructure Web Application Acceleration and Security service.
Gets the details of an SSL certificate.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";
const testCertificate = oci.Waas.getCertificate({
    certificateId: testCertificateOciWaasCertificate.id,
});
import pulumi
import pulumi_oci as oci
test_certificate = oci.Waas.get_certificate(certificate_id=test_certificate_oci_waas_certificate["id"])
package main
import (
	"github.com/pulumi/pulumi-oci/sdk/v2/go/oci/waas"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := waas.GetCertificate(ctx, &waas.GetCertificateArgs{
			CertificateId: testCertificateOciWaasCertificate.Id,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;
return await Deployment.RunAsync(() => 
{
    var testCertificate = Oci.Waas.GetCertificate.Invoke(new()
    {
        CertificateId = testCertificateOciWaasCertificate.Id,
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Waas.WaasFunctions;
import com.pulumi.oci.Waas.inputs.GetCertificateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var testCertificate = WaasFunctions.getCertificate(GetCertificateArgs.builder()
            .certificateId(testCertificateOciWaasCertificate.id())
            .build());
    }
}
variables:
  testCertificate:
    fn::invoke:
      function: oci:Waas:getCertificate
      arguments:
        certificateId: ${testCertificateOciWaasCertificate.id}
Using getCertificate
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getCertificate(args: GetCertificateArgs, opts?: InvokeOptions): Promise<GetCertificateResult>
function getCertificateOutput(args: GetCertificateOutputArgs, opts?: InvokeOptions): Output<GetCertificateResult>def get_certificate(certificate_id: Optional[str] = None,
                    opts: Optional[InvokeOptions] = None) -> GetCertificateResult
def get_certificate_output(certificate_id: Optional[pulumi.Input[str]] = None,
                    opts: Optional[InvokeOptions] = None) -> Output[GetCertificateResult]func LookupCertificate(ctx *Context, args *LookupCertificateArgs, opts ...InvokeOption) (*LookupCertificateResult, error)
func LookupCertificateOutput(ctx *Context, args *LookupCertificateOutputArgs, opts ...InvokeOption) LookupCertificateResultOutput> Note: This function is named LookupCertificate in the Go SDK.
public static class GetCertificate 
{
    public static Task<GetCertificateResult> InvokeAsync(GetCertificateArgs args, InvokeOptions? opts = null)
    public static Output<GetCertificateResult> Invoke(GetCertificateInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetCertificateResult> getCertificate(GetCertificateArgs args, InvokeOptions options)
public static Output<GetCertificateResult> getCertificate(GetCertificateArgs args, InvokeOptions options)
fn::invoke:
  function: oci:Waas/getCertificate:getCertificate
  arguments:
    # arguments dictionaryThe following arguments are supported:
- CertificateId string
- The OCID of the SSL certificate used in the WAAS policy. This number is generated when the certificate is added to the policy.
- CertificateId string
- The OCID of the SSL certificate used in the WAAS policy. This number is generated when the certificate is added to the policy.
- certificateId String
- The OCID of the SSL certificate used in the WAAS policy. This number is generated when the certificate is added to the policy.
- certificateId string
- The OCID of the SSL certificate used in the WAAS policy. This number is generated when the certificate is added to the policy.
- certificate_id str
- The OCID of the SSL certificate used in the WAAS policy. This number is generated when the certificate is added to the policy.
- certificateId String
- The OCID of the SSL certificate used in the WAAS policy. This number is generated when the certificate is added to the policy.
getCertificate Result
The following output properties are available:
- CertificateData string
- The data of the SSL certificate.
- CertificateId string
- CompartmentId string
- The OCID of the SSL certificate's compartment.
- Dictionary<string, string>
- Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- DisplayName string
- The user-friendly name of the SSL certificate.
- Extensions
List<GetCertificate Extension> 
- Additional attributes associated with users or public keys for managing relationships between Certificate Authorities.
- Dictionary<string, string>
- Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- Id string
- The OCID of the SSL certificate.
