1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. CertificatesManagement
  5. CertificateAuthority
Oracle Cloud Infrastructure v3.16.0 published on Wednesday, Jan 28, 2026 by Pulumi
oci logo
Oracle Cloud Infrastructure v3.16.0 published on Wednesday, Jan 28, 2026 by Pulumi

    Example Usage

    Create CertificateAuthority Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CertificateAuthority(name: string, args: CertificateAuthorityArgs, opts?: CustomResourceOptions);
    @overload
    def CertificateAuthority(resource_name: str,
                             args: CertificateAuthorityArgs,
                             opts: Optional[ResourceOptions] = None)
    
    @overload
    def CertificateAuthority(resource_name: str,
                             opts: Optional[ResourceOptions] = None,
                             certificate_authority_config: Optional[CertificateAuthorityCertificateAuthorityConfigArgs] = None,
                             compartment_id: Optional[str] = None,
                             certificate_authority_rules: Optional[Sequence[CertificateAuthorityCertificateAuthorityRuleArgs]] = None,
                             certificate_revocation_list_details: Optional[CertificateAuthorityCertificateRevocationListDetailsArgs] = None,
                             defined_tags: Optional[Mapping[str, str]] = None,
                             description: Optional[str] = None,
                             external_key_description: Optional[str] = None,
                             freeform_tags: Optional[Mapping[str, str]] = None,
                             kms_key_id: Optional[str] = None,
                             name: Optional[str] = None)
    func NewCertificateAuthority(ctx *Context, name string, args CertificateAuthorityArgs, opts ...ResourceOption) (*CertificateAuthority, error)
    public CertificateAuthority(string name, CertificateAuthorityArgs args, CustomResourceOptions? opts = null)
    public CertificateAuthority(String name, CertificateAuthorityArgs args)
    public CertificateAuthority(String name, CertificateAuthorityArgs args, CustomResourceOptions options)
    
    type: oci:CertificatesManagement:CertificateAuthority
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args CertificateAuthorityArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CertificateAuthorityArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CertificateAuthorityArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CertificateAuthorityArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CertificateAuthorityArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var certificateAuthorityResource = new Oci.CertificatesManagement.CertificateAuthority("certificateAuthorityResource", new()
    {
        CertificateAuthorityConfig = new Oci.CertificatesManagement.Inputs.CertificateAuthorityCertificateAuthorityConfigArgs
        {
            ConfigType = "string",
            ActionDetails = new Oci.CertificatesManagement.Inputs.CertificateAuthorityCertificateAuthorityConfigActionDetailsArgs
            {
                ActionType = "string",
                CertificatePem = "string",
            },
            CertificatePem = "string",
            IssuerCertificateAuthorityId = "string",
            SigningAlgorithm = "string",
            Subject = new Oci.CertificatesManagement.Inputs.CertificateAuthorityCertificateAuthorityConfigSubjectArgs
            {
                CommonName = "string",
                Country = "string",
                DistinguishedNameQualifier = "string",
                DomainComponent = "string",
                GenerationQualifier = "string",
                GivenName = "string",
                Initials = "string",
                LocalityName = "string",
                Organization = "string",
                OrganizationalUnit = "string",
                Pseudonym = "string",
                SerialNumber = "string",
                StateOrProvinceName = "string",
                Street = "string",
                Surname = "string",
                Title = "string",
                UserId = "string",
            },
            Validity = new Oci.CertificatesManagement.Inputs.CertificateAuthorityCertificateAuthorityConfigValidityArgs
            {
                TimeOfValidityNotAfter = "string",
                TimeOfValidityNotBefore = "string",
            },
            VersionName = "string",
        },
        CompartmentId = "string",
        CertificateAuthorityRules = new[]
        {
            new Oci.CertificatesManagement.Inputs.CertificateAuthorityCertificateAuthorityRuleArgs
            {
                RuleType = "string",
                CertificateAuthorityMaxValidityDuration = "string",
                LeafCertificateMaxValidityDuration = "string",
                NameConstraint = new Oci.CertificatesManagement.Inputs.CertificateAuthorityCertificateAuthorityRuleNameConstraintArgs
                {
                    ExcludedSubtrees = new[]
                    {
                        new Oci.CertificatesManagement.Inputs.CertificateAuthorityCertificateAuthorityRuleNameConstraintExcludedSubtreeArgs
                        {
                            Type = "string",
                            Value = "string",
                        },
                    },
                    PermittedSubtrees = new[]
                    {
                        new Oci.CertificatesManagement.Inputs.CertificateAuthorityCertificateAuthorityRuleNameConstraintPermittedSubtreeArgs
                        {
                            Type = "string",
                            Value = "string",
                        },
                    },
                },
                PathLengthConstraint = 0,
            },
        },
        CertificateRevocationListDetails = new Oci.CertificatesManagement.Inputs.CertificateAuthorityCertificateRevocationListDetailsArgs
        {
            ObjectStorageConfig = new Oci.CertificatesManagement.Inputs.CertificateAuthorityCertificateRevocationListDetailsObjectStorageConfigArgs
            {
                ObjectStorageBucketName = "string",
                ObjectStorageObjectNameFormat = "string",
                ObjectStorageNamespace = "string",
            },
            CustomFormattedUrls = new[]
            {
                "string",
            },
        },
        DefinedTags = 
        {
            { "string", "string" },
        },
        Description = "string",
        ExternalKeyDescription = "string",
        FreeformTags = 
        {
            { "string", "string" },
        },
        KmsKeyId = "string",
        Name = "string",
    });
    
    example, err := certificatesmanagement.NewCertificateAuthority(ctx, "certificateAuthorityResource", &certificatesmanagement.CertificateAuthorityArgs{
    	CertificateAuthorityConfig: &certificatesmanagement.CertificateAuthorityCertificateAuthorityConfigArgs{
    		ConfigType: pulumi.String("string"),
    		ActionDetails: &certificatesmanagement.CertificateAuthorityCertificateAuthorityConfigActionDetailsArgs{
    			ActionType:     pulumi.String("string"),
    			CertificatePem: pulumi.String("string"),
    		},
    		CertificatePem:               pulumi.String("string"),
    		IssuerCertificateAuthorityId: pulumi.String("string"),
    		SigningAlgorithm:             pulumi.String("string"),
    		Subject: &certificatesmanagement.CertificateAuthorityCertificateAuthorityConfigSubjectArgs{
    			CommonName:                 pulumi.String("string"),
    			Country:                    pulumi.String("string"),
    			DistinguishedNameQualifier: pulumi.String("string"),
    			DomainComponent:            pulumi.String("string"),
    			GenerationQualifier:        pulumi.String("string"),
    			GivenName:                  pulumi.String("string"),
    			Initials:                   pulumi.String("string"),
    			LocalityName:               pulumi.String("string"),
    			Organization:               pulumi.String("string"),
    			OrganizationalUnit:         pulumi.String("string"),
    			Pseudonym:                  pulumi.String("string"),
    			SerialNumber:               pulumi.String("string"),
    			StateOrProvinceName:        pulumi.String("string"),
    			Street:                     pulumi.String("string"),
    			Surname:                    pulumi.String("string"),
    			Title:                      pulumi.String("string"),
    			UserId:                     pulumi.String("string"),
    		},
    		Validity: &certificatesmanagement.CertificateAuthorityCertificateAuthorityConfigValidityArgs{
    			TimeOfValidityNotAfter:  pulumi.String("string"),
    			TimeOfValidityNotBefore: pulumi.String("string"),
    		},
    		VersionName: pulumi.String("string"),
    	},
    	CompartmentId: pulumi.String("string"),
    	CertificateAuthorityRules: certificatesmanagement.CertificateAuthorityCertificateAuthorityRuleArray{
    		&certificatesmanagement.CertificateAuthorityCertificateAuthorityRuleArgs{
    			RuleType:                                pulumi.String("string"),
    			CertificateAuthorityMaxValidityDuration: pulumi.String("string"),
    			LeafCertificateMaxValidityDuration:      pulumi.String("string"),
    			NameConstraint: &certificatesmanagement.CertificateAuthorityCertificateAuthorityRuleNameConstraintArgs{
    				ExcludedSubtrees: certificatesmanagement.CertificateAuthorityCertificateAuthorityRuleNameConstraintExcludedSubtreeArray{
    					&certificatesmanagement.CertificateAuthorityCertificateAuthorityRuleNameConstraintExcludedSubtreeArgs{
    						Type:  pulumi.String("string"),
    						Value: pulumi.String("string"),
    					},
    				},
    				PermittedSubtrees: certificatesmanagement.CertificateAuthorityCertificateAuthorityRuleNameConstraintPermittedSubtreeArray{
    					&certificatesmanagement.CertificateAuthorityCertificateAuthorityRuleNameConstraintPermittedSubtreeArgs{
    						Type:  pulumi.String("string"),
    						Value: pulumi.String("string"),
    					},
    				},
    			},
    			PathLengthConstraint: pulumi.Int(0),
    		},
    	},
    	CertificateRevocationListDetails: &certificatesmanagement.CertificateAuthorityCertificateRevocationListDetailsArgs{
    		ObjectStorageConfig: &certificatesmanagement.CertificateAuthorityCertificateRevocationListDetailsObjectStorageConfigArgs{
    			ObjectStorageBucketName:       pulumi.String("string"),
    			ObjectStorageObjectNameFormat: pulumi.String("string"),
    			ObjectStorageNamespace:        pulumi.String("string"),
    		},
    		CustomFormattedUrls: pulumi.StringArray{
    			pulumi.String("string"),
    		},
    	},
    	DefinedTags: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	Description:            pulumi.String("string"),
    	ExternalKeyDescription: pulumi.String("string"),
    	FreeformTags: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	KmsKeyId: pulumi.String("string"),
    	Name:     pulumi.String("string"),
    })
    
