{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/x-road-global/json-schema/x-road-global-approved-ds-tls-certification-authority-schema.json",
  "title": "ApprovedDsTlsCertificationAuthority",
  "description": "approved DS TLS certification authority (globalconf approvedConnectorTlsCA entry). Only the ACME directory URL and the DS TLS certificate profile id are exposed for the ACME server - the shared ACME type's auth/sign profile ids are meaningless for these entries and are never surfaced here.",
  "x-generated": "2026-11-10",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/x-road-global-central-server-admin-openapi.yml#/components/schemas/ApprovedDsTlsCertificationAuthority",
  "properties": {
    "id": {
      "description": "unique identifier",
      "format": "int32",
      "readOnly": true,
      "type": "integer"
    },
    "name": {
      "description": "DS TLS certification authority name",
      "format": "text",
      "maxLength": 255,
      "minLength": 1,
      "type": "string"
    },
    "issuer_distinguished_name": {
      "description": "certificate issuer distinguished name",
      "format": "text",
      "maxLength": 255,
      "minLength": 1,
      "type": "string"
    },
    "subject_distinguished_name": {
      "description": "certificate subject distinguished name",
      "format": "text",
      "maxLength": 255,
      "minLength": 1,
      "type": "string"
    },
    "not_after": {
      "description": "certificate validity not after",
      "format": "date-time",
      "maxLength": 24,
      "minLength": 24,
      "type": "string"
    },
    "not_before": {
      "description": "certificate validity not before",
      "format": "date-time",
      "maxLength": 24,
      "minLength": 24,
      "type": "string"
    },
    "acme_server_directory_url": {
      "description": "enables auto-enrollment from this CA's ACME server when set",
      "type": "string",
      "format": "url",
      "minLength": 1
    },
    "ds_tls_certificate_profile_id": {
      "description": "certificate profile id some ACME servers need to know the DS TLS certificate usage type",
      "format": "text",
      "type": "string",
      "minLength": 1
    }
  },
  "required": [
    "id",
    "name"
  ],
  "type": "object"
}