- IsTrust boolVerification Disabled 
- This indicates whether trust verification was disabled during the creation of SSL certificate. If trueSSL certificate trust verification was disabled and this SSL certificate is most likely self-signed.
- IssuedBy string
- IssuerNames List<GetCertificate Issuer Name> 
- The issuer of the certificate.
- PrivateKey stringData 
- PublicKey List<GetInfos Certificate Public Key Info> 
- Information about the public key and the algorithm used by the public key.
- SerialNumber string
- A unique, positive integer assigned by the Certificate Authority (CA). The issuer name and serial number identify a unique certificate.
- SignatureAlgorithm string
- The identifier for the cryptographic algorithm used by the Certificate Authority (CA) to sign this certificate.
- State string
- The current lifecycle state of the SSL certificate.
- SubjectNames List<GetCertificate Subject Name> 
- The entity to be secured by the certificate.
- TimeCreated string
- The date and time the certificate was created, expressed in RFC 3339 timestamp format.
- TimeNot stringValid After 
- The date and time the certificate will expire, expressed in RFC 3339 timestamp format.
- TimeNot stringValid Before 
- The date and time the certificate will become valid, expressed in RFC 3339 timestamp format.
- Version int
- The version of the encoded certificate.
- CertificateData string
- The data of the SSL certificate.
- CertificateId string
- CompartmentId string
- The OCID of the SSL certificate's compartment.
- map[string]string
- Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- DisplayName string
- The user-friendly name of the SSL certificate.
- Extensions
[]GetCertificate Extension 
- Additional attributes associated with users or public keys for managing relationships between Certificate Authorities.
- map[string]string
- Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- Id string
- The OCID of the SSL certificate.
- IsTrust boolVerification Disabled 
- This indicates whether trust verification was disabled during the creation of SSL certificate. If trueSSL certificate trust verification was disabled and this SSL certificate is most likely self-signed.
- IssuedBy string
- IssuerNames []GetCertificate Issuer Name 
- The issuer of the certificate.
- PrivateKey stringData 
- PublicKey []GetInfos Certificate Public Key Info 
- Information about the public key and the algorithm used by the public key.
- SerialNumber string
- A unique, positive integer assigned by the Certificate Authority (CA). The issuer name and serial number identify a unique certificate.
- SignatureAlgorithm string
- The identifier for the cryptographic algorithm used by the Certificate Authority (CA) to sign this certificate.
- State string
- The current lifecycle state of the SSL certificate.
- SubjectNames []GetCertificate Subject Name 
- The entity to be secured by the certificate.
- TimeCreated string
- The date and time the certificate was created, expressed in RFC 3339 timestamp format.
- TimeNot stringValid After 
- The date and time the certificate will expire, expressed in RFC 3339 timestamp format.
- TimeNot stringValid Before 
- The date and time the certificate will become valid, expressed in RFC 3339 timestamp format.
- Version int
- The version of the encoded certificate.
- certificateData String
- The data of the SSL certificate.
- certificateId String
- compartmentId String
- The OCID of the SSL certificate's compartment.
- Map<String,String>
- Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- displayName String
- The user-friendly name of the SSL certificate.
- extensions
List<GetCertificate Extension> 
- Additional attributes associated with users or public keys for managing relationships between Certificate Authorities.
- Map<String,String>
- Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- id String
- The OCID of the SSL certificate.
- isTrust BooleanVerification Disabled 
- This indicates whether trust verification was disabled during the creation of SSL certificate. If trueSSL certificate trust verification was disabled and this SSL certificate is most likely self-signed.
- issuedBy String
- issuerNames List<GetCertificate Issuer Name> 
- The issuer of the certificate.
- privateKey StringData 
- publicKey List<GetInfos Certificate Public Key Info> 
- Information about the public key and the algorithm used by the public key.
- serialNumber String
- A unique, positive integer assigned by the Certificate Authority (CA). The issuer name and serial number identify a unique certificate.
- signatureAlgorithm String
- The identifier for the cryptographic algorithm used by the Certificate Authority (CA) to sign this certificate.
