{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/oracle/json-schema/oracle-certificate-authority-collection-schema.json",
  "title": "CertificateAuthorityCollection",
  "description": "The results of a certificate authority (CA) search. This object contains CA summary objects and other data.",
  "x-generated": "2026-11-04",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/oracle-certificatesmanagement-api-openapi.yml#/components/schemas/CertificateAuthorityCollection",
  "properties": {
    "items": {
      "description": "List of CertificateAuthoritySummary.",
      "items": {
        "$ref": "#/$defs/CertificateAuthoritySummary"
      },
      "type": "array"
    }
  },
  "required": [
    "items"
  ],
  "type": "object",
  "x-example": "{\n   \"id\": \"ocid1.certificateauthority.oc1.iad.exampleae47ajxyawq5nb2cvbcrtjbbyi4augztb7py2fauxhhakbwcxrfpa\",\n   \"issuerCertificateAuthorityId\": \"ocid1.certificateauthority.oc1.iad.exampleae47ajxyac4uhdrldcvbvf6ejucnldpj565v5fauxkwn2dccujyta\",\n   \"name\": \"asddf\",\n   \"description\": \"sdf\",\n   \"timeCreated\": \"2021-03-22T22:14:54.565Z\",\n   \"timeOfDeletion\": null,\n   \"kmsKeyId\": \"ocid1.key.oc1.iad.examplegaag4s.abzwkljsd4iacvbv3s2e57hhwyljoc2zfxcgugfauxafqyxm7ljawezfc3cq\",\n   \"lifecycleState\": \"ACTIVE\",\n   \"compartmentId\": \"ocid1.tenancy.oc1..exampleauingds4uwkcvbxv4ijs7zxuqnoewldef4fauxs7vaax2fab4gcsq\",\n   \"certificateAuthorityRules\": [\n      {\n         \"ruleType\": \"CERTIFICATE_AUTHORITY_RENEWAL_RULE\",\n         \"renewalInterval\": \"P3650D\",\n         \"advanceRenewalPeriod\": \"P30D\"\n      }\n   ],\n   \"currentVersionSummary\": {\n      \"certificateAuthorityId\": \"ocid1.certificateauthority.oc1.iad.exampleae47ajxyawq5nb2cvbcrtjbbyi4augztb7py2fauxhhakbwcxrfpa\",\n      \"issuerCaVersionNumber\": null,\n      \"serialNumber\": \"123456789900771507182728973147594537602123456789\",\n      \"timeCreated\": \"2021-03-22T22:14:54.695Z\",\n      \"versionNumber\": 1,\n      \"versionName\": null,\n      \"timeOfDeletion\": null,\n      \"validity\": {\n         \"timeOfValidityNotBefore\": \"2021-03-22T22:14:54.565Z\",\n         \"timeOfValidityNotAfter\": \"2031-04-22T00:00:00.000Z\"\n      },\n      \"stages\": [\n         \"CURRENT\",\n         \"LATEST\"\n      ],\n      \"revocationStatus\": null\n   },\n   \"subject\": {\n      \"commonName\": \"www.example.net\",\n      \"country\": null,\n      \"domainComponent\": null,\n      \"distinguishedNameQualifier\": null,\n      \"generationQualifier\": null,\n      \"givenName\": null,\n      \"initials\": null,\n      \"localityName\": null,\n      \"organization\": null,\n      \"organizationalUnit\": null,\n      \"pseudonym\": null,\n      \"serialNumber\": null,\n      \"stateOrProvinceName\": null,\n      \"street\": null,\n      \"surname\": null,\n      \"title\": null,\n      \"userId\": null\n   },\n   \"configType\": \"SUBORDINATE_CA_ISSUED_BY_INTERNAL_CA\",\n   \"signingAlgorithm\": \"SHA512_WITH_RSA\",\n   \"freeformTags\": {},\n   \"definedTags\": {}\n},\n{\n   \"id\": \"ocid1.certificateauthority.oc1.iad.exampleae47ajxyammgcng3cvb2uv64ld2k7f6dyaz4y35pi6faux7s7ppca\",\n   \"issuerCertificateAuthorityId\": \"ocid1.certificateauthority.oc1.iad.exampleae47ajxyac4uhdrldcvbvf6ejucnldpj565v5fauxkwn2dccujyta\",\n   \"name\": \"a\",\n   \"description\": \"sdf\",\n   \"timeCreated\": \"2021-03-22T22:14:06.144Z\",\n   \"timeOfDeletion\": null,\n   \"kmsKeyId\": \"ocid1.key.oc1.iad.examplegaag4s.abzwkljsd4iacvbv3s2e57hhwyljoc2zfxcgugfauxafqyxm7ljawezfc3cq\",\n   \"lifecycleState\": \"ACTIVE\",\n   \"compartmentId\": \"ocid1.tenancy.oc1..exampleauingds4uwkcvbxv4ijs7zxuqnoewldef4fauxs7vaax2fab4gcsq\",\n   \"certificateAuthorityRules\": [\n      {\n         \"ruleType\": \"CERTIFICATE_AUTHORITY_RENEWAL_RULE\",\n         \"renewalInterval\": \"P3650D\",\n         \"advanceRenewalPeriod\": \"P30D\"\n      },\n      {\n         \"ruleType\": \"CERTIFICATE_AUTHORITY_ISSUANCE_EXPIRY_RULE\",\n         \"leafCertificateMaxValidityDuration\": \"P365D\",\n         \"certificateAuthorityMaxValidityDuration\": \"P3650D\"\n      }\n   ],\n   \"currentVersionSummary\": {\n      \"certificateAuthorityId\": \"ocid1.certificateauthority.oc1.iad.exampleae47ajxyammgcng3cvb2uv64ld2k7f6dyaz4y35pi6faux7s7ppca\",\n      \"issuerCaVersionNumber\": null,\n      \"serialNumber\": \"123456789275197334290470762114233020537123456789\",\n      \"timeCreated\": \"2021-03-22T22:14:06.313Z\",\n      \"versionNumber\": 1,\n      \"versionName\": null,\n      \"timeOfDeletion\": null,\n      \"validity\": {\n         \"timeOfValidityNotBefore\": \"2021-03-22T22:14:06.144Z\",\n         \"timeOfValidityNotAfter\": \"2031-04-22T00:00:00.000Z\"\n      },\n      \"stages\": [\n         \"CURRENT\",\n         \"LATEST\"\n      ],\n      \"revocationStatus\": null\n   },\n   \"subject\": {\n      \"commonName\": \"www.example.org\",\n      \"country\": null,\n      \"domainComponent\": null,\n      \"distinguishedNameQualifier\": null,\n      \"generationQualifier\": null,\n      \"givenName\": null,\n      \"initials\": null,\n      \"localityName\": null,\n      \"organization\": null,\n      \"organizationalUnit\": null,\n      \"pseudonym\": null,\n      \"serialNumber\": null,\n      \"stateOrProvinceName\": null,\n      \"street\": null,\n      \"surname\": null,\n      \"title\": null,\n      \"userId\": null\n   },\n   \"configType\": \"SUBORDINATE_CA_ISSUED_BY_INTERNAL_CA\",\n   \"signingAlgorithm\": \"SHA384_WITH_RSA\",\n   \"freeformTags\": {\n      \"sdsdf\": \"sdf\"\n   },\n   \"definedTags\": {}\n}\n",
  "$defs": {
    "CertificateAuthorityRule": {
      "description": "A rule that you can apply to a certificate authority (CA) to enforce certain conditions on its usage and management.",
      "properties": {
        "ruleType": {
          "description": "The type of rule, whether a renewal rule regarding when to renew the CA or an issuance expiry rule that governs how long the certificates and CAs issued by the CA are valid. (For internal use only) An internal issuance rule defines the number and type of certificates that the CA can issue.\n",
          "enum": [
            "CERTIFICATE_AUTHORITY_ISSUANCE_EXPIRY_RULE",
            "CERTIFICATE_AUTHORITY_ISSUANCE_RULE"
          ],
