Class: Google::Cloud::Security::PrivateCA::V1beta1::CertificateDescription

Inherits:
Object
  • Object
show all
Extended by:
Protobuf::MessageExts::ClassMethods
Includes:
Protobuf::MessageExts
Defined in:
proto_docs/google/cloud/security/privateca/v1beta1/resources.rb

Overview

A CertificateDescription describes an X.509 certificate or CSR that has been issued, as an alternative to using ASN.1 / X.509.

Defined Under Namespace

Classes: CertificateFingerprint, KeyId, SubjectDescription

Instance Attribute Summary collapse

Instance Attribute Details

#aia_issuing_certificate_urls ⇒ ::Array<::String>

Returns Describes lists of issuer CA certificate URLs that appear in the "Authority Information Access" extension in the certificate.

Returns:

  • (::Array<::String>) —

    Describes lists of issuer CA certificate URLs that appear in the "Authority Information Access" extension in the certificate.



721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
 
# File 'proto_docs/google/cloud/security/privateca/v1beta1/resources.rb', line 721

class CertificateDescription
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # These values describe fields in an issued X.509 certificate such as the
  # distinguished name, subject alternative names, serial number, and lifetime.
  # @!attribute [rw] subject
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::Subject]
  #     Contains distinguished name fields such as the location and organization.
  # @!attribute [rw] common_name
  #   @return [::String]
  #     The "common name" of the distinguished name.
  # @!attribute [rw] subject_alt_name
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::SubjectAltNames]
  #     The subject alternative name fields.
  # @!attribute [rw] hex_serial_number
  #   @return [::String]
  #     The serial number encoded in lowercase hexadecimal.
  # @!attribute [rw] lifetime
  #   @return [::Google::Protobuf::Duration]
  #     For convenience, the actual lifetime of an issued certificate.
  #     Corresponds to 'not_after_time' - 'not_before_time'.
  # @!attribute [rw] not_before_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate becomes valid.
  # @!attribute [rw] not_after_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate expires.
  class SubjectDescription
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A KeyId identifies a specific public key, usually by hashing the public
  # key.
  # @!attribute [rw] key_id
  #   @return [::String]
  #     Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most
  #     likely the 160 bit SHA-1 hash of the public key.
  class KeyId
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A group of fingerprints for the x509 certificate.
  # @!attribute [rw] sha256_hash
  #   @return [::String]
  #     The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
  class CertificateFingerprint
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end
end

#authority_key_id ⇒ ::Google::Cloud::Security::PrivateCA::V1beta1::CertificateDescription::KeyId

Returns Identifies the subject_key_id of the parent certificate, per https://tools.ietf.org/html/rfc5280#section-4.2.1.1.

Returns:



721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
 
# File 'proto_docs/google/cloud/security/privateca/v1beta1/resources.rb', line 721

class CertificateDescription
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # These values describe fields in an issued X.509 certificate such as the
  # distinguished name, subject alternative names, serial number, and lifetime.
  # @!attribute [rw] subject
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::Subject]
  #     Contains distinguished name fields such as the location and organization.
  # @!attribute [rw] common_name
  #   @return [::String]
  #     The "common name" of the distinguished name.
  # @!attribute [rw] subject_alt_name
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::SubjectAltNames]
  #     The subject alternative name fields.
  # @!attribute [rw] hex_serial_number
  #   @return [::String]
  #     The serial number encoded in lowercase hexadecimal.
  # @!attribute [rw] lifetime
  #   @return [::Google::Protobuf::Duration]
  #     For convenience, the actual lifetime of an issued certificate.
  #     Corresponds to 'not_after_time' - 'not_before_time'.
  # @!attribute [rw] not_before_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate becomes valid.
  # @!attribute [rw] not_after_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate expires.
  class SubjectDescription
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A KeyId identifies a specific public key, usually by hashing the public
  # key.
  # @!attribute [rw] key_id
  #   @return [::String]
  #     Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most
  #     likely the 160 bit SHA-1 hash of the public key.
  class KeyId
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A group of fingerprints for the x509 certificate.
  # @!attribute [rw] sha256_hash
  #   @return [::String]
  #     The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
  class CertificateFingerprint
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end
end

#cert_fingerprint ⇒ ::Google::Cloud::Security::PrivateCA::V1beta1::CertificateDescription::CertificateFingerprint

Returns The hash of the x.509 certificate.

Returns:



721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
 
# File 'proto_docs/google/cloud/security/privateca/v1beta1/resources.rb', line 721

class CertificateDescription
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # These values describe fields in an issued X.509 certificate such as the
  # distinguished name, subject alternative names, serial number, and lifetime.
  # @!attribute [rw] subject
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::Subject]
  #     Contains distinguished name fields such as the location and organization.
  # @!attribute [rw] common_name
  #   @return [::String]
  #     The "common name" of the distinguished name.
  # @!attribute [rw] subject_alt_name
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::SubjectAltNames]
  #     The subject alternative name fields.
  # @!attribute [rw] hex_serial_number
  #   @return [::String]
  #     The serial number encoded in lowercase hexadecimal.
  # @!attribute [rw] lifetime
  #   @return [::Google::Protobuf::Duration]
  #     For convenience, the actual lifetime of an issued certificate.
  #     Corresponds to 'not_after_time' - 'not_before_time'.
  # @!attribute [rw] not_before_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate becomes valid.
  # @!attribute [rw] not_after_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate expires.
  class SubjectDescription
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A KeyId identifies a specific public key, usually by hashing the public
  # key.
  # @!attribute [rw] key_id
  #   @return [::String]
  #     Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most
  #     likely the 160 bit SHA-1 hash of the public key.
  class KeyId
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A group of fingerprints for the x509 certificate.
  # @!attribute [rw] sha256_hash
  #   @return [::String]
  #     The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
  class CertificateFingerprint
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end
end

#config_values ⇒ ::Google::Cloud::Security::PrivateCA::V1beta1::ReusableConfigValues

Returns Describes some of the technical fields in a certificate.

Returns:



721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
 
# File 'proto_docs/google/cloud/security/privateca/v1beta1/resources.rb', line 721

class CertificateDescription
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # These values describe fields in an issued X.509 certificate such as the
  # distinguished name, subject alternative names, serial number, and lifetime.
  # @!attribute [rw] subject
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::Subject]
  #     Contains distinguished name fields such as the location and organization.
  # @!attribute [rw] common_name
  #   @return [::String]
  #     The "common name" of the distinguished name.
  # @!attribute [rw] subject_alt_name
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::SubjectAltNames]
  #     The subject alternative name fields.
  # @!attribute [rw] hex_serial_number
  #   @return [::String]
  #     The serial number encoded in lowercase hexadecimal.
  # @!attribute [rw] lifetime
  #   @return [::Google::Protobuf::Duration]
  #     For convenience, the actual lifetime of an issued certificate.
  #     Corresponds to 'not_after_time' - 'not_before_time'.
  # @!attribute [rw] not_before_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate becomes valid.
  # @!attribute [rw] not_after_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate expires.
  class SubjectDescription
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A KeyId identifies a specific public key, usually by hashing the public
  # key.
  # @!attribute [rw] key_id
  #   @return [::String]
  #     Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most
  #     likely the 160 bit SHA-1 hash of the public key.
  class KeyId
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A group of fingerprints for the x509 certificate.
  # @!attribute [rw] sha256_hash
  #   @return [::String]
  #     The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
  class CertificateFingerprint
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end
end

#crl_distribution_points ⇒ ::Array<::String>

Returns Describes a list of locations to obtain CRL information, i.e. the DistributionPoint.fullName described by https://tools.ietf.org/html/rfc5280#section-4.2.1.13.

Returns:



721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
 
# File 'proto_docs/google/cloud/security/privateca/v1beta1/resources.rb', line 721

class CertificateDescription
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # These values describe fields in an issued X.509 certificate such as the
  # distinguished name, subject alternative names, serial number, and lifetime.
  # @!attribute [rw] subject
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::Subject]
  #     Contains distinguished name fields such as the location and organization.
  # @!attribute [rw] common_name
  #   @return [::String]
  #     The "common name" of the distinguished name.
  # @!attribute [rw] subject_alt_name
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::SubjectAltNames]
  #     The subject alternative name fields.
  # @!attribute [rw] hex_serial_number
  #   @return [::String]
  #     The serial number encoded in lowercase hexadecimal.
  # @!attribute [rw] lifetime
  #   @return [::Google::Protobuf::Duration]
  #     For convenience, the actual lifetime of an issued certificate.
  #     Corresponds to 'not_after_time' - 'not_before_time'.
  # @!attribute [rw] not_before_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate becomes valid.
  # @!attribute [rw] not_after_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate expires.
  class SubjectDescription
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A KeyId identifies a specific public key, usually by hashing the public
  # key.
  # @!attribute [rw] key_id
  #   @return [::String]
  #     Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most
  #     likely the 160 bit SHA-1 hash of the public key.
  class KeyId
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A group of fingerprints for the x509 certificate.
  # @!attribute [rw] sha256_hash
  #   @return [::String]
  #     The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
  class CertificateFingerprint
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end
end

#public_key ⇒ ::Google::Cloud::Security::PrivateCA::V1beta1::PublicKey

Returns The public key that corresponds to an issued certificate.

