Class: Aws::SecurityHub::Types::AwsCertificateManagerCertificateDetails

Inherits:

Struct

• Object
• Struct
• Aws::SecurityHub::Types::AwsCertificateManagerCertificateDetails

Defined in:

gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb

Overview

Provides details about an Certificate Manager certificate.

See Also:

• AWS API Documentation

Constant Summary

SENSITIVE =

[]

Instance Attribute Summary

• #certificate_authority_arn ⇒ String

  The ARN of the private certificate authority (CA) that will be used to issue the certificate.

• #created_at ⇒ String

  Indicates when the certificate was requested.

• #domain_name ⇒ String

  The fully qualified domain name (FQDN), such as www.example.com, that is secured by the certificate.

• #domain_validation_options ⇒ Array<Types::AwsCertificateManagerCertificateDomainValidationOption>

  Contains information about the initial validation of each domain name that occurs as a result of the RequestCertificate request.

• #extended_key_usages ⇒ Array<Types::AwsCertificateManagerCertificateExtendedKeyUsage>

  Contains a list of Extended Key Usage X.509 v3 extension objects.

• #failure_reason ⇒ String

  For a failed certificate request, the reason for the failure.

• #imported_at ⇒ String

  Indicates when the certificate was imported.

• #in_use_by ⇒ Array<String>

  The list of ARNs for the Amazon Web Services resources that use the certificate.

• #issued_at ⇒ String

  Indicates when the certificate was issued.

• #issuer ⇒ String

  The name of the certificate authority that issued and signed the certificate.

• #key_algorithm ⇒ String

  The algorithm that was used to generate the public-private key pair.

• #key_usages ⇒ Array<Types::AwsCertificateManagerCertificateKeyUsage>

  A list of key usage X.509 v3 extension objects.

• #not_after ⇒ String

  The time after which the certificate becomes invalid.

• #not_before ⇒ String

  The time before which the certificate is not valid.

• #options ⇒ Types::AwsCertificateManagerCertificateOptions

  Provides a value that specifies whether to add the certificate to a transparency log.

• #renewal_eligibility ⇒ String

  Whether the certificate is eligible for renewal.

• #renewal_summary ⇒ Types::AwsCertificateManagerCertificateRenewalSummary

  Information about the status of the Certificate Manager managed renewal for the certificate.

• #serial ⇒ String

  The serial number of the certificate.

• #signature_algorithm ⇒ String

  The algorithm that was used to sign the certificate.

• #status ⇒ String

  The status of the certificate.

• #subject ⇒ String

  The name of the entity that is associated with the public key contained in the certificate.

• #subject_alternative_names ⇒ Array<String>

  One or more domain names (subject alternative names) included in the certificate.

• #type ⇒ String

  The source of the certificate.

Instance Attribute Details

#certificate_authority_arn ⇒ String

The ARN of the private certificate authority (CA) that will be used to issue the certificate.

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#created_at ⇒ String

Indicates when the certificate was requested.

For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see Timestamps.

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#domain_name ⇒ String

The fully qualified domain name (FQDN), such as www.example.com, that is secured by the certificate.

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#domain_validation_options ⇒ Array<Types::AwsCertificateManagerCertificateDomainValidationOption>

Contains information about the initial validation of each domain name that occurs as a result of the RequestCertificate request.

Only provided if the certificate type is AMAZON_ISSUED.

Returns:

• (Array<Types::AwsCertificateManagerCertificateDomainValidationOption>)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#extended_key_usages ⇒ Array<Types::AwsCertificateManagerCertificateExtendedKeyUsage>

Contains a list of Extended Key Usage X.509 v3 extension objects. Each object specifies a purpose for which the certificate public key can be used and consists of a name and an object identifier (OID).

Returns:

• (Array<Types::AwsCertificateManagerCertificateExtendedKeyUsage>)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#failure_reason ⇒ String

For a failed certificate request, the reason for the failure.

