1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. getZeroTrustGatewayCertificate
Cloudflare v6.11.0 published on Friday, Oct 31, 2025 by Pulumi
pulumi/pulumi-cloudflare

cloudflare.getZeroTrustGatewayCertificate

Get Started
cloudflare logo
Cloudflare v6.11.0 published on Friday, Oct 31, 2025 by Pulumi
pulumi/pulumi-cloudflare

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustGatewayCertificate = cloudflare.getZeroTrustGatewayCertificate({
    accountId: "699d98642c564d2e855e9661899b7252",
    certificateId: "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_gateway_certificate = cloudflare.get_zero_trust_gateway_certificate(account_id="699d98642c564d2e855e9661899b7252",
    certificate_id="f174e90a-fafe-4643-bbbc-4a0ed4fc8415")

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.LookupZeroTrustGatewayCertificate(ctx, &cloudflare.LookupZeroTrustGatewayCertificateArgs{
			AccountId:     "699d98642c564d2e855e9661899b7252",
			CertificateId: pulumi.StringRef("f174e90a-fafe-4643-bbbc-4a0ed4fc8415"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustGatewayCertificate = Cloudflare.GetZeroTrustGatewayCertificate.Invoke(new()
    {
        AccountId = "699d98642c564d2e855e9661899b7252",
        CertificateId = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.cloudflare.inputs.GetZeroTrustGatewayCertificateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleZeroTrustGatewayCertificate = CloudflareFunctions.getZeroTrustGatewayCertificate(GetZeroTrustGatewayCertificateArgs.builder()
            .accountId("699d98642c564d2e855e9661899b7252")
            .certificateId("f174e90a-fafe-4643-bbbc-4a0ed4fc8415")
            .build());

    }
}

    variables:
  exampleZeroTrustGatewayCertificate:
    fn::invoke:
      function: cloudflare:getZeroTrustGatewayCertificate
      arguments:
        accountId: 699d98642c564d2e855e9661899b7252
        certificateId: f174e90a-fafe-4643-bbbc-4a0ed4fc8415

    Using getZeroTrustGatewayCertificate

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getZeroTrustGatewayCertificate(args: GetZeroTrustGatewayCertificateArgs, opts?: InvokeOptions): Promise<GetZeroTrustGatewayCertificateResult>
function getZeroTrustGatewayCertificateOutput(args: GetZeroTrustGatewayCertificateOutputArgs, opts?: InvokeOptions): Output<GetZeroTrustGatewayCertificateResult>
    def get_zero_trust_gateway_certificate(account_id: Optional[str] = None,
                                       certificate_id: Optional[str] = None,
                                       opts: Optional[InvokeOptions] = None) -> GetZeroTrustGatewayCertificateResult
def get_zero_trust_gateway_certificate_output(account_id: Optional[pulumi.Input[str]] = None,
                                       certificate_id: Optional[pulumi.Input[str]] = None,
                                       opts: Optional[InvokeOptions] = None) -> Output[GetZeroTrustGatewayCertificateResult]
    func LookupZeroTrustGatewayCertificate(ctx *Context, args *LookupZeroTrustGatewayCertificateArgs, opts ...InvokeOption) (*LookupZeroTrustGatewayCertificateResult, error)
func LookupZeroTrustGatewayCertificateOutput(ctx *Context, args *LookupZeroTrustGatewayCertificateOutputArgs, opts ...InvokeOption) LookupZeroTrustGatewayCertificateResultOutput

    > Note: This function is named LookupZeroTrustGatewayCertificate in the Go SDK.

    public static class GetZeroTrustGatewayCertificate 
{
    public static Task<GetZeroTrustGatewayCertificateResult> InvokeAsync(GetZeroTrustGatewayCertificateArgs args, InvokeOptions? opts = null)
    public static Output<GetZeroTrustGatewayCertificateResult> Invoke(GetZeroTrustGatewayCertificateInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetZeroTrustGatewayCertificateResult> getZeroTrustGatewayCertificate(GetZeroTrustGatewayCertificateArgs args, InvokeOptions options)
public static Output<GetZeroTrustGatewayCertificateResult> getZeroTrustGatewayCertificate(GetZeroTrustGatewayCertificateArgs args, InvokeOptions options)

    fn::invoke:
  function: cloudflare:index/getZeroTrustGatewayCertificate:getZeroTrustGatewayCertificate
  arguments:
    # arguments dictionary

    The following arguments are supported:

    AccountId string
    CertificateId string
    Identify the certificate with a UUID.
    AccountId string
    CertificateId string
    Identify the certificate with a UUID.
    accountId String
    certificateId String
    Identify the certificate with a UUID.
    accountId string
    certificateId string
    Identify the certificate with a UUID.
    account_id str
    certificate_id str
    Identify the certificate with a UUID.
    accountId String
    certificateId String
    Identify the certificate with a UUID.

    getZeroTrustGatewayCertificate Result

    The following output properties are available:

    AccountId string
    BindingStatus string
    Indicate the read-only deployment status of the certificate on Cloudflare's edge. Gateway TLS interception can use certificates in the 'available' (previously called 'active') state. Available values: "pendingdeployment", "available", "pendingdeletion", "inactive".
    Certificate string
    Provide the CA certificate (read-only).
    CreatedAt string
    ExpiresOn string
    Fingerprint string
    Provide the SHA256 fingerprint of the certificate (read-only).
    Id string
    Identify the certificate with a UUID.
    InUse bool
    Indicate whether Gateway TLS interception uses this certificate (read-only). You cannot set this value directly. To configure interception, use the Gateway configuration setting named certificate (read-only).
    IssuerOrg string
    Indicate the organization that issued the certificate (read-only).
    IssuerRaw string
    Provide the entire issuer field of the certificate (read-only).
    Type string
    Indicate the read-only certificate type, BYO-PKI (custom) or Gateway-managed. Available values: "custom", <span pulumi-lang-nodejs=""gatewayManaged"" pulumi-lang-dotnet=""GatewayManaged"" pulumi-lang-go=""gatewayManaged"" pulumi-lang-python=""gateway_managed"" pulumi-lang-yaml=""gatewayManaged"" pulumi-lang-java=""gatewayManaged"">"gateway_managed".
    UpdatedAt string
    UploadedOn string
    CertificateId string
    Identify the certificate with a UUID.
    AccountId string
    BindingStatus string
    Indicate the read-only deployment status of the certificate on Cloudflare's edge. Gateway TLS interception can use certificates in the 'available' (previously called 'active') state. Available values: "pendingdeployment", "available", "pendingdeletion", "inactive".
    Certificate string
    Provide the CA certificate (read-only).
    CreatedAt string
    ExpiresOn string
    Fingerprint string
    Provide the SHA256 fingerprint of the certificate (read-only).
    Id string
    Identify the certificate with a UUID.
    InUse bool
    Indicate whether Gateway TLS interception uses this certificate (read-only). You cannot set this value directly. To configure interception, use the Gateway configuration setting named certificate (read-only).
    IssuerOrg string
    Indicate the organization that issued the certificate (read-only).
    IssuerRaw string
    Provide the entire issuer field of the certificate (read-only).
    Type string
    Indicate the read-only certificate type, BYO-PKI (custom) or Gateway-managed. Available values: "custom", <span pulumi-lang-nodejs=""gatewayManaged"" pulumi-lang-dotnet=""GatewayManaged"" pulumi-lang-go=""gatewayManaged"" pulumi-lang-python=""gateway_managed"" pulumi-lang-yaml=""gatewayManaged"" pulumi-lang-java=""gatewayManaged"">"gateway_managed".
    UpdatedAt string
    UploadedOn string
    CertificateId string
    Identify the certificate with a UUID.
    accountId String
    bindingStatus String
    Indicate the read-only deployment status of the certificate on Cloudflare's edge. Gateway TLS interception can use certificates in the 'available' (previously called 'active') state. Available values: "pendingdeployment", "available", "pendingdeletion", "inactive".
    certificate String
    Provide the CA certificate (read-only).
    createdAt String
    expiresOn String
    fingerprint String
    Provide the SHA256 fingerprint of the certificate (read-only).
    id String
    Identify the certificate with a UUID.
    inUse Boolean
    Indicate whether Gateway TLS interception uses this certificate (read-only). You cannot set this value directly. To configure interception, use the Gateway configuration setting named certificate (read-only).
    issuerOrg String
    Indicate the organization that issued the certificate (read-only).
    issuerRaw String
    Provide the entire issuer field of the certificate (read-only).
    type String
    Indicate the read-only certificate type, BYO-PKI (custom) or Gateway-managed. Available values: "custom", <span pulumi-lang-nodejs=""gatewayManaged"" pulumi-lang-dotnet=""GatewayManaged"" pulumi-lang-go=""gatewayManaged"" pulumi-lang-python=""gateway_managed"" pulumi-lang-yaml=""gatewayManaged"" pulumi-lang-java=""gatewayManaged"">"gateway_managed".
