Trust store that contains trust anchors and optional intermediate CAs used in PKI to build a trust chain(trust hierarchy) and verify a client's identity.
| JSON representation | 
|---|
| { "trustAnchors": [ { object ( | 
| Fields | |
|---|---|
| trustAnchors[] | 
 Required. List of trust anchors to be used while performing validation against a given TrustStore. The incoming end entity's certificate must be in the trust chain of one of the trust anchors here. | 
| intermediateCas[] | 
 Optional. Set of intermediate CA certificates used for building the trust chain to the trust anchor. Important: Intermediate CAs are only supported for X.509 federation. | 
TrustAnchor
Represents a root of trust.
| JSON representation | 
|---|
| { // Union field | 
| Fields | |
|---|---|
| Union field  
 | |
| pemCertificate | 
 PEM certificate of the PKI used for validation. Must only contain one ca certificate(either root or intermediate cert). | 
IntermediateCA
Intermediate CA certificates used for building the trust chain to trust anchor
| JSON representation | 
|---|
| { // Union field | 
| Fields | |
|---|---|
| Union field  
 | |
| pemCertificate | 
 PEM certificate of the PKI used for validation. Must only contain one ca certificate. |