- state String
- The current lifecycle state of the SSL certificate.
- subjectNames List<GetCertificate Subject Name> 
- The entity to be secured by the certificate.
- timeCreated String
- The date and time the certificate was created, expressed in RFC 3339 timestamp format.
- timeNot StringValid After 
- The date and time the certificate will expire, expressed in RFC 3339 timestamp format.
- timeNot StringValid Before 
- The date and time the certificate will become valid, expressed in RFC 3339 timestamp format.
- version Integer
- The version of the encoded certificate.
- certificateData string
- The data of the SSL certificate.
- certificateId string
- compartmentId string
- The OCID of the SSL certificate's compartment.
- {[key: string]: string}
- Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- displayName string
- The user-friendly name of the SSL certificate.
- extensions
GetCertificate Extension[] 
- Additional attributes associated with users or public keys for managing relationships between Certificate Authorities.
- {[key: string]: string}
- Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- id string
- The OCID of the SSL certificate.
- isTrust booleanVerification Disabled 
- This indicates whether trust verification was disabled during the creation of SSL certificate. If trueSSL certificate trust verification was disabled and this SSL certificate is most likely self-signed.
- issuedBy string
- issuerNames GetCertificate Issuer Name[] 
- The issuer of the certificate.
- privateKey stringData 
- publicKey GetInfos Certificate Public Key Info[] 
- Information about the public key and the algorithm used by the public key.
- serialNumber string
- A unique, positive integer assigned by the Certificate Authority (CA). The issuer name and serial number identify a unique certificate.
- signatureAlgorithm string
- The identifier for the cryptographic algorithm used by the Certificate Authority (CA) to sign this certificate.
- state string
- The current lifecycle state of the SSL certificate.
- subjectNames GetCertificate Subject Name[] 
- The entity to be secured by the certificate.
- timeCreated string
- The date and time the certificate was created, expressed in RFC 3339 timestamp format.
- timeNot stringValid After 
- The date and time the certificate will expire, expressed in RFC 3339 timestamp format.
- timeNot stringValid Before 
- The date and time the certificate will become valid, expressed in RFC 3339 timestamp format.
- version number
- The version of the encoded certificate.
- certificate_data str
- The data of the SSL certificate.
- certificate_id str
- compartment_id str
- The OCID of the SSL certificate's compartment.
- Mapping[str, str]
- Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- display_name str
- The user-friendly name of the SSL certificate.
- extensions
Sequence[GetCertificate Extension] 
- Additional attributes associated with users or public keys for managing relationships between Certificate Authorities.
- Mapping[str, str]
- Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- id str
- The OCID of the SSL certificate.
- is_trust_ boolverification_ disabled 
- This indicates whether trust verification was disabled during the creation of SSL certificate. If trueSSL certificate trust verification was disabled and this SSL certificate is most likely self-signed.
- issued_by str
- issuer_names Sequence[GetCertificate Issuer Name] 
- The issuer of the certificate.
- private_key_ strdata 
- public_key_ Sequence[Getinfos Certificate Public Key Info] 
- Information about the public key and the algorithm used by the public key.
- serial_number str
- A unique, positive integer assigned by the Certificate Authority (CA). The issuer name and serial number identify a unique certificate.
- signature_algorithm str
- The identifier for the cryptographic algorithm used by the Certificate Authority (CA) to sign this certificate.
- state str
- The current lifecycle state of the SSL certificate.
- subject_names Sequence[GetCertificate Subject Name] 
- The entity to be secured by the certificate.
- time_created str
- The date and time the certificate was created, expressed in RFC 3339 timestamp format.
- time_not_ strvalid_ after 
- The date and time the certificate will expire, expressed in RFC 3339 timestamp format.
- time_not_ strvalid_ before 
- The date and time the certificate will become valid, expressed in RFC 3339 timestamp format.
- version int
- The version of the encoded certificate.
- certificateData String
- The data of the SSL certificate.
- certificateId String
- compartmentId String
- The OCID of the SSL certificate's compartment.