Valid values: NO_AVAILABLE_CONTACTS | ADDITIONAL_VERIFICATION_REQUIRED | DOMAIN_NOT_ALLOWED | INVALID_PUBLIC_DOMAIN | DOMAIN_VALIDATION_DENIED | CAA_ERROR | PCA_LIMIT_EXCEEDED | PCA_INVALID_ARN | PCA_INVALID_STATE | PCA_REQUEST_FAILED | PCA_NAME_CONSTRAINTS_VALIDATION | PCA_RESOURCE_NOT_FOUND | PCA_INVALID_ARGS | PCA_INVALID_DURATION | PCA_ACCESS_DENIED | SLR_NOT_FOUND | OTHER

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#imported_at ⇒ String

Indicates when the certificate was imported. Provided if the certificate type is IMPORTED.

For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see Timestamps.

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#in_use_by ⇒ Array<String>

The list of ARNs for the Amazon Web Services resources that use the certificate.

Returns:

• (Array<String>)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#issued_at ⇒ String

Indicates when the certificate was issued. Provided if the certificate type is AMAZON_ISSUED.

For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see Timestamps.

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#issuer ⇒ String

The name of the certificate authority that issued and signed the certificate.

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#key_algorithm ⇒ String

The algorithm that was used to generate the public-private key pair.

Valid values: RSA_2048 | RSA_1024 |RSA_4096 | EC_prime256v1 | EC_secp384r1 | EC_secp521r1

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#key_usages ⇒ Array<Types::AwsCertificateManagerCertificateKeyUsage>

A list of key usage X.509 v3 extension objects.

Returns:

• (Array<Types::AwsCertificateManagerCertificateKeyUsage>)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#not_after ⇒ String

The time after which the certificate becomes invalid.

For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see Timestamps.

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#not_before ⇒ String

The time before which the certificate is not valid.

For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see Timestamps.

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#options ⇒ Types::AwsCertificateManagerCertificateOptions

Provides a value that specifies whether to add the certificate to a transparency log.

Returns:

• (Types::AwsCertificateManagerCertificateOptions)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#renewal_eligibility ⇒ String

Whether the certificate is eligible for renewal.

Valid values: ELIGIBLE | INELIGIBLE

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#renewal_summary ⇒ Types::AwsCertificateManagerCertificateRenewalSummary

Information about the status of the Certificate Manager managed renewal for the certificate. Provided only when the certificate type is AMAZON_ISSUED.

Returns:

• (Types::AwsCertificateManagerCertificateRenewalSummary)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#serial ⇒ String

The serial number of the certificate.

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#signature_algorithm ⇒ String

The algorithm that was used to sign the certificate.

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#status ⇒ String

The status of the certificate.

Valid values: PENDING_VALIDATION | ISSUED | INACTIVE | EXPIRED | VALIDATION_TIMED_OUT | REVOKED | FAILED

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#subject ⇒ String

The name of the entity that is associated with the public key contained in the certificate.

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#subject_alternative_names ⇒ Array<String>

One or more domain names (subject alternative names) included in the certificate. This list contains the domain names that are bound to the public key that is contained in the certificate.

The subject alternative names include the canonical domain name (CN) of the certificate and additional domain names that can be used to connect to the website.

Returns:

• (Array<String>)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end

#type ⇒ String

The source of the certificate. For certificates that Certificate Manager provides, Type is AMAZON_ISSUED. For certificates that are imported with ImportCertificate, Type is IMPORTED.

Valid values: IMPORTED | AMAZON_ISSUED | PRIVATE

Returns:

• (String)

# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 4058

class AwsCertificateManagerCertificateDetails < Struct.new(
  :certificate_authority_arn,
  :created_at,
  :domain_name,
  :domain_validation_options,
  :extended_key_usages,
  :failure_reason,
  :imported_at,
  :in_use_by,
  :issued_at,
  :issuer,
  :key_algorithm,
  :key_usages,
  :not_after,
  :not_before,
  :options,
  :renewal_eligibility,
  :renewal_summary,
  :serial,
  :signature_algorithm,
  :status,
  :subject,
  :subject_alternative_names,
  :type)
  SENSITIVE = []
  include Aws::Structure
end