Azure v6.22.0, Apr 1 25

We recommend using Azure Native.

Azure v6.22.0 published on Tuesday, Apr 1, 2025 by Pulumi

azure.keyvault.getCertificate

Explore with Pulumi AI

We recommend using Azure Native.

Azure v6.22.0 published on Tuesday, Apr 1, 2025 by Pulumi

pulumi/pulumi-azure

Example Usage

TypeScript
Python
Go
C#
Java
YAML

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const example = azure.keyvault.getKeyVault({
    name: "examplekv",
    resourceGroupName: "some-resource-group",
});
const exampleGetCertificate = example.then(example => azure.keyvault.getCertificate({
    name: "secret-sauce",
    keyVaultId: example.id,
}));
export const certificateThumbprint = exampleGetCertificate.then(exampleGetCertificate => exampleGetCertificate.thumbprint);

import pulumi
import pulumi_azure as azure

example = azure.keyvault.get_key_vault(name="examplekv",
    resource_group_name="some-resource-group")
example_get_certificate = azure.keyvault.get_certificate(name="secret-sauce",
    key_vault_id=example.id)
pulumi.export("certificateThumbprint", example_get_certificate.thumbprint)

package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/keyvault"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := keyvault.LookupKeyVault(ctx, &keyvault.LookupKeyVaultArgs{
			Name:              "examplekv",
			ResourceGroupName: "some-resource-group",
		}, nil)
		if err != nil {
			return err
		}
		exampleGetCertificate, err := keyvault.LookupCertificate(ctx, &keyvault.LookupCertificateArgs{
			Name:       "secret-sauce",
			KeyVaultId: example.Id,
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("certificateThumbprint", exampleGetCertificate.Thumbprint)
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var example = Azure.KeyVault.GetKeyVault.Invoke(new()
    {
        Name = "examplekv",
        ResourceGroupName = "some-resource-group",
    });

    var exampleGetCertificate = Azure.KeyVault.GetCertificate.Invoke(new()
    {
        Name = "secret-sauce",
        KeyVaultId = example.Apply(getKeyVaultResult => getKeyVaultResult.Id),
    });

    return new Dictionary<string, object?>
    {
        ["certificateThumbprint"] = exampleGetCertificate.Apply(getCertificateResult => getCertificateResult.Thumbprint),
    };
});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.keyvault.KeyvaultFunctions;
import com.pulumi.azure.keyvault.inputs.GetKeyVaultArgs;
import com.pulumi.azure.keyvault.inputs.GetCertificateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = KeyvaultFunctions.getKeyVault(GetKeyVaultArgs.builder()
            .name("examplekv")
            .resourceGroupName("some-resource-group")
            .build());

        final var exampleGetCertificate = KeyvaultFunctions.getCertificate(GetCertificateArgs.builder()
            .name("secret-sauce")
            .keyVaultId(example.applyValue(getKeyVaultResult -> getKeyVaultResult.id()))
            .build());

        ctx.export("certificateThumbprint", exampleGetCertificate.applyValue(getCertificateResult -> getCertificateResult.thumbprint()));
    }
}

variables:
  example:
    fn::invoke:
      function: azure:keyvault:getKeyVault
      arguments:
        name: examplekv
        resourceGroupName: some-resource-group
  exampleGetCertificate:
    fn::invoke:
      function: azure:keyvault:getCertificate
      arguments:
        name: secret-sauce
        keyVaultId: ${example.id}
outputs:
  certificateThumbprint: ${exampleGetCertificate.thumbprint}

Using getCertificate

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

TypeScript
Python
Go
C#
Java
YAML

function getCertificate(args: GetCertificateArgs, opts?: InvokeOptions): Promise<GetCertificateResult>
function getCertificateOutput(args: GetCertificateOutputArgs, opts?: InvokeOptions): Output<GetCertificateResult>

def get_certificate(key_vault_id: Optional[str] = None,
                    name: Optional[str] = None,
                    version: Optional[str] = None,
                    opts: Optional[InvokeOptions] = None) -> GetCertificateResult
def get_certificate_output(key_vault_id: Optional[pulumi.Input[str]] = None,
                    name: Optional[pulumi.Input[str]] = None,
                    version: Optional[pulumi.Input[str]] = None,
                    opts: Optional[InvokeOptions] = None) -> Output[GetCertificateResult]

func LookupCertificate(ctx *Context, args *LookupCertificateArgs, opts ...InvokeOption) (*LookupCertificateResult, error)
func LookupCertificateOutput(ctx *Context, args *LookupCertificateOutputArgs, opts ...InvokeOption) LookupCertificateResultOutput