    var certificateAuthorityResource = new CertificateAuthority("certificateAuthorityResource", CertificateAuthorityArgs.builder()
        .certificateAuthorityConfig(CertificateAuthorityCertificateAuthorityConfigArgs.builder()
            .configType("string")
            .actionDetails(CertificateAuthorityCertificateAuthorityConfigActionDetailsArgs.builder()
                .actionType("string")
                .certificatePem("string")
                .build())
            .certificatePem("string")
            .issuerCertificateAuthorityId("string")
            .signingAlgorithm("string")
            .subject(CertificateAuthorityCertificateAuthorityConfigSubjectArgs.builder()
                .commonName("string")
                .country("string")
                .distinguishedNameQualifier("string")
                .domainComponent("string")
                .generationQualifier("string")
                .givenName("string")
                .initials("string")
                .localityName("string")
                .organization("string")
                .organizationalUnit("string")
                .pseudonym("string")
                .serialNumber("string")
                .stateOrProvinceName("string")
                .street("string")
                .surname("string")
                .title("string")
                .userId("string")
                .build())
            .validity(CertificateAuthorityCertificateAuthorityConfigValidityArgs.builder()
                .timeOfValidityNotAfter("string")
                .timeOfValidityNotBefore("string")
                .build())
            .versionName("string")
            .build())
        .compartmentId("string")
        .certificateAuthorityRules(CertificateAuthorityCertificateAuthorityRuleArgs.builder()
            .ruleType("string")
            .certificateAuthorityMaxValidityDuration("string")
            .leafCertificateMaxValidityDuration("string")
            .nameConstraint(CertificateAuthorityCertificateAuthorityRuleNameConstraintArgs.builder()
                .excludedSubtrees(CertificateAuthorityCertificateAuthorityRuleNameConstraintExcludedSubtreeArgs.builder()
                    .type("string")
                    .value("string")
                    .build())
                .permittedSubtrees(CertificateAuthorityCertificateAuthorityRuleNameConstraintPermittedSubtreeArgs.builder()
                    .type("string")
                    .value("string")
                    .build())
                .build())
            .pathLengthConstraint(0)
            .build())
        .certificateRevocationListDetails(CertificateAuthorityCertificateRevocationListDetailsArgs.builder()
            .objectStorageConfig(CertificateAuthorityCertificateRevocationListDetailsObjectStorageConfigArgs.builder()
                .objectStorageBucketName("string")
                .objectStorageObjectNameFormat("string")
                .objectStorageNamespace("string")
                .build())
            .customFormattedUrls("string")
            .build())
        .definedTags(Map.of("string", "string"))
        .description("string")
        .externalKeyDescription("string")
        .freeformTags(Map.of("string", "string"))
        .kmsKeyId("string")
        .name("string")
        .build());
    
    certificate_authority_resource = oci.certificatesmanagement.CertificateAuthority("certificateAuthorityResource",
        certificate_authority_config={
            "config_type": "string",
            "action_details": {
                "action_type": "string",
                "certificate_pem": "string",
            },
            "certificate_pem": "string",
            "issuer_certificate_authority_id": "string",
            "signing_algorithm": "string",
            "subject": {
                "common_name": "string",
                "country": "string",
                "distinguished_name_qualifier": "string",
                "domain_component": "string",
                "generation_qualifier": "string",
                "given_name": "string",
                "initials": "string",
                "locality_name": "string",
                "organization": "string",
                "organizational_unit": "string",
                "pseudonym": "string",
                "serial_number": "string",
                "state_or_province_name": "string",
                "street": "string",
                "surname": "string",
                "title": "string",
                "user_id": "string",
            },
            "validity": {
                "time_of_validity_not_after": "string",
                "time_of_validity_not_before": "string",
            },
            "version_name": "string",
        },
        compartment_id="string",
        certificate_authority_rules=[{
            "rule_type": "string",
            "certificate_authority_max_validity_duration": "string",
            "leaf_certificate_max_validity_duration": "string",
            "name_constraint": {
                "excluded_subtrees": [{
                    "type": "string",
                    "value": "string",
                }],
                "permitted_subtrees": [{
                    "type": "string",
                    "value": "string",
                }],
            },
            "path_length_constraint": 0,
        }],
        certificate_revocation_list_details={
            "object_storage_config": {
                "object_storage_bucket_name": "string",
                "object_storage_object_name_format": "string",
                "object_storage_namespace": "string",
            },
            "custom_formatted_urls": ["string"],
        },
        defined_tags={
            "string": "string",
        },
        description="string",
        external_key_description="string",
        freeform_tags={
            "string": "string",
        },
        kms_key_id="string",
        name="string")
    
    const certificateAuthorityResource = new oci.certificatesmanagement.CertificateAuthority("certificateAuthorityResource", {
        certificateAuthorityConfig: {
            configType: "string",
            actionDetails: {
                actionType: "string",
                certificatePem: "string",
            },
            certificatePem: "string",
            issuerCertificateAuthorityId: "string",
            signingAlgorithm: "string",
            subject: {
                commonName: "string",
                country: "string",
                distinguishedNameQualifier: "string",
                domainComponent: "string",
                generationQualifier: "string",
                givenName: "string",
                initials: "string",
                localityName: "string",
                organization: "string",
                organizationalUnit: "string",
                pseudonym: "string",
                serialNumber: "string",
                stateOrProvinceName: "string",
                street: "string",
                surname: "string",
                title: "string",
                userId: "string",
            },
            validity: {
                timeOfValidityNotAfter: "string",
                timeOfValidityNotBefore: "string",
            },
            versionName: "string",
        },
        compartmentId: "string",
        certificateAuthorityRules: [{
            ruleType: "string",
            certificateAuthorityMaxValidityDuration: "string",
            leafCertificateMaxValidityDuration: "string",
            nameConstraint: {
                excludedSubtrees: [{
                    type: "string",
                    value: "string",
                }],
                permittedSubtrees: [{
                    type: "string",
                    value: "string",
                }],
            },
            pathLengthConstraint: 0,
        }],
        certificateRevocationListDetails: {
            objectStorageConfig: {
                objectStorageBucketName: "string",
                objectStorageObjectNameFormat: "string",
                objectStorageNamespace: "string",
            },
            customFormattedUrls: ["string"],
        },
        definedTags: {
            string: "string",
        },
        description: "string",
        externalKeyDescription: "string",
        freeformTags: {
            string: "string",
        },
        kmsKeyId: "string",
        name: "string",
    });
    
    type: oci:CertificatesManagement:CertificateAuthority
    properties:
        certificateAuthorityConfig:
            actionDetails:
                actionType: string
                certificatePem: string
            certificatePem: string
            configType: string
            issuerCertificateAuthorityId: string
            signingAlgorithm: string
            subject:
                commonName: string
                country: string
                distinguishedNameQualifier: string
                domainComponent: string
                generationQualifier: string
                givenName: string
                initials: string
                localityName: string
                organization: string
                organizationalUnit: string
                pseudonym: string
                serialNumber: string
                stateOrProvinceName: string
                street: string
                surname: string
                title: string
                userId: string
            validity:
                timeOfValidityNotAfter: string
                timeOfValidityNotBefore: string
            versionName: string
        certificateAuthorityRules:
            - certificateAuthorityMaxValidityDuration: string
              leafCertificateMaxValidityDuration: string
              nameConstraint:
                excludedSubtrees:
                    - type: string
                      value: string
                permittedSubtrees:
                    - type: string
                      value: string
              pathLengthConstraint: 0
              ruleType: string
        certificateRevocationListDetails:
            customFormattedUrls:
                - string
            objectStorageConfig:
                objectStorageBucketName: string
                objectStorageNamespace: string
                objectStorageObjectNameFormat: string
        compartmentId: string
        definedTags:
            string: string
        description: string
        externalKeyDescription: string
        freeformTags:
            string: string
        kmsKeyId: string
        name: string
    

