1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. getClientCertificates
Viewing docs for Cloudflare v6.14.0
published on Thursday, Apr 2, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.getClientCertificates

cloudflare logo
Viewing docs for Cloudflare v6.14.0
published on Thursday, Apr 2, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleClientCertificates = cloudflare.getClientCertificates({
    zoneId: "023e105f4ecef8ad9ca31a8372d0c353",
    limit: 10,
    offset: 10,
    status: "all",
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_client_certificates = cloudflare.get_client_certificates(zone_id="023e105f4ecef8ad9ca31a8372d0c353",
    limit=10,
    offset=10,
    status="all")

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.LookupClientCertificates(ctx, &cloudflare.LookupClientCertificatesArgs{
			ZoneId: "023e105f4ecef8ad9ca31a8372d0c353",
			Limit:  pulumi.IntRef(10),
			Offset: pulumi.IntRef(10),
			Status: pulumi.StringRef("all"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleClientCertificates = Cloudflare.GetClientCertificates.Invoke(new()
    {
        ZoneId = "023e105f4ecef8ad9ca31a8372d0c353",
        Limit = 10,
        Offset = 10,
        Status = "all",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.cloudflare.inputs.GetClientCertificatesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleClientCertificates = CloudflareFunctions.getClientCertificates(GetClientCertificatesArgs.builder()
            .zoneId("023e105f4ecef8ad9ca31a8372d0c353")
            .limit(10)
            .offset(10)
            .status("all")
            .build());

    }
}

    variables:
  exampleClientCertificates:
    fn::invoke:
      function: cloudflare:getClientCertificates
      arguments:
        zoneId: 023e105f4ecef8ad9ca31a8372d0c353
        limit: 10
        offset: 10
        status: all

    Using getClientCertificates

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getClientCertificates(args: GetClientCertificatesArgs, opts?: InvokeOptions): Promise<GetClientCertificatesResult>
function getClientCertificatesOutput(args: GetClientCertificatesOutputArgs, opts?: InvokeOptions): Output<GetClientCertificatesResult>
    def get_client_certificates(limit: Optional[int] = None,
                            max_items: Optional[int] = None,
                            offset: Optional[int] = None,
                            status: Optional[str] = None,
                            zone_id: Optional[str] = None,
                            opts: Optional[InvokeOptions] = None) -> GetClientCertificatesResult
def get_client_certificates_output(limit: Optional[pulumi.Input[int]] = None,
                            max_items: Optional[pulumi.Input[int]] = None,
                            offset: Optional[pulumi.Input[int]] = None,
                            status: Optional[pulumi.Input[str]] = None,
                            zone_id: Optional[pulumi.Input[str]] = None,
                            opts: Optional[InvokeOptions] = None) -> Output[GetClientCertificatesResult]
    func LookupClientCertificates(ctx *Context, args *LookupClientCertificatesArgs, opts ...InvokeOption) (*LookupClientCertificatesResult, error)
func LookupClientCertificatesOutput(ctx *Context, args *LookupClientCertificatesOutputArgs, opts ...InvokeOption) LookupClientCertificatesResultOutput

    > Note: This function is named LookupClientCertificates in the Go SDK.

    public static class GetClientCertificates 
{
    public static Task<GetClientCertificatesResult> InvokeAsync(GetClientCertificatesArgs args, InvokeOptions? opts = null)
    public static Output<GetClientCertificatesResult> Invoke(GetClientCertificatesInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetClientCertificatesResult> getClientCertificates(GetClientCertificatesArgs args, InvokeOptions options)
public static Output<GetClientCertificatesResult> getClientCertificates(GetClientCertificatesArgs args, InvokeOptions options)

    fn::invoke:
  function: cloudflare:index/getClientCertificates:getClientCertificates
  arguments:
    # arguments dictionary

    The following arguments are supported:

    ZoneId string
    Identifier.
    Limit int
    Limit to the number of records returned.
    MaxItems int
    Max items to fetch, default: 1000
    Offset int
    Offset the results
    Status string
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    ZoneId string
    Identifier.
    Limit int
    Limit to the number of records returned.
    MaxItems int
    Max items to fetch, default: 1000
    Offset int
    Offset the results
    Status string
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    zoneId String
    Identifier.
    limit Integer
    Limit to the number of records returned.
    maxItems Integer
    Max items to fetch, default: 1000
    offset Integer
    Offset the results
    status String
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    zoneId string
    Identifier.
    limit number
    Limit to the number of records returned.
    maxItems number
    Max items to fetch, default: 1000
    offset number
    Offset the results
    status string
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    zone_id str
    Identifier.
    limit int
    Limit to the number of records returned.
    max_items int
    Max items to fetch, default: 1000
    offset int
    Offset the results
    status str
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    zoneId String
    Identifier.
    limit Number
    Limit to the number of records returned.
    maxItems Number
    Max items to fetch, default: 1000
    offset Number
    Offset the results
    status String
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".