> Note: This function is named LookupCertificate in the Go SDK.

public static class GetCertificate 
{
    public static Task<GetCertificateResult> InvokeAsync(GetCertificateArgs args, InvokeOptions? opts = null)
    public static Output<GetCertificateResult> Invoke(GetCertificateInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetCertificateResult> getCertificate(GetCertificateArgs args, InvokeOptions options)
public static Output<GetCertificateResult> getCertificate(GetCertificateArgs args, InvokeOptions options)

fn::invoke:
  function: azure:keyvault/getCertificate:getCertificate
  arguments:
    # arguments dictionary

The following arguments are supported:

KeyVaultId string

Specifies the ID of the Key Vault instance where the Secret resides, available on the azure.keyvault.KeyVault Data Source / Resource.

Name string

Specifies the name of the Key Vault Certificate.

Version string

Specifies the version of the certificate to look up. (Defaults to latest)

NOTE: The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.

KeyVaultId string

Specifies the ID of the Key Vault instance where the Secret resides, available on the azure.keyvault.KeyVault Data Source / Resource.

Name string

Specifies the name of the Key Vault Certificate.

Version string

Specifies the version of the certificate to look up. (Defaults to latest)

NOTE: The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.

keyVaultId String

Specifies the ID of the Key Vault instance where the Secret resides, available on the azure.keyvault.KeyVault Data Source / Resource.

name String

Specifies the name of the Key Vault Certificate.

version String

Specifies the version of the certificate to look up. (Defaults to latest)

NOTE: The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.

keyVaultId string

Specifies the ID of the Key Vault instance where the Secret resides, available on the azure.keyvault.KeyVault Data Source / Resource.

name string

Specifies the name of the Key Vault Certificate.

version string

Specifies the version of the certificate to look up. (Defaults to latest)

NOTE: The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.

key_vault_id str

Specifies the ID of the Key Vault instance where the Secret resides, available on the azure.keyvault.KeyVault Data Source / Resource.

name str

Specifies the name of the Key Vault Certificate.

version str

Specifies the version of the certificate to look up. (Defaults to latest)

NOTE: The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.

keyVaultId String

Specifies the ID of the Key Vault instance where the Secret resides, available on the azure.keyvault.KeyVault Data Source / Resource.

name String

Specifies the name of the Key Vault Certificate.

version String

Specifies the version of the certificate to look up. (Defaults to latest)

NOTE: The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.

getCertificate Result

The following output properties are available:

CertificateData string: The raw Key Vault Certificate data represented as a hexadecimal string.
CertificateDataBase64 string: The raw Key Vault Certificate data represented as a base64 string.
CertificatePolicies List<GetCertificateCertificatePolicy>: A certificate_policy block as defined below.
Expires string: Expiry date of certificate in RFC3339 format.
Id string: The provider-assigned unique ID for this managed resource.
KeyVaultId string
Name string: The name of the Certificate Issuer.
NotBefore string: Not Before date of certificate in RFC3339 format.
ResourceManagerId string: The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.
ResourceManagerVersionlessId string: The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.
SecretId string: The ID of the associated Key Vault Secret.
Tags Dictionary<string, string>: A mapping of tags to assign to the resource.
Thumbprint string: The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
Version string: The current version of the Key Vault Certificate.
VersionlessId string: The Base ID of the Key Vault Certificate.
VersionlessSecretId string: The Base ID of the Key Vault Secret.

CertificateData string: The raw Key Vault Certificate data represented as a hexadecimal string.
CertificateDataBase64 string: The raw Key Vault Certificate data represented as a base64 string.
CertificatePolicies []GetCertificateCertificatePolicy: A certificate_policy block as defined below.
Expires string: Expiry date of certificate in RFC3339 format.
Id string: The provider-assigned unique ID for this managed resource.
KeyVaultId string
Name string: The name of the Certificate Issuer.
NotBefore string: Not Before date of certificate in RFC3339 format.
ResourceManagerId string: The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.
ResourceManagerVersionlessId string: The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.
SecretId string: The ID of the associated Key Vault Secret.
Tags map[string]string: A mapping of tags to assign to the resource.
Thumbprint string: The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
Version string: The current version of the Key Vault Certificate.
VersionlessId string: The Base ID of the Key Vault Certificate.
VersionlessSecretId string: The Base ID of the Key Vault Secret.

certificateData String: The raw Key Vault Certificate data represented as a hexadecimal string.
certificateDataBase64 String: The raw Key Vault Certificate data represented as a base64 string.
certificatePolicies List<GetCertificateCertificatePolicy>: A certificate_policy block as defined below.
expires String: Expiry date of certificate in RFC3339 format.
id String: The provider-assigned unique ID for this managed resource.
keyVaultId String
name String: The name of the Certificate Issuer.
notBefore String: Not Before date of certificate in RFC3339 format.
resourceManagerId String: The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.
resourceManagerVersionlessId String: The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.
secretId String: The ID of the associated Key Vault Secret.
tags Map<String,String>: A mapping of tags to assign to the resource.
thumbprint String: The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
version String: The current version of the Key Vault Certificate.
versionlessId String: The Base ID of the Key Vault Certificate.
versionlessSecretId String: The Base ID of the Key Vault Secret.

certificateData string: The raw Key Vault Certificate data represented as a hexadecimal string.
certificateDataBase64 string: The raw Key Vault Certificate data represented as a base64 string.
certificatePolicies GetCertificateCertificatePolicy[]: A certificate_policy block as defined below.
expires string: Expiry date of certificate in RFC3339 format.
id string: The provider-assigned unique ID for this managed resource.
keyVaultId string
name string: The name of the Certificate Issuer.
notBefore string: Not Before date of certificate in RFC3339 format.
resourceManagerId string: The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.
resourceManagerVersionlessId string: The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.
secretId string: The ID of the associated Key Vault Secret.
tags {[key: string]: string}: A mapping of tags to assign to the resource.
thumbprint string: The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
version string: The current version of the Key Vault Certificate.
versionlessId string: The Base ID of the Key Vault Certificate.
versionlessSecretId string: The Base ID of the Key Vault Secret.

certificate_data str: The raw Key Vault Certificate data represented as a hexadecimal string.
certificate_data_base64 str: The raw Key Vault Certificate data represented as a base64 string.
certificate_policies Sequence[GetCertificateCertificatePolicy]: A certificate_policy block as defined below.
expires str: Expiry date of certificate in RFC3339 format.
id str: The provider-assigned unique ID for this managed resource.
key_vault_id str
name str: The name of the Certificate Issuer.
not_before str: Not Before date of certificate in RFC3339 format.
resource_manager_id str: The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.
resource_manager_versionless_id str: The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.
secret_id str: The ID of the associated Key Vault Secret.
tags Mapping[str, str]: A mapping of tags to assign to the resource.
thumbprint str: The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
version str: The current version of the Key Vault Certificate.
versionless_id str: The Base ID of the Key Vault Certificate.
versionless_secret_id str: The Base ID of the Key Vault Secret.

certificateData String: The raw Key Vault Certificate data represented as a hexadecimal string.
certificateDataBase64 String: The raw Key Vault Certificate data represented as a base64 string.
certificatePolicies List<Property Map>: A certificate_policy block as defined below.
expires String: Expiry date of certificate in RFC3339 format.
id String: The provider-assigned unique ID for this managed resource.
keyVaultId String
name String: The name of the Certificate Issuer.
notBefore String: Not Before date of certificate in RFC3339 format.
resourceManagerId String: The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.
resourceManagerVersionlessId String: The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.
secretId String: The ID of the associated Key Vault Secret.
tags Map<String>: A mapping of tags to assign to the resource.
thumbprint String: The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
version String: The current version of the Key Vault Certificate.
versionlessId String: The Base ID of the Key Vault Certificate.
versionlessSecretId String: The Base ID of the Key Vault Secret.

Supporting Types

GetCertificateCertificatePolicy

IssuerParameters List<GetCertificateCertificatePolicyIssuerParameter>: A issuer_parameters block as defined below.
KeyProperties List<GetCertificateCertificatePolicyKeyProperty>: A key_properties block as defined below.
LifetimeActions List<GetCertificateCertificatePolicyLifetimeAction>: A lifetime_action block as defined below.
SecretProperties List<GetCertificateCertificatePolicySecretProperty>: A secret_properties block as defined below.
X509CertificateProperties List<GetCertificateCertificatePolicyX509CertificateProperty>: An x509_certificate_properties block as defined below.

IssuerParameters []GetCertificateCertificatePolicyIssuerParameter: A issuer_parameters block as defined below.
KeyProperties []GetCertificateCertificatePolicyKeyProperty: A key_properties block as defined below.
LifetimeActions []GetCertificateCertificatePolicyLifetimeAction: A lifetime_action block as defined below.
SecretProperties []GetCertificateCertificatePolicySecretProperty: A secret_properties block as defined below.
X509CertificateProperties []GetCertificateCertificatePolicyX509CertificateProperty: An x509_certificate_properties block as defined below.

issuerParameters List<GetCertificateCertificatePolicyIssuerParameter>: A issuer_parameters block as defined below.
keyProperties List<GetCertificateCertificatePolicyKeyProperty>: A key_properties block as defined below.
lifetimeActions List<GetCertificateCertificatePolicyLifetimeAction>: A lifetime_action block as defined below.
secretProperties List<GetCertificateCertificatePolicySecretProperty>: A secret_properties block as defined below.
x509CertificateProperties List<GetCertificateCertificatePolicyX509CertificateProperty>: An x509_certificate_properties block as defined below.

issuerParameters GetCertificateCertificatePolicyIssuerParameter[]: A issuer_parameters block as defined below.
keyProperties GetCertificateCertificatePolicyKeyProperty[]: A key_properties block as defined below.
lifetimeActions GetCertificateCertificatePolicyLifetimeAction[]: A lifetime_action block as defined below.
secretProperties GetCertificateCertificatePolicySecretProperty[]: A secret_properties block as defined below.
x509CertificateProperties GetCertificateCertificatePolicyX509CertificateProperty[]: An x509_certificate_properties block as defined below.

issuer_parameters Sequence[GetCertificateCertificatePolicyIssuerParameter]: A issuer_parameters block as defined below.
key_properties Sequence[GetCertificateCertificatePolicyKeyProperty]: A key_properties block as defined below.
lifetime_actions Sequence[GetCertificateCertificatePolicyLifetimeAction]: A lifetime_action block as defined below.
secret_properties Sequence[GetCertificateCertificatePolicySecretProperty]: A secret_properties block as defined below.
x509_certificate_properties Sequence[GetCertificateCertificatePolicyX509CertificateProperty]: An x509_certificate_properties block as defined below.

issuerParameters List<Property Map>: A issuer_parameters block as defined below.
keyProperties List<Property Map>: A key_properties block as defined below.
lifetimeActions List<Property Map>: A lifetime_action block as defined below.
secretProperties List<Property Map>: A secret_properties block as defined below.
x509CertificateProperties List<Property Map>: An x509_certificate_properties block as defined below.

GetCertificateCertificatePolicyIssuerParameter

Name string: Specifies the name of the Key Vault Certificate.

Name string: Specifies the name of the Key Vault Certificate.

name String: Specifies the name of the Key Vault Certificate.

name string: Specifies the name of the Key Vault Certificate.

name str: Specifies the name of the Key Vault Certificate.

name String: Specifies the name of the Key Vault Certificate.

GetCertificateCertificatePolicyKeyProperty

Curve string
Exportable bool: Is this Certificate Exportable?
KeySize int: The size of the Key used in the Certificate.
KeyType string: Specifies the Type of Key, for example RSA.
ReuseKey bool: Is the key reusable?

Curve string
Exportable bool: Is this Certificate Exportable?
KeySize int: The size of the Key used in the Certificate.
KeyType string: Specifies the Type of Key, for example RSA.
ReuseKey bool: Is the key reusable?

curve String
exportable Boolean: Is this Certificate Exportable?
keySize Integer: The size of the Key used in the Certificate.
keyType String: Specifies the Type of Key, for example RSA.
reuseKey Boolean: Is the key reusable?

curve string
exportable boolean: Is this Certificate Exportable?
keySize number: The size of the Key used in the Certificate.
keyType string: Specifies the Type of Key, for example RSA.
reuseKey boolean: Is the key reusable?

curve str
exportable bool: Is this Certificate Exportable?
key_size int: The size of the Key used in the Certificate.
key_type str: Specifies the Type of Key, for example RSA.
reuse_key bool: Is the key reusable?

curve String
exportable Boolean: Is this Certificate Exportable?
keySize Number: The size of the Key used in the Certificate.
keyType String: Specifies the Type of Key, for example RSA.
reuseKey Boolean: Is the key reusable?

GetCertificateCertificatePolicyLifetimeAction

Actions List<GetCertificateCertificatePolicyLifetimeActionAction>: A action block as defined below.
Triggers List<GetCertificateCertificatePolicyLifetimeActionTrigger>: A trigger block as defined below.

