Class CertificateConfig (1.15.0) 

CertificateConfig(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A CertificateConfig describes an X.509 certificate or CSR that is to be created, as an alternative to using ASN.1.

Attributes
Name Description
subject_config google.cloud.security.privateca_v1.types.CertificateConfig.SubjectConfig
Required. Specifies some of the values in a certificate that are related to the subject.
x509_config google.cloud.security.privateca_v1.types.X509Parameters
Required. Describes how some of the technical X.509 fields in a certificate should be populated.
public_key google.cloud.security.privateca_v1.types.PublicKey
Optional. The public key that corresponds to this config. This is, for example, used when issuing Certificates, but not when creating a self-signed CertificateAuthority or CertificateAuthority CSR.
subject_key_id google.cloud.security.privateca_v1.types.CertificateConfig.KeyId
Optional. When specified this provides a custom SKI to be used in the certificate. This should only be used to maintain a SKI of an existing CA originally created outside CA service, which was not generated using method (1) described in RFC 5280 section 4.2.1.2.

Classes

KeyId

KeyId(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A KeyId identifies a specific public key, usually by hashing the public key.

SubjectConfig

SubjectConfig(mapping=None, *, ignore_unknown_fields=False, **kwargs)

These values are used to create the distinguished name and subject alternative name fields in an X.509 certificate.