    CertificateAuthority Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CertificateAuthority resource accepts the following input properties:

    CertificateAuthorityConfig CertificateAuthorityCertificateAuthorityConfig
    (Updatable) The configuration details for creating a certificate authority (CA).
    CompartmentId string
    (Updatable) The compartment in which you want to create the CA.
    CertificateAuthorityRules List<CertificateAuthorityCertificateAuthorityRule>
    (Updatable) A list of rules that control how the CA is used and managed.
    CertificateRevocationListDetails CertificateAuthorityCertificateRevocationListDetails
    (Updatable) The details of the certificate revocation list (CRL).
    DefinedTags Dictionary<string, string>
    (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    Description string
    (Updatable) A brief description of the CA.
    ExternalKeyDescription string
    (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
    FreeformTags Dictionary<string, string>
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    KmsKeyId string
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    Name string

    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    CertificateAuthorityConfig CertificateAuthorityCertificateAuthorityConfigArgs
    (Updatable) The configuration details for creating a certificate authority (CA).
    CompartmentId string
    (Updatable) The compartment in which you want to create the CA.
    CertificateAuthorityRules []CertificateAuthorityCertificateAuthorityRuleArgs
    (Updatable) A list of rules that control how the CA is used and managed.
    CertificateRevocationListDetails CertificateAuthorityCertificateRevocationListDetailsArgs
    (Updatable) The details of the certificate revocation list (CRL).
    DefinedTags map[string]string
    (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    Description string
    (Updatable) A brief description of the CA.
    ExternalKeyDescription string
    (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
    FreeformTags map[string]string
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    KmsKeyId string
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    Name string

    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    certificateAuthorityConfig CertificateAuthorityCertificateAuthorityConfig
    (Updatable) The configuration details for creating a certificate authority (CA).
    compartmentId String
    (Updatable) The compartment in which you want to create the CA.
    certificateAuthorityRules List<CertificateAuthorityCertificateAuthorityRule>
    (Updatable) A list of rules that control how the CA is used and managed.
    certificateRevocationListDetails CertificateAuthorityCertificateRevocationListDetails
    (Updatable) The details of the certificate revocation list (CRL).
    definedTags Map<String,String>
    (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    description String
    (Updatable) A brief description of the CA.
    externalKeyDescription String
    (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
    freeformTags Map<String,String>
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    kmsKeyId String
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    name String

    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    certificateAuthorityConfig CertificateAuthorityCertificateAuthorityConfig
    (Updatable) The configuration details for creating a certificate authority (CA).
    compartmentId string
    (Updatable) The compartment in which you want to create the CA.
    certificateAuthorityRules CertificateAuthorityCertificateAuthorityRule[]
    (Updatable) A list of rules that control how the CA is used and managed.
    certificateRevocationListDetails CertificateAuthorityCertificateRevocationListDetails
    (Updatable) The details of the certificate revocation list (CRL).
    definedTags {[key: string]: string}
    (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    description string
    (Updatable) A brief description of the CA.
    externalKeyDescription string
    (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
    freeformTags {[key: string]: string}
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    kmsKeyId string
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    name string

    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    certificate_authority_config CertificateAuthorityCertificateAuthorityConfigArgs
    (Updatable) The configuration details for creating a certificate authority (CA).
    compartment_id str
    (Updatable) The compartment in which you want to create the CA.
    certificate_authority_rules Sequence[CertificateAuthorityCertificateAuthorityRuleArgs]
    (Updatable) A list of rules that control how the CA is used and managed.
    certificate_revocation_list_details CertificateAuthorityCertificateRevocationListDetailsArgs
    (Updatable) The details of the certificate revocation list (CRL).
    defined_tags Mapping[str, str]
    (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    description str
    (Updatable) A brief description of the CA.
    external_key_description str
    (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
    freeform_tags Mapping[str, str]
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    kms_key_id str
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    name str

    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    certificateAuthorityConfig Property Map
    (Updatable) The configuration details for creating a certificate authority (CA).
    compartmentId String
    (Updatable) The compartment in which you want to create the CA.
    certificateAuthorityRules List<Property Map>
    (Updatable) A list of rules that control how the CA is used and managed.
    certificateRevocationListDetails Property Map
    (Updatable) The details of the certificate revocation list (CRL).
    definedTags Map<String>
    (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    description String
    (Updatable) A brief description of the CA.
    externalKeyDescription String
    (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
    freeformTags Map<String>
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    kmsKeyId String
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    name String

    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CertificateAuthority resource produces the following output properties:

    ConfigType string
    The origin of the CA.
    CurrentVersions List<CertificateAuthorityCurrentVersion>
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    Id string
    The provider-assigned unique ID for this managed resource.
    IssuerCertificateAuthorityId string
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    LifecycleDetails string
    Additional information about the current CA lifecycle state.
    SigningAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    State string
    The current lifecycle state of the certificate authority.
    Subjects List<CertificateAuthoritySubject>
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    TimeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    ConfigType string
    The origin of the CA.
    CurrentVersions []CertificateAuthorityCurrentVersion
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    Id string
    The provider-assigned unique ID for this managed resource.
    IssuerCertificateAuthorityId string
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    LifecycleDetails string
    Additional information about the current CA lifecycle state.
    SigningAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    State string
    The current lifecycle state of the certificate authority.
    Subjects []CertificateAuthoritySubject
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    TimeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    configType String
    The origin of the CA.
    currentVersions List<CertificateAuthorityCurrentVersion>
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    id String
    The provider-assigned unique ID for this managed resource.
    issuerCertificateAuthorityId String
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    lifecycleDetails String
    Additional information about the current CA lifecycle state.
    signingAlgorithm String
    The algorithm used to sign public key certificates that the CA issues.
    state String
    The current lifecycle state of the certificate authority.
    subjects List<CertificateAuthoritySubject>
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    timeCreated String
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion String
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    configType string
    The origin of the CA.
    currentVersions CertificateAuthorityCurrentVersion[]
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    id string
    The provider-assigned unique ID for this managed resource.
    issuerCertificateAuthorityId string
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    lifecycleDetails string
    Additional information about the current CA lifecycle state.
    signingAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    state string
    The current lifecycle state of the certificate authority.
    subjects CertificateAuthoritySubject[]
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    timeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    config_type str
    The origin of the CA.
    current_versions Sequence[CertificateAuthorityCurrentVersion]
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    id str
    The provider-assigned unique ID for this managed resource.
    issuer_certificate_authority_id str
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    lifecycle_details str
    Additional information about the current CA lifecycle state.
    signing_algorithm str
    The algorithm used to sign public key certificates that the CA issues.
    state str
    The current lifecycle state of the certificate authority.
    subjects Sequence[CertificateAuthoritySubject]
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    time_created str
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_deletion str
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    configType String
    The origin of the CA.
    currentVersions List<Property Map>
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    id String
    The provider-assigned unique ID for this managed resource.
    issuerCertificateAuthorityId String
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    lifecycleDetails String
    Additional information about the current CA lifecycle state.
    signingAlgorithm String
    The algorithm used to sign public key certificates that the CA issues.
    state String
    The current lifecycle state of the certificate authority.
    subjects List<Property Map>
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    timeCreated String
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion String
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