Returns:



721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
 
# File 'proto_docs/google/cloud/security/privateca/v1beta1/resources.rb', line 721

class CertificateDescription
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # These values describe fields in an issued X.509 certificate such as the
  # distinguished name, subject alternative names, serial number, and lifetime.
  # @!attribute [rw] subject
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::Subject]
  #     Contains distinguished name fields such as the location and organization.
  # @!attribute [rw] common_name
  #   @return [::String]
  #     The "common name" of the distinguished name.
  # @!attribute [rw] subject_alt_name
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::SubjectAltNames]
  #     The subject alternative name fields.
  # @!attribute [rw] hex_serial_number
  #   @return [::String]
  #     The serial number encoded in lowercase hexadecimal.
  # @!attribute [rw] lifetime
  #   @return [::Google::Protobuf::Duration]
  #     For convenience, the actual lifetime of an issued certificate.
  #     Corresponds to 'not_after_time' - 'not_before_time'.
  # @!attribute [rw] not_before_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate becomes valid.
  # @!attribute [rw] not_after_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate expires.
  class SubjectDescription
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A KeyId identifies a specific public key, usually by hashing the public
  # key.
  # @!attribute [rw] key_id
  #   @return [::String]
  #     Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most
  #     likely the 160 bit SHA-1 hash of the public key.
  class KeyId
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A group of fingerprints for the x509 certificate.
  # @!attribute [rw] sha256_hash
  #   @return [::String]
  #     The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
  class CertificateFingerprint
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end
end

#subject_description ⇒ ::Google::Cloud::Security::PrivateCA::V1beta1::CertificateDescription::SubjectDescription

Returns Describes some of the values in a certificate that are related to the subject and lifetime.

Returns:



721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
 
# File 'proto_docs/google/cloud/security/privateca/v1beta1/resources.rb', line 721

class CertificateDescription
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # These values describe fields in an issued X.509 certificate such as the
  # distinguished name, subject alternative names, serial number, and lifetime.
  # @!attribute [rw] subject
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::Subject]
  #     Contains distinguished name fields such as the location and organization.
  # @!attribute [rw] common_name
  #   @return [::String]
  #     The "common name" of the distinguished name.
  # @!attribute [rw] subject_alt_name
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::SubjectAltNames]
  #     The subject alternative name fields.
  # @!attribute [rw] hex_serial_number
  #   @return [::String]
  #     The serial number encoded in lowercase hexadecimal.
  # @!attribute [rw] lifetime
  #   @return [::Google::Protobuf::Duration]
  #     For convenience, the actual lifetime of an issued certificate.
  #     Corresponds to 'not_after_time' - 'not_before_time'.
  # @!attribute [rw] not_before_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate becomes valid.
  # @!attribute [rw] not_after_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate expires.
  class SubjectDescription
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A KeyId identifies a specific public key, usually by hashing the public
  # key.
  # @!attribute [rw] key_id
  #   @return [::String]
  #     Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most
  #     likely the 160 bit SHA-1 hash of the public key.
  class KeyId
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A group of fingerprints for the x509 certificate.
  # @!attribute [rw] sha256_hash
  #   @return [::String]
  #     The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
  class CertificateFingerprint
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end
end

#subject_key_id ⇒ ::Google::Cloud::Security::PrivateCA::V1beta1::CertificateDescription::KeyId

Returns Provides a means of identifiying certificates that contain a particular public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.

Returns:



721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
 
# File 'proto_docs/google/cloud/security/privateca/v1beta1/resources.rb', line 721

class CertificateDescription
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # These values describe fields in an issued X.509 certificate such as the
  # distinguished name, subject alternative names, serial number, and lifetime.
  # @!attribute [rw] subject
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::Subject]
  #     Contains distinguished name fields such as the location and organization.
  # @!attribute [rw] common_name
  #   @return [::String]
  #     The "common name" of the distinguished name.
  # @!attribute [rw] subject_alt_name
  #   @return [::Google::Cloud::Security::PrivateCA::V1beta1::SubjectAltNames]
  #     The subject alternative name fields.
  # @!attribute [rw] hex_serial_number
  #   @return [::String]
  #     The serial number encoded in lowercase hexadecimal.
  # @!attribute [rw] lifetime
  #   @return [::Google::Protobuf::Duration]
  #     For convenience, the actual lifetime of an issued certificate.
  #     Corresponds to 'not_after_time' - 'not_before_time'.
  # @!attribute [rw] not_before_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate becomes valid.
  # @!attribute [rw] not_after_time
  #   @return [::Google::Protobuf::Timestamp]
  #     The time at which the certificate expires.
  class SubjectDescription
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A KeyId identifies a specific public key, usually by hashing the public
  # key.
  # @!attribute [rw] key_id
  #   @return [::String]
  #     Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most
  #     likely the 160 bit SHA-1 hash of the public key.
  class KeyId
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # A group of fingerprints for the x509 certificate.
  # @!attribute [rw] sha256_hash
  #   @return [::String]
  #     The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
  class CertificateFingerprint
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end
end