{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/azure-ad/json-schema/azure-ad-microsoft-graph-public-key-infrastructure-root-schema.json",
  "title": "microsoft.graph.publicKeyInfrastructureRoot",
  "x-generated": "2026-11-05",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/azure-ad-directory-publickeyinfrastructureroot-api-openapi.yml#/components/schemas/microsoft.graph.publicKeyInfrastructureRoot",
  "allOf": [
    {
      "$ref": "#/$defs/microsoft.graph.entity"
    },
    {
      "title": "publicKeyInfrastructureRoot",
      "type": "object",
      "properties": {
        "certificateBasedAuthConfigurations": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.certificateBasedAuthPki"
          },
          "description": "The collection of public key infrastructure instances for the certificate-based authentication feature for users.",
          "x-ms-navigationProperty": true
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    }
  ],
  "$defs": {
    "microsoft.graph.certificateAuthorityDetail": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.directoryObject"
        },
        {
          "title": "certificateAuthorityDetail",
          "type": "object",
          "properties": {
            "certificate": {
              "type": "string",
              "description": "The public key of the certificate authority.",
              "format": "base64url"
            },
            "certificateAuthorityType": {
              "$ref": "#/$defs/microsoft.graph.certificateAuthorityType"
            },
            "certificateRevocationListUrl": {
              "type": [
                "string",
                "null"
              ],
              "description": "The URL to check if the certificate is revoked."
            },
            "createdDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "The date and time when the certificate authority was created.",
              "format": "date-time"
            },
            "deltaCertificateRevocationListUrl": {
              "type": [
                "string",
                "null"
              ]
            },
            "displayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "The display name of the certificate authority."
            },
            "expirationDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": "string",
              "description": "The date and time when the certificate authority expires. Supports $filter (eq) and $orderby.",
              "format": "date-time"
            },
            "isIssuerHintEnabled": {
              "type": [
                "boolean",
                "null"
              ],
              "description": "Indicates whether the certificate picker presents the certificate authority to the user to use for authentication. Default value is false. Optional."
            },
            "issuer": {
              "type": [
                "string",
                "null"
              ],
              "description": "The issuer of the certificate authority."
            },
            "issuerSubjectKeyIdentifier": {
              "type": [
                "string",
                "null"
              ],
              "description": "The subject key identifier of certificate authority."
            },
            "thumbprint": {
              "type": "string",
              "description": "The thumbprint of certificate authority certificate. Supports $filter (eq, startswith)."
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.certificateAuthorityType": {
      "title": "certificateAuthorityType",
      "enum": [
        "root",
        "intermediate",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.certificateBasedAuthPki": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.directoryObject"
        },
        {
          "title": "certificateBasedAuthPki",
          "type": "object",
          "properties": {
            "displayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "The name of the object. Maximum length is 256 characters."
            },
            "lastModifiedDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": "string",
              "description": "The date and time when the object was created or last modified.",
              "format": "date-time"
            },
            "status": {
              "type": [
                "string",
                "null"
              ],
              "description": "The status of any asynchronous jobs runs on the object which can be upload or delete."
            },
            "statusDetails": {
              "type": [
                "string",
                "null"
              ],
              "description": "The status details of the upload/deleted operation of PKI (Public Key Infrastructure)."
            },
            "certificateAuthorities": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.certificateAuthorityDetail"
              },
              "description": "The collection of certificate authorities contained in this public key infrastructure resource.",
              "x-ms-navigationProperty": true
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.directoryObject": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "directoryObject",
          "type": "object",
          "properties": {
            "deletedDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "Date and time when this object was deleted. Always null when the object hasn't been deleted.",
              "format": "date-time"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.entity": {
      "title": "entity",
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "description": "The unique identifier for an entity. Read-only."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    }
  }
}