{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/azure-ad/json-schema/azure-ad-microsoft-graph-certificate-based-auth-configuration-schema.json",
  "title": "microsoft.graph.certificateBasedAuthConfiguration",
  "x-generated": "2026-11-05",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/azure-ad-organization-certificatebasedauthconfiguration-api-openapi.yml#/components/schemas/microsoft.graph.certificateBasedAuthConfiguration",
  "allOf": [
    {
      "$ref": "#/$defs/microsoft.graph.entity"
    },
    {
      "title": "certificateBasedAuthConfiguration",
      "type": "object",
      "properties": {
        "certificateAuthorities": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.certificateAuthority"
          },
          "description": "Collection of certificate authorities which creates a trusted certificate chain."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    }
  ],
  "$defs": {
    "microsoft.graph.certificateAuthority": {
      "title": "certificateAuthority",
      "type": "object",
      "properties": {
        "certificate": {
          "type": "string",
          "description": "Required. The base64 encoded string representing the public certificate.",
          "format": "base64url"
        },
        "certificateRevocationListUrl": {
          "type": [
            "string",
            "null"
          ],
          "description": "The URL of the certificate revocation list."
        },
        "deltaCertificateRevocationListUrl": {
          "type": [
            "string",
            "null"
          ],
          "description": "The URL contains the list of all revoked certificates since the last time a full certificate revocaton list was created."
        },
        "isRootAuthority": {
          "type": "boolean",
          "description": "Required. true if the trusted certificate is a root authority, false if the trusted certificate is an intermediate authority."
        },
        "issuer": {
          "type": "string",
          "description": "The issuer of the certificate, calculated from the certificate value. Read-only."
        },
        "issuerSki": {
          "type": "string",
          "description": "The subject key identifier of the certificate, calculated from the certificate value. Read-only."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.entity": {
      "title": "entity",
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "description": "The unique identifier for an entity. Read-only."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    }
  }
}