Console
    Contact Us Start free

    CertificateDescription

    A CertificateDescription describes an X.509 certificate or CSR that has been issued, as an alternative to using ASN.1 / X.509.

    JSON representation 
     { 
 "subjectDescription" 
 : 
 { 
 object (  SubjectDescription 
 
) 
 } 
 , 
 "x509Description" 
 : 
 { 
 object (  X509Parameters 
 
) 
 } 
 , 
 "publicKey" 
 : 
 { 
 object (  PublicKey 
 
) 
 } 
 , 
 "subjectKeyId" 
 : 
 { 
 object (  KeyId 
 
) 
 } 
 , 
 "authorityKeyId" 
 : 
 { 
 object (  KeyId 
 
) 
 } 
 , 
 "crlDistributionPoints" 
 : 
 [ 
 string 
 ] 
 , 
 "aiaIssuingCertificateUrls" 
 : 
 [ 
 string 
 ] 
 , 
 "certFingerprint" 
 : 
 { 
 object (  CertificateFingerprint 
 
) 
 } 
 , 
 "tbsCertificateDigest" 
 : 
 string 
 }
    Fields
    subjectDescription

    object ( SubjectDescription )

    Describes some of the values in a certificate that are related to the subject and lifetime.
    x509Description

    object ( X509Parameters )

    Describes some of the technical X.509 fields in a certificate.
    publicKey

    object ( PublicKey )

    The public key that corresponds to an issued certificate.
    subjectKeyId

    object ( KeyId )

    Provides a means of identifiying certificates that contain a particular public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2 .
    authorityKeyId

    object ( KeyId )

    Identifies the subjectKeyId of the parent certificate, per https://tools.ietf.org/html/rfc5280#section-4.2.1.1

    crlDistributionPoints[]

    string

    Describes a list of locations to obtain CRL information, i.e. the DistributionPoint.fullName described by https://tools.ietf.org/html/rfc5280#section-4.2.1.13

    aiaIssuingCertificateUrls[]

    string

    Describes lists of issuer CA certificate URLs that appear in the "Authority Information Access" extension in the certificate.
    certFingerprint

    object ( CertificateFingerprint )

    The hash of the x.509 certificate.
    tbsCertificateDigest

    string

    The hash of the pre-signed certificate, which will be signed by the CA. Corresponds to the TBS Certificate in https://tools.ietf.org/html/rfc5280#section-4.1.2 . The field will always be populated.

    SubjectDescription

    These values describe fields in an issued X.509 certificate such as the distinguished name, subject alternative names, serial number, and lifetime.

    JSON representation 
     { 
 "subject" 
 : 
 { 
 object (  Subject 
 
) 
 } 
 , 
 "subjectAltName" 
 : 
 { 
 object (  SubjectAltNames 
 
) 
 } 
 , 
 "hexSerialNumber" 
 : 
 string 
 , 
 "lifetime" 
 : 
 string 
 , 
 "notBeforeTime" 
 : 
 string 
 , 
 "notAfterTime" 
 : 
 string 
 }
    Fields
    subject

    object ( Subject )

    Contains distinguished name fields such as the common name, location and / organization.
    subjectAltName

    object ( SubjectAltNames )

    The subject alternative name fields.
    hexSerialNumber

    string

    The serial number encoded in lowercase hexadecimal.
    lifetime

    string ( Duration format)

    For convenience, the actual lifetime of an issued certificate.

    A duration in seconds with up to nine fractional digits, ending with ' s '. Example: "3.5s" .
    notBeforeTime

    string ( Timestamp format)

    The time at which the certificate becomes valid.

    Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z" , "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30" .
    notAfterTime

    string ( Timestamp format)

    The time after which the certificate is expired. Per RFC 5280, the validity period for a certificate is the period of time from notBeforeTime through notAfterTime, inclusive. Corresponds to 'notBeforeTime' + 'lifetime' - 1 second.

    Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z" , "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30" .

    KeyId

    A KeyId identifies a specific public key, usually by hashing the public key.

    JSON representation 
     { 
 "keyId" 
 : 
 string 
 }
    Fields
    keyId

    string

    Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most likely the 160 bit SHA-1 hash of the public key.

    CertificateFingerprint

    A group of fingerprints for the x509 certificate.

    JSON representation 
     { 
 "sha256Hash" 
 : 
 string 
 }
    Fields
    sha256Hash

    string

    The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
    Create a Mobile Website
    View Site in Mobile | Classic
    Share by: