1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. getClientCertificate
Viewing docs for Cloudflare v6.14.0
published on Thursday, Apr 2, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.getClientCertificate

cloudflare logo
Viewing docs for Cloudflare v6.14.0
published on Thursday, Apr 2, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleClientCertificate = cloudflare.getClientCertificate({
    zoneId: "023e105f4ecef8ad9ca31a8372d0c353",
    clientCertificateId: "023e105f4ecef8ad9ca31a8372d0c353",
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_client_certificate = cloudflare.get_client_certificate(zone_id="023e105f4ecef8ad9ca31a8372d0c353",
    client_certificate_id="023e105f4ecef8ad9ca31a8372d0c353")

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.LookupClientCertificate(ctx, &cloudflare.LookupClientCertificateArgs{
			ZoneId:              "023e105f4ecef8ad9ca31a8372d0c353",
			ClientCertificateId: pulumi.StringRef("023e105f4ecef8ad9ca31a8372d0c353"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleClientCertificate = Cloudflare.GetClientCertificate.Invoke(new()
    {
        ZoneId = "023e105f4ecef8ad9ca31a8372d0c353",
        ClientCertificateId = "023e105f4ecef8ad9ca31a8372d0c353",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.cloudflare.inputs.GetClientCertificateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleClientCertificate = CloudflareFunctions.getClientCertificate(GetClientCertificateArgs.builder()
            .zoneId("023e105f4ecef8ad9ca31a8372d0c353")
            .clientCertificateId("023e105f4ecef8ad9ca31a8372d0c353")
            .build());

    }
}

    variables:
  exampleClientCertificate:
    fn::invoke:
      function: cloudflare:getClientCertificate
      arguments:
        zoneId: 023e105f4ecef8ad9ca31a8372d0c353
        clientCertificateId: 023e105f4ecef8ad9ca31a8372d0c353

    Using getClientCertificate

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getClientCertificate(args: GetClientCertificateArgs, opts?: InvokeOptions): Promise<GetClientCertificateResult>
function getClientCertificateOutput(args: GetClientCertificateOutputArgs, opts?: InvokeOptions): Output<GetClientCertificateResult>
    def get_client_certificate(client_certificate_id: Optional[str] = None,
                           filter: Optional[GetClientCertificateFilter] = None,
                           zone_id: Optional[str] = None,
                           opts: Optional[InvokeOptions] = None) -> GetClientCertificateResult
def get_client_certificate_output(client_certificate_id: Optional[pulumi.Input[str]] = None,
                           filter: Optional[pulumi.Input[GetClientCertificateFilterArgs]] = None,
                           zone_id: Optional[pulumi.Input[str]] = None,
                           opts: Optional[InvokeOptions] = None) -> Output[GetClientCertificateResult]
    func LookupClientCertificate(ctx *Context, args *LookupClientCertificateArgs, opts ...InvokeOption) (*LookupClientCertificateResult, error)
func LookupClientCertificateOutput(ctx *Context, args *LookupClientCertificateOutputArgs, opts ...InvokeOption) LookupClientCertificateResultOutput

    > Note: This function is named LookupClientCertificate in the Go SDK.

    public static class GetClientCertificate 
{
    public static Task<GetClientCertificateResult> InvokeAsync(GetClientCertificateArgs args, InvokeOptions? opts = null)
    public static Output<GetClientCertificateResult> Invoke(GetClientCertificateInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetClientCertificateResult> getClientCertificate(GetClientCertificateArgs args, InvokeOptions options)
public static Output<GetClientCertificateResult> getClientCertificate(GetClientCertificateArgs args, InvokeOptions options)

    fn::invoke:
  function: cloudflare:index/getClientCertificate:getClientCertificate
  arguments:
    # arguments dictionary

    The following arguments are supported:

    zoneId String
    Identifier.
    clientCertificateId String
    Identifier.
    filter Property Map

    getClientCertificate Result

    The following output properties are available:

    Certificate string
    The Client Certificate PEM
    CertificateAuthority GetClientCertificateCertificateAuthority
    Certificate Authority used to issue the Client Certificate
    CommonName string
    Common Name of the Client Certificate
    Country string
    Country, provided by the CSR
    Csr string
    The Certificate Signing Request (CSR). Must be newline-encoded.
    ExpiresOn string
    Date that the Client Certificate expires
    FingerprintSha256 string
    Unique identifier of the Client Certificate
    Id string
    Identifier.
    IssuedOn string
    Date that the Client Certificate was issued by the Certificate Authority
    Location string
    Location, provided by the CSR
    Organization string
    Organization, provided by the CSR
    OrganizationalUnit string
    Organizational Unit, provided by the CSR
    SerialNumber string
    The serial number on the created Client Certificate.
    Signature string
    The type of hash used for the Client Certificate..
    Ski string
    Subject Key Identifier
    State string
    State, provided by the CSR
    Status string
    Client Certificates may be active or revoked, and the pendingreactivation or pendingrevocation represent in-progress asynchronous transitions Available values: "active", "pendingreactivation", "pendingrevocation", "revoked".
    ValidityDays int
    The number of days the Client Certificate will be valid after the issuedOn date
    ZoneId string
    Identifier.
    ClientCertificateId string
    Identifier.
    Filter GetClientCertificateFilter
    Certificate string
    The Client Certificate PEM
    CertificateAuthority GetClientCertificateCertificateAuthority
    Certificate Authority used to issue the Client Certificate
    CommonName string
    Common Name of the Client Certificate
    Country string
    Country, provided by the CSR
    Csr string
    The Certificate Signing Request (CSR). Must be newline-encoded.
    ExpiresOn string
    Date that the Client Certificate expires
    FingerprintSha256 string
    Unique identifier of the Client Certificate
    Id string
    Identifier.
    IssuedOn string
    Date that the Client Certificate was issued by the Certificate Authority
    Location string
    Location, provided by the CSR
    Organization string
    Organization, provided by the CSR
    OrganizationalUnit string
    Organizational Unit, provided by the CSR
    SerialNumber string
    The serial number on the created Client Certificate.
    Signature string
    The type of hash used for the Client Certificate..
    Ski string
    Subject Key Identifier
    State string
    State, provided by the CSR
    Status string
    Client Certificates may be active or revoked, and the pendingreactivation or pendingrevocation represent in-progress asynchronous transitions Available values: "active", "pendingreactivation", "pendingrevocation", "revoked".
    ValidityDays int
    The number of days the Client Certificate will be valid after the issuedOn date
    ZoneId string
    Identifier.
    ClientCertificateId string
    Identifier.
    Filter GetClientCertificateFilter
    certificate String
    The Client Certificate PEM
    certificateAuthority GetClientCertificateCertificateAuthority
    Certificate Authority used to issue the Client Certificate
    commonName String
    Common Name of the Client Certificate
    country String
    Country, provided by the CSR
    csr String
    The Certificate Signing Request (CSR). Must be newline-encoded.
    expiresOn String
    Date that the Client Certificate expires
    fingerprintSha256 String
    Unique identifier of the Client Certificate
    id String
    Identifier.
    issuedOn String
    Date that the Client Certificate was issued by the Certificate Authority
    location String
    Location, provided by the CSR
    organization String
    Organization, provided by the CSR
    organizationalUnit String
    Organizational Unit, provided by the CSR
    serialNumber String
    The serial number on the created Client Certificate.
    signature String
    The type of hash used for the Client Certificate..
    ski String
    Subject Key Identifier
    state String
    State, provided by the CSR
    status String
    Client Certificates may be active or revoked, and the pendingreactivation or pendingrevocation represent in-progress asynchronous transitions Available values: "active", "pendingreactivation", "pendingrevocation", "revoked".
    validityDays Integer
    The number of days the Client Certificate will be valid after the issuedOn date
    zoneId String
    Identifier.
    clientCertificateId String
    Identifier.
    filter GetClientCertificateFilter
    certificate string
    The Client Certificate PEM
    certificateAuthority GetClientCertificateCertificateAuthority
    Certificate Authority used to issue the Client Certificate
    commonName string
    Common Name of the Client Certificate
    country string
    Country, provided by the CSR
    csr string
    The Certificate Signing Request (CSR). Must be newline-encoded.
    expiresOn string
    Date that the Client Certificate expires
    fingerprintSha256 string
    Unique identifier of the Client Certificate
    id string
    Identifier.
    issuedOn string
    Date that the Client Certificate was issued by the Certificate Authority
    location string
    Location, provided by the CSR
    organization string
    Organization, provided by the CSR
    organizationalUnit string
    Organizational Unit, provided by the CSR
    serialNumber string
    The serial number on the created Client Certificate.
    signature string
    The type of hash used for the Client Certificate..
    ski string
    Subject Key Identifier
    state string
    State, provided by the CSR
    status string
    Client Certificates may be active or revoked, and the pendingreactivation or pendingrevocation represent in-progress asynchronous transitions Available values: "active", "pendingreactivation", "pendingrevocation", "revoked".
    validityDays number
    The number of days the Client Certificate will be valid after the issuedOn date
    zoneId string
    Identifier.
    clientCertificateId string
    Identifier.
    filter GetClientCertificateFilter
    certificate str
    The Client Certificate PEM
    certificate_authority GetClientCertificateCertificateAuthority
    Certificate Authority used to issue the Client Certificate
    common_name str
    Common Name of the Client Certificate
    country str
    Country, provided by the CSR
    csr str
    The Certificate Signing Request (CSR). Must be newline-encoded.
    expires_on str
    Date that the Client Certificate expires
    fingerprint_sha256 str
    Unique identifier of the Client Certificate
    id str
    Identifier.
    issued_on str
    Date that the Client Certificate was issued by the Certificate Authority
    location str
    Location, provided by the CSR
    organization str
    Organization, provided by the CSR
    organizational_unit str
    Organizational Unit, provided by the CSR
    serial_number str
    The serial number on the created Client Certificate.
    signature str
    The type of hash used for the Client Certificate..
    ski str
    Subject Key Identifier
    state str
    State, provided by the CSR
    status str
    Client Certificates may be active or revoked, and the pendingreactivation or pendingrevocation represent in-progress asynchronous transitions Available values: "active", "pendingreactivation", "pendingrevocation", "revoked".
    validity_days int
    The number of days the Client Certificate will be valid after the issuedOn date
    zone_id str
    Identifier.
    client_certificate_id str
    Identifier.
    filter GetClientCertificateFilter
    certificate String
    The Client Certificate PEM
    certificateAuthority Property Map
    Certificate Authority used to issue the Client Certificate
    commonName String
    Common Name of the Client Certificate
    country String
    Country, provided by the CSR
    csr String
    The Certificate Signing Request (CSR). Must be newline-encoded.
    expiresOn String
    Date that the Client Certificate expires
    fingerprintSha256 String
    Unique identifier of the Client Certificate
    id String
    Identifier.
    issuedOn String
    Date that the Client Certificate was issued by the Certificate Authority
    location String
    Location, provided by the CSR
    organization String
    Organization, provided by the CSR
    organizationalUnit String
    Organizational Unit, provided by the CSR
    serialNumber String
    The serial number on the created Client Certificate.
    signature String
    The type of hash used for the Client Certificate..
    ski String
    Subject Key Identifier
    state String
    State, provided by the CSR
    status String
    Client Certificates may be active or revoked, and the pendingreactivation or pendingrevocation represent in-progress asynchronous transitions Available values: "active", "pendingreactivation", "pendingrevocation", "revoked".
    validityDays Number
    The number of days the Client Certificate will be valid after the issuedOn date
    zoneId String
    Identifier.
    clientCertificateId String
    Identifier.
    filter Property Map

    Supporting Types

    GetClientCertificateCertificateAuthority

    Id string
    Name string
    Id string
    Name string
    id String
    name String
    id string
    name string
    id str
    name str
    id String
    name String

    GetClientCertificateFilter

    Limit int
    Limit to the number of records returned.
    Offset int
    Offset the results
    Status string
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    Limit int
    Limit to the number of records returned.
    Offset int
    Offset the results
    Status string
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    limit Integer
    Limit to the number of records returned.
    offset Integer
    Offset the results
    status String
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    limit number
    Limit to the number of records returned.
    offset number
    Offset the results
    status string
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    limit int
    Limit to the number of records returned.
    offset int
    Offset the results
    status str
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    limit Number
    Limit to the number of records returned.
    offset Number
    Offset the results
    status String
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Viewing docs for Cloudflare v6.14.0
    published on Thursday, Apr 2, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare
      Try Pulumi Cloud free. Your team will thank you.