DescribedCertificate

The unique Amazon Resource Name (ARN) for the certificate.

Type: String

Length Constraints: Minimum length of 20. Maximum length of 1600.

Pattern: arn:\S+

Required: Yes

An optional date that specifies when the certificate becomes active. If you do not specify a value, ActiveDate takes the same value as NotBeforeDate, which is specified by the CA.

Type: Timestamp

Required: No

The file name for the certificate.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 16384.

Pattern: [\u0009\u000A\u000D\u0020-\u00FF]*

Required: No

The list of certificates that make up the chain for the certificate.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 2097152.

Pattern: [\u0009\u000A\u000D\u0020-\u00FF]*

Required: No

An array of identifiers for the imported certificates. You use this identifier for working with profiles and partner profiles.

Type: String

Length Constraints: Fixed length of 22.

Pattern: cert-([0-9a-f]{17})

Required: No

The name or description that's used to identity the certificate.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 200.

Pattern: [\p{Graph}]+

Required: No

An optional date that specifies when the certificate becomes inactive. If you do not specify a value, InactiveDate takes the same value as NotAfterDate, which is specified by the CA.

Type: Timestamp

Required: No

The final date that the certificate is valid.

Type: Timestamp

Required: No

The earliest date that the certificate is valid.

Type: Timestamp

Required: No

The serial number for the certificate.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 48.

Pattern: [\p{XDigit}{2}:?]*

Required: No

A certificate's status can be either ACTIVE or INACTIVE.

You can set ActiveDate and InactiveDate in the UpdateCertificate call. If you set values for these parameters, those values are used to determine whether the certificate has a status of ACTIVE or INACTIVE.

If you don't set values for ActiveDate and InactiveDate, we use the NotBefore and NotAfter date as specified on the X509 certificate to determine when a certificate is active and when it is inactive.

Type: String

Valid Values: ACTIVE | PENDING_ROTATION | INACTIVE

Required: No

Key-value pairs that can be used to group and search for certificates.

Type: Array of Tag objects

Array Members: Minimum number of 1 item. Maximum number of 50 items.

Required: No

If a private key has been specified for the certificate, its type is CERTIFICATE_WITH_PRIVATE_KEY. If there is no private key, the type is CERTIFICATE.

Type: String

Valid Values: CERTIFICATE | CERTIFICATE_WITH_PRIVATE_KEY

Required: No

Specifies how this certificate is used. It can be used in the following ways:

Type: String

Valid Values: SIGNING | ENCRYPTION | TLS

Required: No