    Look up Existing CertificateAuthority Resource

    Get an existing CertificateAuthority resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CertificateAuthorityState, opts?: CustomResourceOptions): CertificateAuthority
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            certificate_authority_config: Optional[CertificateAuthorityCertificateAuthorityConfigArgs] = None,
            certificate_authority_rules: Optional[Sequence[CertificateAuthorityCertificateAuthorityRuleArgs]] = None,
            certificate_revocation_list_details: Optional[CertificateAuthorityCertificateRevocationListDetailsArgs] = None,
            compartment_id: Optional[str] = None,
            config_type: Optional[str] = None,
            current_versions: Optional[Sequence[CertificateAuthorityCurrentVersionArgs]] = None,
            defined_tags: Optional[Mapping[str, str]] = None,
            description: Optional[str] = None,
            external_key_description: Optional[str] = None,
            freeform_tags: Optional[Mapping[str, str]] = None,
            issuer_certificate_authority_id: Optional[str] = None,
            kms_key_id: Optional[str] = None,
            lifecycle_details: Optional[str] = None,
            name: Optional[str] = None,
            signing_algorithm: Optional[str] = None,
            state: Optional[str] = None,
            subjects: Optional[Sequence[CertificateAuthoritySubjectArgs]] = None,
            time_created: Optional[str] = None,
            time_of_deletion: Optional[str] = None) -> CertificateAuthority
    func GetCertificateAuthority(ctx *Context, name string, id IDInput, state *CertificateAuthorityState, opts ...ResourceOption) (*CertificateAuthority, error)
    public static CertificateAuthority Get(string name, Input<string> id, CertificateAuthorityState? state, CustomResourceOptions? opts = null)
    public static CertificateAuthority get(String name, Output<String> id, CertificateAuthorityState state, CustomResourceOptions options)
    resources:  _:    type: oci:CertificatesManagement:CertificateAuthority    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CertificateAuthorityConfig CertificateAuthorityCertificateAuthorityConfig
    (Updatable) The configuration details for creating a certificate authority (CA).
    CertificateAuthorityRules List<CertificateAuthorityCertificateAuthorityRule>
    (Updatable) A list of rules that control how the CA is used and managed.
    CertificateRevocationListDetails CertificateAuthorityCertificateRevocationListDetails
    (Updatable) The details of the certificate revocation list (CRL).
    CompartmentId string
    (Updatable) The compartment in which you want to create the CA.
    ConfigType string
    The origin of the CA.
    CurrentVersions List<CertificateAuthorityCurrentVersion>
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    DefinedTags Dictionary<string, string>
    (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    Description string
    (Updatable) A brief description of the CA.
    ExternalKeyDescription string
    (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
    FreeformTags Dictionary<string, string>
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    IssuerCertificateAuthorityId string
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    KmsKeyId string
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    LifecycleDetails string
    Additional information about the current CA lifecycle state.
    Name string

    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    SigningAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    State string
    The current lifecycle state of the certificate authority.
    Subjects List<CertificateAuthoritySubject>
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    TimeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    CertificateAuthorityConfig CertificateAuthorityCertificateAuthorityConfigArgs
    (Updatable) The configuration details for creating a certificate authority (CA).
    CertificateAuthorityRules []CertificateAuthorityCertificateAuthorityRuleArgs
    (Updatable) A list of rules that control how the CA is used and managed.
    CertificateRevocationListDetails CertificateAuthorityCertificateRevocationListDetailsArgs
    (Updatable) The details of the certificate revocation list (CRL).
    CompartmentId string
    (Updatable) The compartment in which you want to create the CA.
    ConfigType string
    The origin of the CA.
    CurrentVersions []CertificateAuthorityCurrentVersionArgs
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    DefinedTags map[string]string
    (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    Description string
    (Updatable) A brief description of the CA.
    ExternalKeyDescription string
    (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
    FreeformTags map[string]string
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    IssuerCertificateAuthorityId string
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    KmsKeyId string
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    LifecycleDetails string
    Additional information about the current CA lifecycle state.
    Name string

    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    SigningAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    State string
    The current lifecycle state of the certificate authority.
    Subjects []CertificateAuthoritySubjectArgs
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    TimeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    certificateAuthorityConfig CertificateAuthorityCertificateAuthorityConfig
    (Updatable) The configuration details for creating a certificate authority (CA).
    certificateAuthorityRules List<CertificateAuthorityCertificateAuthorityRule>
    (Updatable) A list of rules that control how the CA is used and managed.
    certificateRevocationListDetails CertificateAuthorityCertificateRevocationListDetails
    (Updatable) The details of the certificate revocation list (CRL).
    compartmentId String
    (Updatable) The compartment in which you want to create the CA.
    configType String
    The origin of the CA.
    currentVersions List<CertificateAuthorityCurrentVersion>
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    definedTags Map<String,String>
    (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    description String
    (Updatable) A brief description of the CA.
    externalKeyDescription String
    (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
    freeformTags Map<String,String>
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    issuerCertificateAuthorityId String
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    kmsKeyId String
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    lifecycleDetails String
    Additional information about the current CA lifecycle state.
    name String

    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    signingAlgorithm String
    The algorithm used to sign public key certificates that the CA issues.
    state String
    The current lifecycle state of the certificate authority.
    subjects List<CertificateAuthoritySubject>
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    timeCreated String
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion String
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    certificateAuthorityConfig CertificateAuthorityCertificateAuthorityConfig
    (Updatable) The configuration details for creating a certificate authority (CA).
    certificateAuthorityRules CertificateAuthorityCertificateAuthorityRule[]
    (Updatable) A list of rules that control how the CA is used and managed.
    certificateRevocationListDetails CertificateAuthorityCertificateRevocationListDetails
    (Updatable) The details of the certificate revocation list (CRL).
    compartmentId string
    (Updatable) The compartment in which you want to create the CA.
    configType string
    The origin of the CA.
    currentVersions CertificateAuthorityCurrentVersion[]
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    definedTags {[key: string]: string}
    (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    description string
    (Updatable) A brief description of the CA.
    externalKeyDescription string
    (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
    freeformTags {[key: string]: string}
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    issuerCertificateAuthorityId string
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    kmsKeyId string
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    lifecycleDetails string
    Additional information about the current CA lifecycle state.
    name string

    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    signingAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    state string
    The current lifecycle state of the certificate authority.
    subjects CertificateAuthoritySubject[]
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    timeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    certificate_authority_config CertificateAuthorityCertificateAuthorityConfigArgs
    (Updatable) The configuration details for creating a certificate authority (CA).
    certificate_authority_rules Sequence[CertificateAuthorityCertificateAuthorityRuleArgs]
    (Updatable) A list of rules that control how the CA is used and managed.
    certificate_revocation_list_details CertificateAuthorityCertificateRevocationListDetailsArgs
    (Updatable) The details of the certificate revocation list (CRL).
    compartment_id str
    (Updatable) The compartment in which you want to create the CA.
    config_type str
    The origin of the CA.
    current_versions Sequence[CertificateAuthorityCurrentVersionArgs]
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    defined_tags Mapping[str, str]
    (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    description str
    (Updatable) A brief description of the CA.
    external_key_description str
    (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
    freeform_tags Mapping[str, str]
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    issuer_certificate_authority_id str
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    kms_key_id str
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    lifecycle_details str
    Additional information about the current CA lifecycle state.
    name str

    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    signing_algorithm str
    The algorithm used to sign public key certificates that the CA issues.
    state str
    The current lifecycle state of the certificate authority.
    subjects Sequence[CertificateAuthoritySubjectArgs]
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    time_created str
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_deletion str
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    certificateAuthorityConfig Property Map
    (Updatable) The configuration details for creating a certificate authority (CA).
    certificateAuthorityRules List<Property Map>
    (Updatable) A list of rules that control how the CA is used and managed.
    certificateRevocationListDetails Property Map
    (Updatable) The details of the certificate revocation list (CRL).
    compartmentId String
    (Updatable) The compartment in which you want to create the CA.
    configType String
    The origin of the CA.
    currentVersions List<Property Map>
    The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
    definedTags Map<String>
    (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: {"foo-namespace.bar-key": "value"}
    description String
    (Updatable) A brief description of the CA.
    externalKeyDescription String
    (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
    freeformTags Map<String>
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    issuerCertificateAuthorityId String
    The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
    kmsKeyId String
    The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
    lifecycleDetails String
    Additional information about the current CA lifecycle state.
    name String

    A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    signingAlgorithm String
    The algorithm used to sign public key certificates that the CA issues.
    state String
    The current lifecycle state of the certificate authority.
    subjects List<Property Map>
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    timeCreated String
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion String
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

    Supporting Types

    CertificateAuthorityCertificateAuthorityConfig, CertificateAuthorityCertificateAuthorityConfigArgs