    getClientCertificates Result

    The following output properties are available:

    Id string
    The provider-assigned unique ID for this managed resource.
    Results List<GetClientCertificatesResult>
    The items returned by the data source
    ZoneId string
    Identifier.
    Limit int
    Limit to the number of records returned.
    MaxItems int
    Max items to fetch, default: 1000
    Offset int
    Offset the results
    Status string
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    Id string
    The provider-assigned unique ID for this managed resource.
    Results []GetClientCertificatesResult
    The items returned by the data source
    ZoneId string
    Identifier.
    Limit int
    Limit to the number of records returned.
    MaxItems int
    Max items to fetch, default: 1000
    Offset int
    Offset the results
    Status string
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    id String
    The provider-assigned unique ID for this managed resource.
    results List<GetClientCertificatesResult>
    The items returned by the data source
    zoneId String
    Identifier.
    limit Integer
    Limit to the number of records returned.
    maxItems Integer
    Max items to fetch, default: 1000
    offset Integer
    Offset the results
    status String
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    id string
    The provider-assigned unique ID for this managed resource.
    results GetClientCertificatesResult[]
    The items returned by the data source
    zoneId string
    Identifier.
    limit number
    Limit to the number of records returned.
    maxItems number
    Max items to fetch, default: 1000
    offset number
    Offset the results
    status string
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    id str
    The provider-assigned unique ID for this managed resource.
    results Sequence[GetClientCertificatesResult]
    The items returned by the data source
    zone_id str
    Identifier.
    limit int
    Limit to the number of records returned.
    max_items int
    Max items to fetch, default: 1000
    offset int
    Offset the results
    status str
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".
    id String
    The provider-assigned unique ID for this managed resource.
    results List<Property Map>
    The items returned by the data source
    zoneId String
    Identifier.
    limit Number
    Limit to the number of records returned.
    maxItems Number
    Max items to fetch, default: 1000
    offset Number
    Offset the results
    status String
    Client Certitifcate Status to filter results by. Available values: "all", "active", "pendingreactivation", "pendingrevocation", "revoked".