    updatedAt String
    uploadedOn String
    certificateId String
    Identify the certificate with a UUID.
    accountId string
    bindingStatus string
    Indicate the read-only deployment status of the certificate on Cloudflare's edge. Gateway TLS interception can use certificates in the 'available' (previously called 'active') state. Available values: "pendingdeployment", "available", "pendingdeletion", "inactive".
    certificate string
    Provide the CA certificate (read-only).
    createdAt string
    expiresOn string
    fingerprint string
    Provide the SHA256 fingerprint of the certificate (read-only).
    id string
    Identify the certificate with a UUID.
    inUse boolean
    Indicate whether Gateway TLS interception uses this certificate (read-only). You cannot set this value directly. To configure interception, use the Gateway configuration setting named certificate (read-only).
    issuerOrg string
    Indicate the organization that issued the certificate (read-only).
    issuerRaw string
    Provide the entire issuer field of the certificate (read-only).
    type string
    Indicate the read-only certificate type, BYO-PKI (custom) or Gateway-managed. Available values: "custom", <span pulumi-lang-nodejs=""gatewayManaged"" pulumi-lang-dotnet=""GatewayManaged"" pulumi-lang-go=""gatewayManaged"" pulumi-lang-python=""gateway_managed"" pulumi-lang-yaml=""gatewayManaged"" pulumi-lang-java=""gatewayManaged"">"gateway_managed".
    updatedAt string
    uploadedOn string
    certificateId string
    Identify the certificate with a UUID.
    account_id str
    binding_status str
    Indicate the read-only deployment status of the certificate on Cloudflare's edge. Gateway TLS interception can use certificates in the 'available' (previously called 'active') state. Available values: "pendingdeployment", "available", "pendingdeletion", "inactive".
    certificate str
    Provide the CA certificate (read-only).
    created_at str
    expires_on str
    fingerprint str
    Provide the SHA256 fingerprint of the certificate (read-only).
    id str
    Identify the certificate with a UUID.
    in_use bool
    Indicate whether Gateway TLS interception uses this certificate (read-only). You cannot set this value directly. To configure interception, use the Gateway configuration setting named certificate (read-only).
    issuer_org str
    Indicate the organization that issued the certificate (read-only).
    issuer_raw str
    Provide the entire issuer field of the certificate (read-only).
    type str
    Indicate the read-only certificate type, BYO-PKI (custom) or Gateway-managed. Available values: "custom", <span pulumi-lang-nodejs=""gatewayManaged"" pulumi-lang-dotnet=""GatewayManaged"" pulumi-lang-go=""gatewayManaged"" pulumi-lang-python=""gateway_managed"" pulumi-lang-yaml=""gatewayManaged"" pulumi-lang-java=""gatewayManaged"">"gateway_managed".
    updated_at str
    uploaded_on str
    certificate_id str
    Identify the certificate with a UUID.
    accountId String
    bindingStatus String
    Indicate the read-only deployment status of the certificate on Cloudflare's edge. Gateway TLS interception can use certificates in the 'available' (previously called 'active') state. Available values: "pendingdeployment", "available", "pendingdeletion", "inactive".
    certificate String
    Provide the CA certificate (read-only).
    createdAt String
    expiresOn String
    fingerprint String
    Provide the SHA256 fingerprint of the certificate (read-only).
    id String
    Identify the certificate with a UUID.
    inUse Boolean
    Indicate whether Gateway TLS interception uses this certificate (read-only). You cannot set this value directly. To configure interception, use the Gateway configuration setting named certificate (read-only).
    issuerOrg String
    Indicate the organization that issued the certificate (read-only).
    issuerRaw String
    Provide the entire issuer field of the certificate (read-only).
    type String
    Indicate the read-only certificate type, BYO-PKI (custom) or Gateway-managed. Available values: "custom", <span pulumi-lang-nodejs=""gatewayManaged"" pulumi-lang-dotnet=""GatewayManaged"" pulumi-lang-go=""gatewayManaged"" pulumi-lang-python=""gateway_managed"" pulumi-lang-yaml=""gatewayManaged"" pulumi-lang-java=""gatewayManaged"">"gateway_managed".
    updatedAt String
    uploadedOn String
    certificateId String
    Identify the certificate with a UUID.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Cloudflare v6.11.0 published on Friday, Oct 31, 2025 by Pulumi
    pulumi/pulumi-cloudflare
      Meet Neo: Your AI Platform Teammate