    ConfigType string
    (Updatable) The origin of the CA.
    ActionDetails CertificateAuthorityCertificateAuthorityConfigActionDetails
    CertificatePem string
    (Updatable) The externally signed certificate (in PEM format) for the imported root CA.
    IssuerCertificateAuthorityId string
    The OCID of the private, external issuer CA.
    SigningAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    Subject CertificateAuthorityCertificateAuthorityConfigSubject
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    Validity CertificateAuthorityCertificateAuthorityConfigValidity
    (Updatable) An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    VersionName string
    (Updatable) The name of the CA version. When the value is not null, a name is unique across versions of a given CA.
    ConfigType string
    (Updatable) The origin of the CA.
    ActionDetails CertificateAuthorityCertificateAuthorityConfigActionDetails
    CertificatePem string
    (Updatable) The externally signed certificate (in PEM format) for the imported root CA.
    IssuerCertificateAuthorityId string
    The OCID of the private, external issuer CA.
    SigningAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    Subject CertificateAuthorityCertificateAuthorityConfigSubject
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    Validity CertificateAuthorityCertificateAuthorityConfigValidity
    (Updatable) An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    VersionName string
    (Updatable) The name of the CA version. When the value is not null, a name is unique across versions of a given CA.
    configType String
    (Updatable) The origin of the CA.
    actionDetails CertificateAuthorityCertificateAuthorityConfigActionDetails
    certificatePem String
    (Updatable) The externally signed certificate (in PEM format) for the imported root CA.
    issuerCertificateAuthorityId String
    The OCID of the private, external issuer CA.
    signingAlgorithm String
    The algorithm used to sign public key certificates that the CA issues.
    subject CertificateAuthorityCertificateAuthorityConfigSubject
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    validity CertificateAuthorityCertificateAuthorityConfigValidity
    (Updatable) An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    versionName String
    (Updatable) The name of the CA version. When the value is not null, a name is unique across versions of a given CA.
    configType string
    (Updatable) The origin of the CA.
    actionDetails CertificateAuthorityCertificateAuthorityConfigActionDetails
    certificatePem string
    (Updatable) The externally signed certificate (in PEM format) for the imported root CA.
    issuerCertificateAuthorityId string
    The OCID of the private, external issuer CA.
    signingAlgorithm string
    The algorithm used to sign public key certificates that the CA issues.
    subject CertificateAuthorityCertificateAuthorityConfigSubject
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    validity CertificateAuthorityCertificateAuthorityConfigValidity
    (Updatable) An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    versionName string
    (Updatable) The name of the CA version. When the value is not null, a name is unique across versions of a given CA.
    config_type str
    (Updatable) The origin of the CA.
    action_details CertificateAuthorityCertificateAuthorityConfigActionDetails
    certificate_pem str
    (Updatable) The externally signed certificate (in PEM format) for the imported root CA.
    issuer_certificate_authority_id str
    The OCID of the private, external issuer CA.
    signing_algorithm str
    The algorithm used to sign public key certificates that the CA issues.
    subject CertificateAuthorityCertificateAuthorityConfigSubject
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    validity CertificateAuthorityCertificateAuthorityConfigValidity
    (Updatable) An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    version_name str
    (Updatable) The name of the CA version. When the value is not null, a name is unique across versions of a given CA.
    configType String
    (Updatable) The origin of the CA.
    actionDetails Property Map
    certificatePem String
    (Updatable) The externally signed certificate (in PEM format) for the imported root CA.
    issuerCertificateAuthorityId String
    The OCID of the private, external issuer CA.
    signingAlgorithm String
    The algorithm used to sign public key certificates that the CA issues.
    subject Property Map
    The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
    validity Property Map
    (Updatable) An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    versionName String
    (Updatable) The name of the CA version. When the value is not null, a name is unique across versions of a given CA.

    CertificateAuthorityCertificateAuthorityConfigActionDetails, CertificateAuthorityCertificateAuthorityConfigActionDetailsArgs

    ActionType string
    CertificatePem string
    (Updatable) The externally signed certificate (in PEM format) for the imported root CA.
    ActionType string
    CertificatePem string
    (Updatable) The externally signed certificate (in PEM format) for the imported root CA.
    actionType String
    certificatePem String
    (Updatable) The externally signed certificate (in PEM format) for the imported root CA.
    actionType string
    certificatePem string
    (Updatable) The externally signed certificate (in PEM format) for the imported root CA.
    action_type str
    certificate_pem str
    (Updatable) The externally signed certificate (in PEM format) for the imported root CA.
    actionType String
    certificatePem String
    (Updatable) The externally signed certificate (in PEM format) for the imported root CA.

    CertificateAuthorityCertificateAuthorityConfigSubject, CertificateAuthorityCertificateAuthorityConfigSubjectArgs

    CommonName string
    Common name or fully-qualified domain name (RDN CN).
    Country string
    Country name (RDN C).
    DistinguishedNameQualifier string
    Distinguished name qualifier(RDN DNQ).
    DomainComponent string
    Domain component (RDN DC).
    GenerationQualifier string
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    GivenName string
    Personal given name (RDN G or GN).
    Initials string
    Personal initials.
    LocalityName string
    Locality (RDN L).
    Organization string
    Organization (RDN O).
    OrganizationalUnit string
    Organizational unit (RDN OU).
    Pseudonym string
    Subject pseudonym.
    SerialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    StateOrProvinceName string
    State or province name (RDN ST or S).
    Street string
    Street address (RDN STREET).
    Surname string
    Personal surname (RDN SN).
    Title string
    Title (RDN T or TITLE).
    UserId string
    User ID (RDN UID).
    CommonName string
    Common name or fully-qualified domain name (RDN CN).
    Country string
    Country name (RDN C).
    DistinguishedNameQualifier string
    Distinguished name qualifier(RDN DNQ).
    DomainComponent string
    Domain component (RDN DC).
    GenerationQualifier string
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    GivenName string
    Personal given name (RDN G or GN).
    Initials string
    Personal initials.
    LocalityName string
    Locality (RDN L).
    Organization string
    Organization (RDN O).
    OrganizationalUnit string
    Organizational unit (RDN OU).
    Pseudonym string
    Subject pseudonym.
    SerialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    StateOrProvinceName string
    State or province name (RDN ST or S).
    Street string
    Street address (RDN STREET).
    Surname string
    Personal surname (RDN SN).
    Title string
    Title (RDN T or TITLE).
    UserId string
    User ID (RDN UID).
    commonName String
    Common name or fully-qualified domain name (RDN CN).
    country String
    Country name (RDN C).
    distinguishedNameQualifier String
    Distinguished name qualifier(RDN DNQ).
    domainComponent String
    Domain component (RDN DC).
    generationQualifier String
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    givenName String
    Personal given name (RDN G or GN).
    initials String
    Personal initials.
    localityName String
    Locality (RDN L).
    organization String
    Organization (RDN O).
    organizationalUnit String
    Organizational unit (RDN OU).
    pseudonym String
    Subject pseudonym.
    serialNumber String
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stateOrProvinceName String
    State or province name (RDN ST or S).
    street String
    Street address (RDN STREET).
    surname String
    Personal surname (RDN SN).
    title String
    Title (RDN T or TITLE).
    userId String
    User ID (RDN UID).
    commonName string
    Common name or fully-qualified domain name (RDN CN).
    country string
    Country name (RDN C).
    distinguishedNameQualifier string
    Distinguished name qualifier(RDN DNQ).
    domainComponent string
    Domain component (RDN DC).
    generationQualifier string
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    givenName string
    Personal given name (RDN G or GN).
    initials string
    Personal initials.
    localityName string
    Locality (RDN L).
    organization string
    Organization (RDN O).
    organizationalUnit string
    Organizational unit (RDN OU).
    pseudonym string
    Subject pseudonym.
    serialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stateOrProvinceName string
    State or province name (RDN ST or S).
    street string
    Street address (RDN STREET).
    surname string
    Personal surname (RDN SN).
    title string
    Title (RDN T or TITLE).
    userId string
    User ID (RDN UID).
    common_name str
    Common name or fully-qualified domain name (RDN CN).
    country str
    Country name (RDN C).
    distinguished_name_qualifier str
    Distinguished name qualifier(RDN DNQ).
    domain_component str
    Domain component (RDN DC).
    generation_qualifier str
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    given_name str
    Personal given name (RDN G or GN).
    initials str
    Personal initials.
    locality_name str
    Locality (RDN L).
    organization str
    Organization (RDN O).
    organizational_unit str
    Organizational unit (RDN OU).
    pseudonym str
    Subject pseudonym.
    serial_number str
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    state_or_province_name str
    State or province name (RDN ST or S).
    street str
    Street address (RDN STREET).
    surname str
    Personal surname (RDN SN).
    title str
    Title (RDN T or TITLE).
    user_id str
    User ID (RDN UID).
    commonName String
    Common name or fully-qualified domain name (RDN CN).
    country String
    Country name (RDN C).
    distinguishedNameQualifier String
    Distinguished name qualifier(RDN DNQ).
    domainComponent String
    Domain component (RDN DC).
    generationQualifier String
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    givenName String
    Personal given name (RDN G or GN).
    initials String
    Personal initials.
    localityName String
    Locality (RDN L).
    organization String
    Organization (RDN O).
    organizationalUnit String
    Organizational unit (RDN OU).
    pseudonym String
    Subject pseudonym.
    serialNumber String
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stateOrProvinceName String
    State or province name (RDN ST or S).
    street String
    Street address (RDN STREET).
    surname String
    Personal surname (RDN SN).
    title String
    Title (RDN T or TITLE).
    userId String
    User ID (RDN UID).