          "type": "string"
        }
      },
      "required": [
        "ruleType"
      ],
      "type": "object",
      "x-example": "{\n  \"ruleType\": \"CERTIFICATE_AUTHORITY_ISSUANCE_EXPIRY_RULE\"\n}\n"
    },
    "CertificateAuthoritySummary": {
      "description": "The metadata details of the certificate authority (CA). This summary object does not contain the CA contents.",
      "properties": {
        "certificateAuthorityRules": {
          "default": null,
          "description": "An optional list of rules that control how the CA is used and managed.",
          "items": {
            "$ref": "#/$defs/CertificateAuthorityRule"
          },
          "type": "array"
        },
        "compartmentId": {
          "description": "The OCID of the compartment under which the CA is created.",
          "maxLength": 255,
          "minLength": 1,
          "type": "string"
        },
        "configType": {
          "description": "The origin of the CA.",
          "enum": [
            "ROOT_CA_GENERATED_INTERNALLY",
            "SUBORDINATE_CA_ISSUED_BY_INTERNAL_CA",
            "ROOT_CA_MANAGED_EXTERNALLY",
            "SUBORDINATE_CA_MANAGED_INTERNALLY_ISSUED_BY_EXTERNAL_CA"
          ],
          "type": "string",
          "x-obmcs-top-level-enum": "#/definitions/CertificateAuthorityConfigType"
        },
        "currentVersionSummary": {
          "$ref": "#/$defs/CertificateAuthorityVersionSummary"
        },
        "definedTags": {
          "additionalProperties": {
            "additionalProperties": {
              "description": "The value of the tag. Only string, integer and Boolean types are supported.\n",
              "type": "object"
            },
            "description": "Key-value pair representing predefined tags' keys and values scoped to a namespace.\nExample: `{\"bar-key\": \"value\"}`\n",
            "type": "object"
          },
          "default": null,
          "description": "Usage of predefined tag keys. These predefined keys are scoped to namespaces.\nExample: `{\"foo-namespace\": {\"bar-key\": \"value\"}}`\n",
          "type": "object"
        },
        "description": {
          "default": null,
          "description": "A brief description of the CA.",
          "maxLength": 400,
          "minLength": 1,
          "type": "string"
        },
        "freeformTags": {
          "additionalProperties": {
            "type": "string"
          },
          "default": null,
          "description": "Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only.\nExample: `{\"bar-key\": \"value\"}`\n",
          "type": "object"
        },
        "id": {
          "description": "The OCID of the certificate authority (CA).",
          "maxLength": 255,
          "minLength": 1,
          "type": "string"
        },
        "issuerCertificateAuthorityId": {
          "description": "The OCID of the parent CA which issued this CA. If this is the root CA, then this value is the same as the `id`.\n",
          "maxLength": 255,
          "minLength": 1,
          "type": "string",
          "x-default-description": "The default is null, which means that this is a root CA."
        },
        "kmsKeyId": {
          "description": "The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.",
          "maxLength": 255,
          "type": "string"
        },
        "lifecycleState": {
          "description": "The current lifecycle state of the CA.",
          "enum": [
            "CREATING",
            "ACTIVE",
            "UPDATING",
            "DELETING",
            "DELETED",
            "SCHEDULING_DELETION",
            "PENDING_DELETION",
            "CANCELLING_DELETION",
            "FAILED",
            "PENDING_ACTIVATION"
          ],
          "type": "string",
          "x-obmcs-top-level-enum": "#/definitions/CertificateAuthorityLifecycleState"
        },
        "name": {
          "description": "A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.",
          "maxLength": 255,
          "minLength": 1,
          "type": "string"
        },
        "signingAlgorithm": {
          "description": "The algorithm used to sign public key certificates that the CA issues.",
          "enum": [
            "SHA256_WITH_RSA",
            "SHA384_WITH_RSA",
            "SHA512_WITH_RSA",
            "SHA256_WITH_ECDSA",
            "SHA384_WITH_ECDSA",
            "SHA512_WITH_ECDSA"
          ],
          "type": "string",
          "x-obmcs-top-level-enum": "#/definitions/SignatureAlgorithm"
        },
        "subject": {
          "$ref": "#/$defs/CertificateSubject"
        },
        "timeCreated": {
          "description": "A property indicating when the CA was created, expressed in [RFC 3339](https://tools.ietf.org/html/rfc3339) timestamp format.\nExample: `2019-04-03T21:10:29.600Z`\n",
          "format": "date-time",
          "type": "string"
        },
        "timeOfDeletion": {
          "default": null,
          "description": "An optional property indicating when to delete the CA version, expressed in [RFC 3339](https://tools.ietf.org/html/rfc3339) timestamp format.\nExample: `2019-04-03T21:10:29.600Z`\n",
          "format": "date-time",
          "type": "string"
        }
      },
      "required": [
        "id",
        "name",
        "timeCreated",
        "lifecycleState",
        "compartmentId",
        "configType"
      ],
      "type": "object",
      "x-example": "{\n   \"id\": \"ocid1.certificateauthority.oc1.iad.exampleae47ajxyawq5nb2cvbcrtjbbyi4augztb7py2fauxhhakbwcxrfpa\",\n   \"issuerCertificateAuthorityId\": \"ocid1.certificateauthority.oc1.iad.exampleae47ajxyac4uhdrldcvbvf6ejucnldpj565v5fauxkwn2dccujyta\",\n   \"name\": \"asddf\",\n   \"description\": \"sdf\",\n   \"timeCreated\": \"2021-03-22T22:14:54.565Z\",\n   \"timeOfDeletion\": null,\n   \"kmsKeyId\": \"ocid1.key.oc1.iad.examplegaag4s.abzwkljsd4iacvbv3s2e57hhwyljoc2zfxcgugfauxafqyxm7ljawezfc3cq\",\n   \"lifecycleState\": \"ACTIVE\",\n   \"compartmentId\": \"ocid1.tenancy.oc1..exampleauingds4uwkcvbxv4ijs7zxuqnoewldef4fauxs7vaax2fab4gcsq\",\n   \"certificateAuthorityRules\": [\n      {\n         \"ruleType\": \"CERTIFICATE_AUTHORITY_RENEWAL_RULE\",\n         \"renewalInterval\": \"P3650D\",\n         \"advanceRenewalPeriod\": \"P30D\"\n      }\n      {\n         \"ruleType\": \"CERTIFICATE_AUTHORITY_ISSUANCE_RULE\",\n         \"pathLengthConstraint\": 3,\n         \"nameConstraint\": {\n            \"permittedSubtree\": [\n              {\n                \"type\": \"DNS\",\n                \"value\": \"example.com\"\n              }\n            ],\n            \"excludedSubtree\": [\n              {\n                \"type\": \"DNS\",\n                \"value\": \"example.org\"\n              }\n            ]\n        }\n      }\n   ],\n   \"currentVersionSummary\": {\n      \"certificateAuthorityId\": \"ocid1.certificateauthority.oc1.iad.exampleae47ajxyawq5nb2cvbcrtjbbyi4augztb7py2fauxhhakbwcxrfpa\",\n      \"issuerCaVersionNumber\": null,\n      \"serialNumber\": \"123456789900771507182728973147594537602123456789\",\n      \"timeCreated\": \"2021-03-22T22:14:54.695Z\",\n      \"versionNumber\": 1,\n      \"versionName\": null,\n      \"timeOfDeletion\": null,\n      \"validity\": {\n         \"timeOfValidityNotBefore\": \"2021-03-22T22:14:54.565Z\",\n         \"timeOfValidityNotAfter\": \"2031-04-22T00:00:00.000Z\"\n      },\n      \"stages\": [\n         \"CURRENT\",\n         \"LATEST\"\n      ],\n      \"revocationStatus\": null\n   },\n   \"subject\": {\n      \"commonName\": \"www.example.net\",\n      \"country\": null,\n      \"domainComponent\": null,\n      \"distinguishedNameQualifier\": null,\n      \"generationQualifier\": null,\n      \"givenName\": null,\n      \"initials\": null,\n      \"localityName\": null,\n      \"organization\": null,\n      \"organizationalUnit\": null,\n      \"pseudonym\": null,\n      \"serialNumber\": null,\n      \"stateOrProvinceName\": null,\n      \"street\": null,\n      \"surname\": null,\n      \"title\": null,\n      \"userId\": null\n   },\n   \"configType\": \"SUBORDINATE_CA_ISSUED_BY_INTERNAL_CA\",\n   \"signingAlgorithm\": \"SHA512_WITH_RSA\",\n   \"freeformTags\": {},\n   \"definedTags\": {}\n}\n"
    },
    "CertificateAuthorityVersionSummary": {
      "description": "The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.",
      "properties": {
        "certificateAuthorityId": {
          "description": "The OCID of the CA.",
          "maxLength": 255,
          "minLength": 1,
          "type": "string"
        },
        "issuerCaVersionNumber": {
          "description": "The version number of the issuing CA.",
          "format": "int64",
          "minimum": 1,
          "type": "integer"
        },
        "revocationStatus": {
          "$ref": "#/$defs/RevocationStatus"
        },
        "serialNumber": {
          "description": "A unique certificate identifier used in certificate revocation tracking, formatted as octets.\nExample: `03 AC FC FA CC B3 CB 02 B8 F8 DE F5 85 E7 7B FF`\n",
          "maxLength": 59,
          "minLength": 2,
          "type": "string"
        },
        "stages": {
          "description": "A list of rotation states for this CA version.",
          "items": {
            "$ref": "#/$defs/VersionStage"
          },
          "type": "array"
        },
        "timeCreated": {
          "description": "A optional property indicating when the CA version was created, expressed in [RFC 3339](https://tools.ietf.org/html/rfc3339) timestamp format.\nExample: `2019-04-03T21:10:29.600Z`\n",
          "format": "date-time",
          "type": "string"
        },
        "timeOfDeletion": {
          "default": null,
          "description": "An optional property indicating when to delete the CA version, expressed in [RFC 3339](https://tools.ietf.org/html/rfc3339) timestamp format.\nExample: `2019-04-03T21:10:29.600Z`\n",
          "format": "date-time",
          "type": "string"
        },
        "validity": {
          "$ref": "#/$defs/Validity"
        },
        "versionName": {
          "default": null,
          "description": "The name of the CA version. When this value is not null, the name is unique across CA versions for a given CA.\n",
          "maxLength": 50,
          "minLength": 1,
          "type": "string"
        },
        "versionNumber": {
          "description": "The version number of the CA.",
          "format": "int64",
          "minimum": 1,
          "type": "integer"
        }
      },
      "required": [
        "certificateAuthorityId",
        "timeCreated",
        "versionNumber",
        "stages"
      ],
      "type": "object",
      "x-example": "{\n    \"certificateAuthorityId\": \"ocid1.certificateauthority.oc1.iad.exampleae47ajxyaovlvo7eycvb6jgblgmvdaixez2rrfauxov2v6wplhjiq\",\n    \"issuerCaVersionNumber\": null,\n    \"serialNumber\": \"1234567894183178072847116123235304931087123456789\",\n    \"timeCreated\": \"2021-04-06T22:11:58.288Z\",\n    \"versionNumber\": 1,\n    \"versionName\": null,\n    \"timeOfDeletion\": null,\n    \"validity\": {\n       \"timeOfValidityNotBefore\": \"2021-04-06T22:11:58.008Z\",\n       \"timeOfValidityNotAfter\": \"2031-05-06T00:00:00.000Z\"\n    },\n    \"stages\": [\n       \"CURRENT\",\n       \"LATEST\"\n    ],\n    \"revocationStatus\": null\n }\n"