- Map<String>
- Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- displayName String
- The user-friendly name of the SSL certificate.
- extensions List<Property Map>
- Additional attributes associated with users or public keys for managing relationships between Certificate Authorities.
- Map<String>
- Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- id String
- The OCID of the SSL certificate.
- isTrust BooleanVerification Disabled 
- This indicates whether trust verification was disabled during the creation of SSL certificate. If trueSSL certificate trust verification was disabled and this SSL certificate is most likely self-signed.
- issuedBy String
- issuerNames List<Property Map>
- The issuer of the certificate.
- privateKey StringData 
- publicKey List<Property Map>Infos 
- Information about the public key and the algorithm used by the public key.
- serialNumber String
- A unique, positive integer assigned by the Certificate Authority (CA). The issuer name and serial number identify a unique certificate.
- signatureAlgorithm String
- The identifier for the cryptographic algorithm used by the Certificate Authority (CA) to sign this certificate.
- state String
- The current lifecycle state of the SSL certificate.
- subjectNames List<Property Map>
- The entity to be secured by the certificate.
- timeCreated String
- The date and time the certificate was created, expressed in RFC 3339 timestamp format.
- timeNot StringValid After 
- The date and time the certificate will expire, expressed in RFC 3339 timestamp format.
- timeNot StringValid Before 
- The date and time the certificate will become valid, expressed in RFC 3339 timestamp format.
- version Number
- The version of the encoded certificate.
Supporting Types
GetCertificateExtension  
- IsCritical bool
- The critical flag of the extension. Critical extensions must be processed, non-critical extensions can be ignored.
- Name string
- The certificate extension name.
- Value string
- The certificate extension value.
- IsCritical bool
- The critical flag of the extension. Critical extensions must be processed, non-critical extensions can be ignored.
- Name string
- The certificate extension name.
- Value string
- The certificate extension value.
- isCritical Boolean
- The critical flag of the extension. Critical extensions must be processed, non-critical extensions can be ignored.
- name String
- The certificate extension name.
- value String
- The certificate extension value.
- isCritical boolean
- The critical flag of the extension. Critical extensions must be processed, non-critical extensions can be ignored.
- name string
- The certificate extension name.
- value string
- The certificate extension value.
- is_critical bool
- The critical flag of the extension. Critical extensions must be processed, non-critical extensions can be ignored.
- name str
- The certificate extension name.
- value str
- The certificate extension value.
- isCritical Boolean
- The critical flag of the extension. Critical extensions must be processed, non-critical extensions can be ignored.
- name String
- The certificate extension name.
- value String
- The certificate extension value.
GetCertificateIssuerName   
- CommonName string
- The fully qualified domain name used for DNS lookups of the server.
- Country string
- ISO 3166-1 alpha-2 code of the country where the organization is located. For a list of codes, see ISO's website.
- EmailAddress string
- The email address of the server's administrator.
- Locality string
- The city in which the organization is located.
- Organization string
- The organization name.
- OrganizationalUnit string
- The field to differentiate between divisions within an organization.
- StateProvince string
- The province where the organization is located.
- CommonName string
- The fully qualified domain name used for DNS lookups of the server.
- Country string
- ISO 3166-1 alpha-2 code of the country where the organization is located. For a list of codes, see ISO's website.
- EmailAddress string
- The email address of the server's administrator.
- Locality string
- The city in which the organization is located.
- Organization string
- The organization name.
- OrganizationalUnit string
- The field to differentiate between divisions within an organization.
- StateProvince string
- The province where the organization is located.
- commonName String
- The fully qualified domain name used for DNS lookups of the server.
- country String
- ISO 3166-1 alpha-2 code of the country where the organization is located. For a list of codes, see ISO's website.
- emailAddress String
- The email address of the server's administrator.
- locality String
- The city in which the organization is located.
- organization String
- The organization name.
- organizationalUnit String
- The field to differentiate between divisions within an organization.
- stateProvince String
- The province where the organization is located.
- commonName string
- The fully qualified domain name used for DNS lookups of the server.