    CertificateAuthorityCertificateAuthorityConfigValidity, CertificateAuthorityCertificateAuthorityConfigValidityArgs

    TimeOfValidityNotAfter string
    (Updatable) The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfValidityNotBefore string
    (Updatable) The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfValidityNotAfter string
    (Updatable) The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfValidityNotBefore string
    (Updatable) The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotAfter String
    (Updatable) The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotBefore String
    (Updatable) The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotAfter string
    (Updatable) The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotBefore string
    (Updatable) The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_validity_not_after str
    (Updatable) The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_validity_not_before str
    (Updatable) The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotAfter String
    (Updatable) The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotBefore String
    (Updatable) The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

    CertificateAuthorityCertificateAuthorityRule, CertificateAuthorityCertificateAuthorityRuleArgs

    RuleType string
    (Updatable) The type of rule, whether an issuance rule that defines the constraints which restricts the hierarchical name forms in certificates or number of levels of descendants that any CA in the certificate chain issues or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid.
    CertificateAuthorityMaxValidityDuration string
    (Updatable) A property indicating the maximum validity duration, in days, of subordinate CA's issued by this CA. Expressed in ISO 8601 format.
    LeafCertificateMaxValidityDuration string
    (Updatable) A property indicating the maximum validity duration, in days, of leaf certificates issued by this CA. Expressed in ISO 8601 format.
    NameConstraint CertificateAuthorityCertificateAuthorityRuleNameConstraint
    A constraint that specifies permitted and excluded namespaces for the hierarchical name forms in certificates that any CA in the certificate chain issues. You can define name constraints on a directory name, DNS address, or IP address. If you have a name constraint, you must define at least one permitted namespace or one excluded namespace. Name constraints cannot be updated.
    PathLengthConstraint int
    The number of levels of descendants that this certificate authority (CA) can issue. When set to zero, the CA can issue only leaf certificates. There is no limit if the constraint isn't specified. Path length constraints cannot be updated.
    RuleType string
    (Updatable) The type of rule, whether an issuance rule that defines the constraints which restricts the hierarchical name forms in certificates or number of levels of descendants that any CA in the certificate chain issues or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid.
    CertificateAuthorityMaxValidityDuration string
    (Updatable) A property indicating the maximum validity duration, in days, of subordinate CA's issued by this CA. Expressed in ISO 8601 format.
    LeafCertificateMaxValidityDuration string
    (Updatable) A property indicating the maximum validity duration, in days, of leaf certificates issued by this CA. Expressed in ISO 8601 format.
    NameConstraint CertificateAuthorityCertificateAuthorityRuleNameConstraint
    A constraint that specifies permitted and excluded namespaces for the hierarchical name forms in certificates that any CA in the certificate chain issues. You can define name constraints on a directory name, DNS address, or IP address. If you have a name constraint, you must define at least one permitted namespace or one excluded namespace. Name constraints cannot be updated.
    PathLengthConstraint int
    The number of levels of descendants that this certificate authority (CA) can issue. When set to zero, the CA can issue only leaf certificates. There is no limit if the constraint isn't specified. Path length constraints cannot be updated.
    ruleType String
    (Updatable) The type of rule, whether an issuance rule that defines the constraints which restricts the hierarchical name forms in certificates or number of levels of descendants that any CA in the certificate chain issues or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid.
    certificateAuthorityMaxValidityDuration String
    (Updatable) A property indicating the maximum validity duration, in days, of subordinate CA's issued by this CA. Expressed in ISO 8601 format.
    leafCertificateMaxValidityDuration String
    (Updatable) A property indicating the maximum validity duration, in days, of leaf certificates issued by this CA. Expressed in ISO 8601 format.
    nameConstraint CertificateAuthorityCertificateAuthorityRuleNameConstraint
    A constraint that specifies permitted and excluded namespaces for the hierarchical name forms in certificates that any CA in the certificate chain issues. You can define name constraints on a directory name, DNS address, or IP address. If you have a name constraint, you must define at least one permitted namespace or one excluded namespace. Name constraints cannot be updated.
    pathLengthConstraint Integer
    The number of levels of descendants that this certificate authority (CA) can issue. When set to zero, the CA can issue only leaf certificates. There is no limit if the constraint isn't specified. Path length constraints cannot be updated.
    ruleType string
    (Updatable) The type of rule, whether an issuance rule that defines the constraints which restricts the hierarchical name forms in certificates or number of levels of descendants that any CA in the certificate chain issues or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid.
    certificateAuthorityMaxValidityDuration string
    (Updatable) A property indicating the maximum validity duration, in days, of subordinate CA's issued by this CA. Expressed in ISO 8601 format.
    leafCertificateMaxValidityDuration string
    (Updatable) A property indicating the maximum validity duration, in days, of leaf certificates issued by this CA. Expressed in ISO 8601 format.
    nameConstraint CertificateAuthorityCertificateAuthorityRuleNameConstraint
    A constraint that specifies permitted and excluded namespaces for the hierarchical name forms in certificates that any CA in the certificate chain issues. You can define name constraints on a directory name, DNS address, or IP address. If you have a name constraint, you must define at least one permitted namespace or one excluded namespace. Name constraints cannot be updated.
    pathLengthConstraint number
    The number of levels of descendants that this certificate authority (CA) can issue. When set to zero, the CA can issue only leaf certificates. There is no limit if the constraint isn't specified. Path length constraints cannot be updated.
    rule_type str
    (Updatable) The type of rule, whether an issuance rule that defines the constraints which restricts the hierarchical name forms in certificates or number of levels of descendants that any CA in the certificate chain issues or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid.
    certificate_authority_max_validity_duration str
    (Updatable) A property indicating the maximum validity duration, in days, of subordinate CA's issued by this CA. Expressed in ISO 8601 format.
    leaf_certificate_max_validity_duration str
    (Updatable) A property indicating the maximum validity duration, in days, of leaf certificates issued by this CA. Expressed in ISO 8601 format.
    name_constraint CertificateAuthorityCertificateAuthorityRuleNameConstraint
    A constraint that specifies permitted and excluded namespaces for the hierarchical name forms in certificates that any CA in the certificate chain issues. You can define name constraints on a directory name, DNS address, or IP address. If you have a name constraint, you must define at least one permitted namespace or one excluded namespace. Name constraints cannot be updated.
    path_length_constraint int
    The number of levels of descendants that this certificate authority (CA) can issue. When set to zero, the CA can issue only leaf certificates. There is no limit if the constraint isn't specified. Path length constraints cannot be updated.
    ruleType String
    (Updatable) The type of rule, whether an issuance rule that defines the constraints which restricts the hierarchical name forms in certificates or number of levels of descendants that any CA in the certificate chain issues or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid.
    certificateAuthorityMaxValidityDuration String
    (Updatable) A property indicating the maximum validity duration, in days, of subordinate CA's issued by this CA. Expressed in ISO 8601 format.
    leafCertificateMaxValidityDuration String
    (Updatable) A property indicating the maximum validity duration, in days, of leaf certificates issued by this CA. Expressed in ISO 8601 format.
    nameConstraint Property Map
    A constraint that specifies permitted and excluded namespaces for the hierarchical name forms in certificates that any CA in the certificate chain issues. You can define name constraints on a directory name, DNS address, or IP address. If you have a name constraint, you must define at least one permitted namespace or one excluded namespace. Name constraints cannot be updated.
    pathLengthConstraint Number
    The number of levels of descendants that this certificate authority (CA) can issue. When set to zero, the CA can issue only leaf certificates. There is no limit if the constraint isn't specified. Path length constraints cannot be updated.