    },
    "CertificateSubject": {
      "description": "The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.\n",
      "properties": {
        "commonName": {
          "description": "Common name or fully-qualified domain name (RDN CN).",
          "maxLength": 64,
          "minLength": 0,
          "type": "string"
        },
        "country": {
          "default": null,
          "description": "Country name (RDN C).",
          "maxLength": 2,
          "minLength": 1,
          "type": "string"
        },
        "distinguishedNameQualifier": {
          "default": null,
          "description": "Distinguished name qualifier(RDN DNQ).",
          "maxLength": 256,
          "minLength": 1,
          "type": "string"
        },
        "domainComponent": {
          "default": null,
          "description": "Domain component (RDN DC).",
          "maxLength": 256,
          "minLength": 1,
          "type": "string"
        },
        "generationQualifier": {
          "default": null,
          "description": "Personal generational qualifier (for example, Sr., Jr. 3rd, or IV).",
          "maxLength": 3,
          "minLength": 1,
          "type": "string"
        },
        "givenName": {
          "default": null,
          "description": "Personal given name (RDN G or GN).",
          "maxLength": 16,
          "minLength": 1,
          "type": "string"
        },
        "initials": {
          "default": null,
          "description": "Personal initials.",
          "maxLength": 5,
          "minLength": 1,
          "type": "string"
        },
        "localityName": {
          "default": null,
          "description": "Locality (RDN L).",
          "maxLength": 128,
          "minLength": 1,
          "type": "string"
        },
        "organization": {
          "default": null,
          "description": "Organization (RDN O).",
          "maxLength": 64,
          "minLength": 1,
          "type": "string"
        },
        "organizationalUnit": {
          "default": null,
          "description": "Organizational unit (RDN OU).",
          "maxLength": 64,
          "minLength": 1,
          "type": "string"
        },
        "pseudonym": {
          "default": null,
          "description": "Subject pseudonym.",
          "maxLength": 128,
          "minLength": 1,
          "type": "string"
        },
        "serialNumber": {
          "default": null,
          "description": "Unique subject identifier, which is not the same as the certificate serial number (RDN SERIALNUMBER).",
          "maxLength": 64,
          "minLength": 1,
          "type": "string"
        },
        "stateOrProvinceName": {
          "default": null,
          "description": "State or province name (RDN ST or S).",
          "maxLength": 128,
          "minLength": 1,
          "type": "string"
        },
        "street": {
          "default": null,
          "description": "Street address (RDN STREET).",
          "maxLength": 256,
          "minLength": 1,
          "type": "string"
        },
        "surname": {
          "default": null,
          "description": "Personal surname (RDN SN).",
          "maxLength": 40,
          "minLength": 1,
          "type": "string"
        },
        "title": {
          "default": null,
          "description": "Title (RDN T or TITLE).",
          "maxLength": 64,
          "minLength": 1,
          "type": "string"
        },
        "userId": {
          "default": null,
          "description": "User ID (RDN UID).",
          "maxLength": 256,
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "commonName"
      ],
      "type": "object",
      "x-example": "{\n  \"commonName\": \"www.example.com\",\n  \"country\": \"US\",\n  \"domainComponent\": null,\n  \"distinguishedNameQualifier\": null,\n  \"generationQualifier\": null,\n  \"givenName\": null,\n  \"initials\": null,\n  \"localityName\": \"Seattle\",\n  \"organization\": \"OCI\",\n  \"organizationalUnit\": null,\n  \"pseudonym\": null,\n  \"serialNumber\": null,\n  \"stateOrProvinceName\": \"Washington\",\n  \"street\": \"123 Main Street\",\n  \"surname\": null,\n  \"title\": null,\n  \"userId\": null,\n}\n"
    },
    "RevocationStatus": {
      "description": "The current revocation status of the entity.",
      "properties": {
        "revocationReason": {
          "description": "The reason the certificate or certificate authority (CA) was revoked.",
          "enum": [
            "UNSPECIFIED",
            "KEY_COMPROMISE",
            "CA_COMPROMISE",
            "AFFILIATION_CHANGED",
            "SUPERSEDED",
            "CESSATION_OF_OPERATION",
            "PRIVILEGE_WITHDRAWN",
            "AA_COMPROMISE"
          ],
          "type": "string",
          "x-obmcs-top-level-enum": "#/definitions/RevocationReason"
        },
        "timeOfRevocation": {
          "description": "The time when the entity was revoked, expressed in [RFC 3339](https://tools.ietf.org/html/rfc3339) timestamp format.\nExample: `2019-04-03T21:10:29.600Z`\n",
          "format": "date-time",
          "type": "string"
        }
      },
      "required": [
        "timeOfRevocation",
        "revocationReason"
      ],
      "type": "object",
      "x-example": "{\n  \"timeOfRevocation\": \"2021-04-07T23:03:12.211Z\",\n  \"revocationReason\": \"CESSATION_OF_OPERATION\"\n}\n"
    },
    "Validity": {
      "description": "An object that describes a period of time during which an entity is valid. If this is not provided when you create a certificate, the validity of the issuing CA is used.\n",
      "properties": {
        "timeOfValidityNotAfter": {
          "description": "The date on which the certificate validity period ends, expressed in [RFC 3339](https://tools.ietf.org/html/rfc3339) timestamp format.\nExample: `2019-04-03T21:10:29.600Z`\n",
          "format": "date-time",
          "type": "string"
        },
        "timeOfValidityNotBefore": {
          "description": "The date on which the certificate validity period begins, expressed in [RFC 3339](https://tools.ietf.org/html/rfc3339) timestamp format.\nExample: `2019-04-03T21:10:29.600Z`\n",
          "format": "date-time",
          "type": "string",
          "x-default-description": "defaults to the current time"
        }
      },
      "required": [
        "timeOfValidityNotAfter"
      ],
      "x-example": "{\n  \"timeOfValidityNotBefore\": \"2021-04-06T22:11:58.008Z\",\n  \"timeOfValidityNotAfter\": \"2031-05-06T00:00:00.000Z\"\n}\n"
    },
    "VersionStage": {
      "description": "A list of possible rotation states for the certificate version. A certificate version marked `CURRENT` is currently in use. A certificate version marked `PENDING` is staged and available for use, but has not been applied on the target system and, therefore, has not been rotated\ninto current, active use. The certificate most recently uploaded to the service is always marked `LATEST`. (The first version of a certificate is always marked as both `CURRENT` and `LATEST`.) A certificate version marked `PREVIOUS` is the certificate version that was most recently marked `CURRENT`, before the last certificate version rotation.\nA certificate version marked `DEPRECATED` is neither current, pending, nor the previous one in use. Only certificate versions marked `DEPRECATED` can be scheduled for deletion.\nA certificate version marked `PENDING_ACTIVATION` is issued by an externally managed CA and stays in that rotation state until you successfully sign the certificate signing request (CSR) externally and then import the signed certificate to the Certificates service.\n",
      "enum": [
        "CURRENT",
        "PENDING",
        "LATEST",
        "PREVIOUS",
        "DEPRECATED",
        "FAILED",
        "PENDING_ACTIVATION"
      ],
      "type": "string",
      "x-example": "{\n  \"stages\": [\n   \"CURRENT\",\n   \"LATEST\"\n  ],\n}\n"
    }
  }
}