    Supporting Types

    GetClientCertificatesResult

    Certificate string
    The Client Certificate PEM
    CertificateAuthority GetClientCertificatesResultCertificateAuthority
    Certificate Authority used to issue the Client Certificate
    CommonName string
    Common Name of the Client Certificate
    Country string
    Country, provided by the CSR
    Csr string
    The Certificate Signing Request (CSR). Must be newline-encoded.
    ExpiresOn string
    Date that the Client Certificate expires
    FingerprintSha256 string
    Unique identifier of the Client Certificate
    Id string
    Identifier.
    IssuedOn string
    Date that the Client Certificate was issued by the Certificate Authority
    Location string
    Location, provided by the CSR
    Organization string
    Organization, provided by the CSR
    OrganizationalUnit string
    Organizational Unit, provided by the CSR
    SerialNumber string
    The serial number on the created Client Certificate.
    Signature string
    The type of hash used for the Client Certificate..
    Ski string
    Subject Key Identifier
    State string
    State, provided by the CSR
    Status string
    Client Certificates may be active or revoked, and the pendingreactivation or pendingrevocation represent in-progress asynchronous transitions Available values: "active", "pendingreactivation", "pendingrevocation", "revoked".
    ValidityDays int
    The number of days the Client Certificate will be valid after the issuedOn date
    Certificate string
    The Client Certificate PEM
    CertificateAuthority GetClientCertificatesResultCertificateAuthority
    Certificate Authority used to issue the Client Certificate
    CommonName string
    Common Name of the Client Certificate
    Country string
    Country, provided by the CSR
    Csr string
    The Certificate Signing Request (CSR). Must be newline-encoded.
    ExpiresOn string
    Date that the Client Certificate expires
    FingerprintSha256 string
    Unique identifier of the Client Certificate
    Id string
    Identifier.
    IssuedOn string
    Date that the Client Certificate was issued by the Certificate Authority
    Location string
    Location, provided by the CSR
    Organization string
    Organization, provided by the CSR
    OrganizationalUnit string
    Organizational Unit, provided by the CSR
    SerialNumber string
    The serial number on the created Client Certificate.
    Signature string
    The type of hash used for the Client Certificate..
    Ski string
    Subject Key Identifier
    State string
    State, provided by the CSR
    Status string
    Client Certificates may be active or revoked, and the pendingreactivation or pendingrevocation represent in-progress asynchronous transitions Available values: "active", "pendingreactivation", "pendingrevocation", "revoked".
    ValidityDays int
    The number of days the Client Certificate will be valid after the issuedOn date
    certificate String
    The Client Certificate PEM
    certificateAuthority GetClientCertificatesResultCertificateAuthority
    Certificate Authority used to issue the Client Certificate
    commonName String
    Common Name of the Client Certificate
    country String
    Country, provided by the CSR
    csr String
    The Certificate Signing Request (CSR). Must be newline-encoded.
    expiresOn String
    Date that the Client Certificate expires
    fingerprintSha256 String
    Unique identifier of the Client Certificate
    id String
    Identifier.
    issuedOn String
    Date that the Client Certificate was issued by the Certificate Authority
    location String
    Location, provided by the CSR
    organization String
    Organization, provided by the CSR
    organizationalUnit String
    Organizational Unit, provided by the CSR
    serialNumber String
    The serial number on the created Client Certificate.
    signature String
    The type of hash used for the Client Certificate..
    ski String
    Subject Key Identifier
    state String
    State, provided by the CSR
    status String
    Client Certificates may be active or revoked, and the pendingreactivation or pendingrevocation represent in-progress asynchronous transitions Available values: "active", "pendingreactivation", "pendingrevocation", "revoked".
    validityDays Integer
    The number of days the Client Certificate will be valid after the issuedOn date
    certificate string
    The Client Certificate PEM
    certificateAuthority GetClientCertificatesResultCertificateAuthority
    Certificate Authority used to issue the Client Certificate
    commonName string
    Common Name of the Client Certificate
    country string
    Country, provided by the CSR
    csr string
    The Certificate Signing Request (CSR). Must be newline-encoded.
    expiresOn string
    Date that the Client Certificate expires
    fingerprintSha256 string
    Unique identifier of the Client Certificate
    id string
    Identifier.
    issuedOn string
    Date that the Client Certificate was issued by the Certificate Authority
    location string
    Location, provided by the CSR
    organization string
    Organization, provided by the CSR
    organizationalUnit string
    Organizational Unit, provided by the CSR
    serialNumber string
    The serial number on the created Client Certificate.
    signature string
    The type of hash used for the Client Certificate..
    ski string
    Subject Key Identifier
    state string
    State, provided by the CSR
    status string
    Client Certificates may be active or revoked, and the pendingreactivation or pendingrevocation represent in-progress asynchronous transitions Available values: "active", "pendingreactivation", "pendingrevocation", "revoked".
    validityDays number
    The number of days the Client Certificate will be valid after the issuedOn date
    certificate str
    The Client Certificate PEM
    certificate_authority GetClientCertificatesResultCertificateAuthority
    Certificate Authority used to issue the Client Certificate
    common_name str
    Common Name of the Client Certificate
    country str
    Country, provided by the CSR
    csr str
    The Certificate Signing Request (CSR). Must be newline-encoded.
    expires_on str
    Date that the Client Certificate expires
    fingerprint_sha256 str
    Unique identifier of the Client Certificate
    id str
    Identifier.
    issued_on str
    Date that the Client Certificate was issued by the Certificate Authority
    location str
    Location, provided by the CSR
    organization str
    Organization, provided by the CSR
    organizational_unit str
    Organizational Unit, provided by the CSR
    serial_number str
    The serial number on the created Client Certificate.
    signature str
    The type of hash used for the Client Certificate..
    ski str
    Subject Key Identifier
    state str
    State, provided by the CSR
    status str
    Client Certificates may be active or revoked, and the pendingreactivation or pendingrevocation represent in-progress asynchronous transitions Available values: "active", "pendingreactivation", "pendingrevocation", "revoked".
    validity_days int
    The number of days the Client Certificate will be valid after the issuedOn date
    certificate String
    The Client Certificate PEM
    certificateAuthority Property Map
    Certificate Authority used to issue the Client Certificate
    commonName String
    Common Name of the Client Certificate
    country String
    Country, provided by the CSR
    csr String
    The Certificate Signing Request (CSR). Must be newline-encoded.
    expiresOn String
    Date that the Client Certificate expires
    fingerprintSha256 String
    Unique identifier of the Client Certificate
    id String
    Identifier.
    issuedOn String
    Date that the Client Certificate was issued by the Certificate Authority
    location String
    Location, provided by the CSR
    organization String
    Organization, provided by the CSR
    organizationalUnit String
    Organizational Unit, provided by the CSR
    serialNumber String
    The serial number on the created Client Certificate.
    signature String
    The type of hash used for the Client Certificate..
    ski String
    Subject Key Identifier
    state String
    State, provided by the CSR
    status String
    Client Certificates may be active or revoked, and the pendingreactivation or pendingrevocation represent in-progress asynchronous transitions Available values: "active", "pendingreactivation", "pendingrevocation", "revoked".
    validityDays Number
    The number of days the Client Certificate will be valid after the issuedOn date

    GetClientCertificatesResultCertificateAuthority

    Id string
    Name string
    Id string
    Name string
    id String
    name String
    id string
    name string
    id str
    name str
    id String
    name String

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Viewing docs for Cloudflare v6.14.0
    published on Thursday, Apr 2, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare
      Try Pulumi Cloud free. Your team will thank you.