Class CertificateAuthority (1.1.0)

Version 1.1.0

• 1.12.0 (latest)
• 1.11.0
• 1.10.3
• 1.9.0
• 1.8.1
• 1.7.1
• 1.6.1
• 1.5.0
• 1.4.3
• 1.3.2
• 1.2.4
• 1.1.0
• 1.0.6
• 0.4.0
• 0.3.0
• 0.1.1

CertificateAuthority(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A CertificateAuthority represents an individual Certificate Authority. A CertificateAuthority can be used to create Certificates.

Attributes
Name	Description
name	str Output only. The resource name for this CertificateAuthority in the format projects/*/locations/*/caPools/*/certificateAuthorities/*.
type_	google.cloud.security.privateca_v1.types.CertificateAuthority.Type Required. Immutable. The Type of this CertificateAuthority.
config	google.cloud.security.privateca_v1.types.CertificateConfig Required. Immutable. The config used to create a self-signed X.509 certificate or CSR.
lifetime	google.protobuf.duration_pb2.Duration Required. The desired lifetime of the CA certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate.
key_spec	google.cloud.security.privateca_v1.types.CertificateAuthority.KeyVersionSpec Required. Immutable. Used when issuing certificates for this CertificateAuthority. If this CertificateAuthority is a self-signed CertificateAuthority, this key is also used to sign the self-signed CA certificate. Otherwise, it is used to sign a CSR.
subordinate_config	google.cloud.security.privateca_v1.types.SubordinateConfig Optional. If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which describes its issuers. This may be updated, but this CertificateAuthority must continue to validate.
tier	google.cloud.security.privateca_v1.types.CaPool.Tier Output only. The CaPool.Tier of the CaPool that includes this CertificateAuthority.
state	google.cloud.security.privateca_v1.types.CertificateAuthority.State Output only. The State for this CertificateAuthority.
pem_ca_certificates	Sequence[str] Output only. This CertificateAuthority's certificate chain, including the current CertificateAuthority's certificate. Ordered such that the root issuer is the final element (consistent with RFC 5246). For a self-signed CA, this will only list the current CertificateAuthority's certificate.
ca_certificate_descriptions	Sequence[google.cloud.security.privateca_v1.types.CertificateDescription] Output only. A structured description of this CertificateAuthority's CA certificate and its issuers. Ordered as self-to-root.
gcs_bucket	str Immutable. The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and CRLs. This must be a bucket name, without any prefixes (such as gs://) or suffixes (such as .googleapis.com). For example, to use a bucket named my-bucket, you would simply specify my-bucket. If not specified, a managed bucket will be created.
access_urls	google.cloud.security.privateca_v1.types.CertificateAuthority.AccessUrls Output only. URLs for accessing content published by this CA, such as the CA certificate and CRLs.
create_time	google.protobuf.timestamp_pb2.Timestamp Output only. The time at which this CertificateAuthority was created.
update_time	google.protobuf.timestamp_pb2.Timestamp Output only. The time at which this CertificateAuthority was last updated.
delete_time	google.protobuf.timestamp_pb2.Timestamp Output only. The time at which this CertificateAuthority was soft deleted, if it is in the DELETED state.
expire_time	google.protobuf.timestamp_pb2.Timestamp Output only. The time at which this CertificateAuthority will be permanently purged, if it is in the DELETED state.
labels	Sequence[google.cloud.security.privateca_v1.types.CertificateAuthority.LabelsEntry] Optional. Labels with user-defined metadata.

Classes

AccessUrls

AccessUrls(mapping=None, *, ignore_unknown_fields=False, **kwargs)

URLs where a CertificateAuthority will publish content.

KeyVersionSpec

KeyVersionSpec(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A Cloud KMS key configuration that a CertificateAuthority will use.

LabelsEntry

LabelsEntry(mapping=None, *, ignore_unknown_fields=False, **kwargs)

The abstract base class for a message.

Parameters
Name	Description
kwargs	dict Keys and values corresponding to the fields of the message.
mapping	Union[dict, .Message] A dictionary or message to be used to determine the values for this message.
ignore_unknown_fields	Optional(bool) If True, do not raise errors for unknown fields. Only applied if mapping is a mapping type or there are keyword parameters.

SignHashAlgorithm

SignHashAlgorithm(value)

The algorithm of a Cloud KMS CryptoKeyVersion of a CryptoKey with the CryptoKeyPurpose value ASYMMETRIC_SIGN. These values correspond to the CryptoKeyVersionAlgorithm values. For RSA signing algorithms, the PSS algorithms should be preferred, use PKCS1 algorithms if required for compatibility. For further recommandations, see https://cloud.google.com/kms/docs/algorithms#algorithm_recommendations.

State

State(value)

The state of a CertificateAuthority, indicating if it can be used.

Type

Type(value)

The type of a CertificateAuthority, indicating its issuing chain.