A CertificateAuthority represents an individual Certificate Authority. A CertificateAuthority can be used to create Certificates.

Attributes

• accessUrls (type: GoogleApi.PrivateCA.V1beta1.Model.AccessUrls.t, default: nil) - Output only. URLs for accessing content published by this CA, such as the CA certificate and CRLs.
• caCertificateDescriptions (type: list(GoogleApi.PrivateCA.V1beta1.Model.CertificateDescription.t), default: nil) - Output only. A structured description of this CertificateAuthority's CA certificate and its issuers. Ordered as self-to-root.
• certificatePolicy (type: GoogleApi.PrivateCA.V1beta1.Model.CertificateAuthorityPolicy.t, default: nil) - Optional. The CertificateAuthorityPolicy to enforce when issuing Certificates from this CertificateAuthority.
• config (type: GoogleApi.PrivateCA.V1beta1.Model.CertificateConfig.t, default: nil) - Required. Immutable. The config used to create a self-signed X.509 certificate or CSR.
• createTime (type: DateTime.t, default: nil) - Output only. The time at which this CertificateAuthority was created.
• deleteTime (type: DateTime.t, default: nil) - Output only. The time at which this CertificateAuthority will be deleted, if scheduled for deletion.
• gcsBucket (type: String.t, default: nil) - Immutable. The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and CRLs. This must be a bucket name, without any prefixes (such as gs://) or suffixes (such as .googleapis.com). For example, to use a bucket named my-bucket, you would simply specify my-bucket. If not specified, a managed bucket will be created.
• issuingOptions (type: GoogleApi.PrivateCA.V1beta1.Model.IssuingOptions.t, default: nil) - Optional. The IssuingOptions to follow when issuing Certificates from this CertificateAuthority.
• keySpec (type: GoogleApi.PrivateCA.V1beta1.Model.KeyVersionSpec.t, default: nil) - Required. Immutable. Used when issuing certificates for this CertificateAuthority. If this CertificateAuthority is a self-signed CertificateAuthority, this key is also used to sign the self-signed CA certificate. Otherwise, it is used to sign a CSR.
• labels (type: map(), default: nil) - Optional. Labels with user-defined metadata.
• lifetime (type: String.t, default: nil) - Required. The desired lifetime of the CA certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate.
• name (type: String.t, default: nil) - Output only. The resource name for this CertificateAuthority in the format projects/*/locations/*/certificateAuthorities/*.
• pemCaCertificates (type: list(String.t), default: nil) - Output only. This CertificateAuthority's certificate chain, including the current CertificateAuthority's certificate. Ordered such that the root issuer is the final element (consistent with RFC 5246). For a self-signed CA, this will only list the current CertificateAuthority's certificate.
• state (type: String.t, default: nil) - Output only. The State for this CertificateAuthority.
• subordinateConfig (type: GoogleApi.PrivateCA.V1beta1.Model.SubordinateConfig.t, default: nil) - Optional. If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which describes its issuers. This may be updated, but this CertificateAuthority must continue to validate.
• tier (type: String.t, default: nil) - Required. Immutable. The Tier of this CertificateAuthority.
• type (type: String.t, default: nil) - Required. Immutable. The Type of this CertificateAuthority.
• updateTime (type: DateTime.t, default: nil) - Output only. The time at which this CertificateAuthority was updated.