    CertificateAuthorityCertificateAuthorityRuleNameConstraint, CertificateAuthorityCertificateAuthorityRuleNameConstraintArgs

    ExcludedSubtrees List<CertificateAuthorityCertificateAuthorityRuleNameConstraintExcludedSubtree>
    A list that contains excluded (or prohibited) namespaces. If you have a name constraint with no permitted namespaces, you must specify at least one excluded namespace.
    PermittedSubtrees List<CertificateAuthorityCertificateAuthorityRuleNameConstraintPermittedSubtree>
    A list that contains permitted namespaces. If you have a name constraint with no excluded namespaces, you must specify at least one permitted namespace.
    ExcludedSubtrees []CertificateAuthorityCertificateAuthorityRuleNameConstraintExcludedSubtree
    A list that contains excluded (or prohibited) namespaces. If you have a name constraint with no permitted namespaces, you must specify at least one excluded namespace.
    PermittedSubtrees []CertificateAuthorityCertificateAuthorityRuleNameConstraintPermittedSubtree
    A list that contains permitted namespaces. If you have a name constraint with no excluded namespaces, you must specify at least one permitted namespace.
    excludedSubtrees List<CertificateAuthorityCertificateAuthorityRuleNameConstraintExcludedSubtree>
    A list that contains excluded (or prohibited) namespaces. If you have a name constraint with no permitted namespaces, you must specify at least one excluded namespace.
    permittedSubtrees List<CertificateAuthorityCertificateAuthorityRuleNameConstraintPermittedSubtree>
    A list that contains permitted namespaces. If you have a name constraint with no excluded namespaces, you must specify at least one permitted namespace.
    excludedSubtrees CertificateAuthorityCertificateAuthorityRuleNameConstraintExcludedSubtree[]
    A list that contains excluded (or prohibited) namespaces. If you have a name constraint with no permitted namespaces, you must specify at least one excluded namespace.
    permittedSubtrees CertificateAuthorityCertificateAuthorityRuleNameConstraintPermittedSubtree[]
    A list that contains permitted namespaces. If you have a name constraint with no excluded namespaces, you must specify at least one permitted namespace.
    excluded_subtrees Sequence[CertificateAuthorityCertificateAuthorityRuleNameConstraintExcludedSubtree]
    A list that contains excluded (or prohibited) namespaces. If you have a name constraint with no permitted namespaces, you must specify at least one excluded namespace.
    permitted_subtrees Sequence[CertificateAuthorityCertificateAuthorityRuleNameConstraintPermittedSubtree]
    A list that contains permitted namespaces. If you have a name constraint with no excluded namespaces, you must specify at least one permitted namespace.
    excludedSubtrees List<Property Map>
    A list that contains excluded (or prohibited) namespaces. If you have a name constraint with no permitted namespaces, you must specify at least one excluded namespace.
    permittedSubtrees List<Property Map>
    A list that contains permitted namespaces. If you have a name constraint with no excluded namespaces, you must specify at least one permitted namespace.

    CertificateAuthorityCertificateAuthorityRuleNameConstraintExcludedSubtree, CertificateAuthorityCertificateAuthorityRuleNameConstraintExcludedSubtreeArgs

    Type string
    The type of name constraint.
    Value string
    Name restrictions for the corresponding type of name constraint.
    Type string
    The type of name constraint.
    Value string
    Name restrictions for the corresponding type of name constraint.
    type String
    The type of name constraint.
    value String
    Name restrictions for the corresponding type of name constraint.
    type string
    The type of name constraint.
    value string
    Name restrictions for the corresponding type of name constraint.
    type str
    The type of name constraint.
    value str
    Name restrictions for the corresponding type of name constraint.
    type String
    The type of name constraint.
    value String
    Name restrictions for the corresponding type of name constraint.

    CertificateAuthorityCertificateAuthorityRuleNameConstraintPermittedSubtree, CertificateAuthorityCertificateAuthorityRuleNameConstraintPermittedSubtreeArgs

    Type string
    The type of name constraint.
    Value string
    Name restrictions for the corresponding type of name constraint.
    Type string
    The type of name constraint.
    Value string
    Name restrictions for the corresponding type of name constraint.
    type String
    The type of name constraint.
    value String
    Name restrictions for the corresponding type of name constraint.
    type string
    The type of name constraint.
    value string
    Name restrictions for the corresponding type of name constraint.
    type str
    The type of name constraint.
    value str
    Name restrictions for the corresponding type of name constraint.
    type String
    The type of name constraint.
    value String
    Name restrictions for the corresponding type of name constraint.

    CertificateAuthorityCertificateRevocationListDetails, CertificateAuthorityCertificateRevocationListDetailsArgs

    ObjectStorageConfig CertificateAuthorityCertificateRevocationListDetailsObjectStorageConfig
    (Updatable) The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
    CustomFormattedUrls List<string>
    (Updatable) Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    ObjectStorageConfig CertificateAuthorityCertificateRevocationListDetailsObjectStorageConfig
    (Updatable) The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
    CustomFormattedUrls []string
    (Updatable) Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    objectStorageConfig CertificateAuthorityCertificateRevocationListDetailsObjectStorageConfig
    (Updatable) The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
    customFormattedUrls List<String>
    (Updatable) Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    objectStorageConfig CertificateAuthorityCertificateRevocationListDetailsObjectStorageConfig
    (Updatable) The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
    customFormattedUrls string[]
    (Updatable) Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    object_storage_config CertificateAuthorityCertificateRevocationListDetailsObjectStorageConfig
    (Updatable) The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
    custom_formatted_urls Sequence[str]
    (Updatable) Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    objectStorageConfig Property Map
    (Updatable) The details of the Object Storage bucket configured to store the certificate revocation list (CRL).
    customFormattedUrls List<String>
    (Updatable) Optional CRL access points, expressed using a format where the version number of the issuing CA is inserted wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.

    CertificateAuthorityCertificateRevocationListDetailsObjectStorageConfig, CertificateAuthorityCertificateRevocationListDetailsObjectStorageConfigArgs

    ObjectStorageBucketName string
    (Updatable) The name of the bucket where the CRL is stored.
    ObjectStorageObjectNameFormat string
    (Updatable) The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    ObjectStorageNamespace string
    (Updatable) The tenancy of the bucket where the CRL is stored.
    ObjectStorageBucketName string
    (Updatable) The name of the bucket where the CRL is stored.
    ObjectStorageObjectNameFormat string
    (Updatable) The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    ObjectStorageNamespace string
    (Updatable) The tenancy of the bucket where the CRL is stored.
    objectStorageBucketName String
    (Updatable) The name of the bucket where the CRL is stored.
    objectStorageObjectNameFormat String
    (Updatable) The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    objectStorageNamespace String
    (Updatable) The tenancy of the bucket where the CRL is stored.
    objectStorageBucketName string
    (Updatable) The name of the bucket where the CRL is stored.
    objectStorageObjectNameFormat string
    (Updatable) The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    objectStorageNamespace string
    (Updatable) The tenancy of the bucket where the CRL is stored.
    object_storage_bucket_name str
    (Updatable) The name of the bucket where the CRL is stored.
    object_storage_object_name_format str
    (Updatable) The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    object_storage_namespace str
    (Updatable) The tenancy of the bucket where the CRL is stored.
    objectStorageBucketName String
    (Updatable) The name of the bucket where the CRL is stored.
    objectStorageObjectNameFormat String
    (Updatable) The object name in the bucket where the CRL is stored, expressed using a format where the version number of the issuing CA is inserted as part of the Object Storage object name wherever you include a pair of curly braces. This versioning scheme helps avoid collisions when new CA versions are created. For example, myCrlFileIssuedFromCAVersion{}.crl becomes myCrlFileIssuedFromCAVersion2.crl for CA version 2.
    objectStorageNamespace String
    (Updatable) The tenancy of the bucket where the CRL is stored.

    CertificateAuthorityCurrentVersion, CertificateAuthorityCurrentVersionArgs

    CertificateAuthorityId string
    The OCID of the CA.
    IssuerCaVersionNumber string
    The version number of the issuing CA.
    RevocationStatuses List<CertificateAuthorityCurrentVersionRevocationStatus>
    The current revocation status of the entity.
    SerialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    Stages List<string>
    A list of rotation states for this CA version.
    TimeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    Validities List<CertificateAuthorityCurrentVersionValidity>
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    VersionName string
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    VersionNumber string
    The version number of the CA.
    CertificateAuthorityId string
    The OCID of the CA.
    IssuerCaVersionNumber string
    The version number of the issuing CA.
    RevocationStatuses []CertificateAuthorityCurrentVersionRevocationStatus
    The current revocation status of the entity.
    SerialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    Stages []string
    A list of rotation states for this CA version.
    TimeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    Validities []CertificateAuthorityCurrentVersionValidity
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    VersionName string
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    VersionNumber string
    The version number of the CA.
    certificateAuthorityId String
    The OCID of the CA.
    issuerCaVersionNumber String
    The version number of the issuing CA.
    revocationStatuses List<CertificateAuthorityCurrentVersionRevocationStatus>
    The current revocation status of the entity.
    serialNumber String
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stages List<String>
    A list of rotation states for this CA version.
    timeCreated String
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion String
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    validities List<CertificateAuthorityCurrentVersionValidity>
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    versionName String
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    versionNumber String
    The version number of the CA.
    certificateAuthorityId string
    The OCID of the CA.
    issuerCaVersionNumber string
    The version number of the issuing CA.
    revocationStatuses CertificateAuthorityCurrentVersionRevocationStatus[]
    The current revocation status of the entity.
    serialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stages string[]
    A list of rotation states for this CA version.
    timeCreated string
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion string
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    validities CertificateAuthorityCurrentVersionValidity[]
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    versionName string
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    versionNumber string
    The version number of the CA.
    certificate_authority_id str
    The OCID of the CA.
    issuer_ca_version_number str
    The version number of the issuing CA.
    revocation_statuses Sequence[CertificateAuthorityCurrentVersionRevocationStatus]
    The current revocation status of the entity.
    serial_number str
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stages Sequence[str]
    A list of rotation states for this CA version.
    time_created str
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_deletion str
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    validities Sequence[CertificateAuthorityCurrentVersionValidity]
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    version_name str
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    version_number str
    The version number of the CA.
    certificateAuthorityId String
    The OCID of the CA.
    issuerCaVersionNumber String
    The version number of the issuing CA.
    revocationStatuses List<Property Map>
    The current revocation status of the entity.
    serialNumber String
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stages List<String>
    A list of rotation states for this CA version.
    timeCreated String
    A property indicating when the CA was created, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfDeletion String
    An optional property indicating when to delete the CA version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    validities List<Property Map>
    An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.
    versionName String
    The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.
    versionNumber String
    The version number of the CA.

    CertificateAuthorityCurrentVersionRevocationStatus, CertificateAuthorityCurrentVersionRevocationStatusArgs

    RevocationReason string
    The reason the certificate or certificate authority (CA) was revoked.
    TimeOfRevocation string
    The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    RevocationReason string
    The reason the certificate or certificate authority (CA) was revoked.
    TimeOfRevocation string
    The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    revocationReason String
    The reason the certificate or certificate authority (CA) was revoked.
    timeOfRevocation String
    The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    revocationReason string
    The reason the certificate or certificate authority (CA) was revoked.
    timeOfRevocation string
    The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    revocation_reason str
    The reason the certificate or certificate authority (CA) was revoked.
    time_of_revocation str
    The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    revocationReason String
    The reason the certificate or certificate authority (CA) was revoked.
    timeOfRevocation String
    The time when the entity was revoked, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

    CertificateAuthorityCurrentVersionValidity, CertificateAuthorityCurrentVersionValidityArgs

    TimeOfValidityNotAfter string
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfValidityNotBefore string
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfValidityNotAfter string
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    TimeOfValidityNotBefore string
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotAfter String
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotBefore String
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotAfter string
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotBefore string
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_validity_not_after str
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    time_of_validity_not_before str
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotAfter String
    The date on which the certificate validity period ends, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
    timeOfValidityNotBefore String
    The date on which the certificate validity period begins, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

    CertificateAuthoritySubject, CertificateAuthoritySubjectArgs

    CommonName string
    Common name or fully-qualified domain name (RDN CN).
    Country string
    Country name (RDN C).
    DistinguishedNameQualifier string
    Distinguished name qualifier(RDN DNQ).
    DomainComponent string
    Domain component (RDN DC).
    GenerationQualifier string
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    GivenName string
    Personal given name (RDN G or GN).
    Initials string
    Personal initials.
    LocalityName string
    Locality (RDN L).
    Organization string
    Organization (RDN O).
    OrganizationalUnit string
    Organizational unit (RDN OU).
    Pseudonym string
    Subject pseudonym.
    SerialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    StateOrProvinceName string
    State or province name (RDN ST or S).
    Street string
    Street address (RDN STREET).
    Surname string
    Personal surname (RDN SN).
    Title string
    Title (RDN T or TITLE).
    UserId string
    User ID (RDN UID).
    CommonName string
    Common name or fully-qualified domain name (RDN CN).
    Country string
    Country name (RDN C).
    DistinguishedNameQualifier string
    Distinguished name qualifier(RDN DNQ).
    DomainComponent string
    Domain component (RDN DC).
    GenerationQualifier string
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    GivenName string
    Personal given name (RDN G or GN).
    Initials string
    Personal initials.
    LocalityName string
    Locality (RDN L).
    Organization string
    Organization (RDN O).
    OrganizationalUnit string
    Organizational unit (RDN OU).
    Pseudonym string
    Subject pseudonym.
    SerialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    StateOrProvinceName string
    State or province name (RDN ST or S).
    Street string
    Street address (RDN STREET).
    Surname string
    Personal surname (RDN SN).
    Title string
    Title (RDN T or TITLE).
    UserId string
    User ID (RDN UID).
    commonName String
    Common name or fully-qualified domain name (RDN CN).
    country String
    Country name (RDN C).
    distinguishedNameQualifier String
    Distinguished name qualifier(RDN DNQ).
    domainComponent String
    Domain component (RDN DC).
    generationQualifier String
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    givenName String
    Personal given name (RDN G or GN).
    initials String
    Personal initials.
    localityName String
    Locality (RDN L).
    organization String
    Organization (RDN O).
    organizationalUnit String
    Organizational unit (RDN OU).
    pseudonym String
    Subject pseudonym.
    serialNumber String
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stateOrProvinceName String
    State or province name (RDN ST or S).
    street String
    Street address (RDN STREET).
    surname String
    Personal surname (RDN SN).
    title String
    Title (RDN T or TITLE).
    userId String
    User ID (RDN UID).
    commonName string
    Common name or fully-qualified domain name (RDN CN).
    country string
    Country name (RDN C).
    distinguishedNameQualifier string
    Distinguished name qualifier(RDN DNQ).
    domainComponent string
    Domain component (RDN DC).
    generationQualifier string
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    givenName string
    Personal given name (RDN G or GN).
    initials string
    Personal initials.
    localityName string
    Locality (RDN L).
    organization string
    Organization (RDN O).
    organizationalUnit string
    Organizational unit (RDN OU).
    pseudonym string
    Subject pseudonym.
    serialNumber string
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stateOrProvinceName string
    State or province name (RDN ST or S).
    street string
    Street address (RDN STREET).
    surname string
    Personal surname (RDN SN).
    title string
    Title (RDN T or TITLE).
    userId string
    User ID (RDN UID).
    common_name str
    Common name or fully-qualified domain name (RDN CN).
    country str
    Country name (RDN C).
    distinguished_name_qualifier str
    Distinguished name qualifier(RDN DNQ).
    domain_component str
    Domain component (RDN DC).
    generation_qualifier str
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    given_name str
    Personal given name (RDN G or GN).
    initials str
    Personal initials.
    locality_name str
    Locality (RDN L).
    organization str
    Organization (RDN O).
    organizational_unit str
    Organizational unit (RDN OU).
    pseudonym str
    Subject pseudonym.
    serial_number str
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    state_or_province_name str
    State or province name (RDN ST or S).
    street str
    Street address (RDN STREET).
    surname str
    Personal surname (RDN SN).
    title str
    Title (RDN T or TITLE).
    user_id str
    User ID (RDN UID).
    commonName String
    Common name or fully-qualified domain name (RDN CN).
    country String
    Country name (RDN C).
    distinguishedNameQualifier String
    Distinguished name qualifier(RDN DNQ).
    domainComponent String
    Domain component (RDN DC).
    generationQualifier String
    Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).
    givenName String
    Personal given name (RDN G or GN).
    initials String
    Personal initials.
    localityName String
    Locality (RDN L).
    organization String
    Organization (RDN O).
    organizationalUnit String
    Organizational unit (RDN OU).
    pseudonym String
    Subject pseudonym.
    serialNumber String
    Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).
    stateOrProvinceName String
    State or province name (RDN ST or S).
    street String
    Street address (RDN STREET).
    surname String
    Personal surname (RDN SN).
    title String
    Title (RDN T or TITLE).
    userId String
    User ID (RDN UID).

    Import

    CertificateAuthorities can be imported using the id, e.g.

    $ pulumi import oci:CertificatesManagement/certificateAuthority:CertificateAuthority test_certificate_authority "id"
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    oci pulumi/pulumi-oci
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the oci Terraform Provider.
    oci logo
    Oracle Cloud Infrastructure v3.16.0 published on Wednesday, Jan 28, 2026 by Pulumi
      Meet Neo: Your AI Platform Teammate