- country string
- ISO 3166-1 alpha-2 code of the country where the organization is located. For a list of codes, see ISO's website.
- emailAddress string
- The email address of the server's administrator.
- locality string
- The city in which the organization is located.
- organization string
- The organization name.
- organizationalUnit string
- The field to differentiate between divisions within an organization.
- stateProvince string
- The province where the organization is located.
- common_name str
- The fully qualified domain name used for DNS lookups of the server.
- country str
- ISO 3166-1 alpha-2 code of the country where the organization is located. For a list of codes, see ISO's website.
- email_address str
- The email address of the server's administrator.
- locality str
- The city in which the organization is located.
- organization str
- The organization name.
- organizational_unit str
- The field to differentiate between divisions within an organization.
- state_province str
- The province where the organization is located.
- commonName String
- The fully qualified domain name used for DNS lookups of the server.
- country String
- ISO 3166-1 alpha-2 code of the country where the organization is located. For a list of codes, see ISO's website.
- emailAddress String
- The email address of the server's administrator.
- locality String
- The city in which the organization is located.
- organization String
- The organization name.
- organizationalUnit String
- The field to differentiate between divisions within an organization.
- stateProvince String
- The province where the organization is located.
GetCertificatePublicKeyInfo    
GetCertificateSubjectName   
- CommonName string
- The fully qualified domain name used for DNS lookups of the server.
- Country string
- ISO 3166-1 alpha-2 code of the country where the organization is located. For a list of codes, see ISO's website.
- EmailAddress string
- The email address of the server's administrator.
- Locality string
- The city in which the organization is located.
- Organization string
- The organization name.
- OrganizationalUnit string
- The field to differentiate between divisions within an organization.
- StateProvince string
- The province where the organization is located.
- CommonName string
- The fully qualified domain name used for DNS lookups of the server.
- Country string
- ISO 3166-1 alpha-2 code of the country where the organization is located. For a list of codes, see ISO's website.
- EmailAddress string
- The email address of the server's administrator.
- Locality string
- The city in which the organization is located.
- Organization string
- The organization name.
- OrganizationalUnit string
- The field to differentiate between divisions within an organization.
- StateProvince string
- The province where the organization is located.
- commonName String
- The fully qualified domain name used for DNS lookups of the server.
- country String
- ISO 3166-1 alpha-2 code of the country where the organization is located. For a list of codes, see ISO's website.
- emailAddress String
- The email address of the server's administrator.
- locality String
- The city in which the organization is located.
- organization String
- The organization name.
- organizationalUnit String
- The field to differentiate between divisions within an organization.
- stateProvince String
- The province where the organization is located.
- commonName string
- The fully qualified domain name used for DNS lookups of the server.
- country string
- ISO 3166-1 alpha-2 code of the country where the organization is located. For a list of codes, see ISO's website.
- emailAddress string
- The email address of the server's administrator.
- locality string
- The city in which the organization is located.
- organization string
- The organization name.
- organizationalUnit string
- The field to differentiate between divisions within an organization.
- stateProvince string
- The province where the organization is located.
- common_name str
- The fully qualified domain name used for DNS lookups of the server.
- country str
- ISO 3166-1 alpha-2 code of the country where the organization is located. For a list of codes, see ISO's website.
- email_address str
- The email address of the server's administrator.
- locality str
- The city in which the organization is located.
- organization str
- The organization name.
- organizational_unit str
- The field to differentiate between divisions within an organization.
- state_province str
- The province where the organization is located.
- commonName String
- The fully qualified domain name used for DNS lookups of the server.
- country String
- ISO 3166-1 alpha-2 code of the country where the organization is located. For a list of codes, see ISO's website.
- emailAddress String
- The email address of the server's administrator.
- locality String
- The city in which the organization is located.
- organization String
- The organization name.
- organizationalUnit String
- The field to differentiate between divisions within an organization.
- stateProvince String
- The province where the organization is located.
Package Details
- Repository
- oci pulumi/pulumi-oci
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the ociTerraform Provider.