Actions []GetCertificateCertificatePolicyLifetimeActionAction: A action block as defined below.
Triggers []GetCertificateCertificatePolicyLifetimeActionTrigger: A trigger block as defined below.

actions List<GetCertificateCertificatePolicyLifetimeActionAction>: A action block as defined below.
triggers List<GetCertificateCertificatePolicyLifetimeActionTrigger>: A trigger block as defined below.

actions GetCertificateCertificatePolicyLifetimeActionAction[]: A action block as defined below.
triggers GetCertificateCertificatePolicyLifetimeActionTrigger[]: A trigger block as defined below.

actions Sequence[GetCertificateCertificatePolicyLifetimeActionAction]: A action block as defined below.
triggers Sequence[GetCertificateCertificatePolicyLifetimeActionTrigger]: A trigger block as defined below.

actions List<Property Map>: A action block as defined below.
triggers List<Property Map>: A trigger block as defined below.

GetCertificateCertificatePolicyLifetimeActionAction

ActionType string: The Type of action to be performed when the lifetime trigger is triggerec.

ActionType string: The Type of action to be performed when the lifetime trigger is triggerec.

actionType String: The Type of action to be performed when the lifetime trigger is triggerec.

actionType string: The Type of action to be performed when the lifetime trigger is triggerec.

action_type str: The Type of action to be performed when the lifetime trigger is triggerec.

actionType String: The Type of action to be performed when the lifetime trigger is triggerec.

GetCertificateCertificatePolicyLifetimeActionTrigger

DaysBeforeExpiry int: The number of days before the Certificate expires that the action associated with this Trigger should run.
LifetimePercentage int: The percentage at which during the Certificates Lifetime the action associated with this Trigger should run.

DaysBeforeExpiry int: The number of days before the Certificate expires that the action associated with this Trigger should run.
LifetimePercentage int: The percentage at which during the Certificates Lifetime the action associated with this Trigger should run.

daysBeforeExpiry Integer: The number of days before the Certificate expires that the action associated with this Trigger should run.
lifetimePercentage Integer: The percentage at which during the Certificates Lifetime the action associated with this Trigger should run.

daysBeforeExpiry number: The number of days before the Certificate expires that the action associated with this Trigger should run.
lifetimePercentage number: The percentage at which during the Certificates Lifetime the action associated with this Trigger should run.

days_before_expiry int: The number of days before the Certificate expires that the action associated with this Trigger should run.
lifetime_percentage int: The percentage at which during the Certificates Lifetime the action associated with this Trigger should run.

daysBeforeExpiry Number: The number of days before the Certificate expires that the action associated with this Trigger should run.
lifetimePercentage Number: The percentage at which during the Certificates Lifetime the action associated with this Trigger should run.

GetCertificateCertificatePolicySecretProperty

ContentType string: The Content-Type of the Certificate, for example application/x-pkcs12 for a PFX or application/x-pem-file for a PEM.

ContentType string: The Content-Type of the Certificate, for example application/x-pkcs12 for a PFX or application/x-pem-file for a PEM.

contentType String: The Content-Type of the Certificate, for example application/x-pkcs12 for a PFX or application/x-pem-file for a PEM.

contentType string: The Content-Type of the Certificate, for example application/x-pkcs12 for a PFX or application/x-pem-file for a PEM.

content_type str: The Content-Type of the Certificate, for example application/x-pkcs12 for a PFX or application/x-pem-file for a PEM.

contentType String: The Content-Type of the Certificate, for example application/x-pkcs12 for a PFX or application/x-pem-file for a PEM.

GetCertificateCertificatePolicyX509CertificateProperty

ExtendedKeyUsages List<string>: A list of Extended/Enhanced Key Usages.
KeyUsages List<string>: A list of uses associated with this Key.
Subject string: The Certificate's Subject.
SubjectAlternativeNames List<GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeName>: A subject_alternative_names block as defined below.
ValidityInMonths int: The Certificates Validity Period in Months.

ExtendedKeyUsages []string: A list of Extended/Enhanced Key Usages.
KeyUsages []string: A list of uses associated with this Key.
Subject string: The Certificate's Subject.
SubjectAlternativeNames []GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeName: A subject_alternative_names block as defined below.
ValidityInMonths int: The Certificates Validity Period in Months.

extendedKeyUsages List<String>: A list of Extended/Enhanced Key Usages.
keyUsages List<String>: A list of uses associated with this Key.
subject String: The Certificate's Subject.
subjectAlternativeNames List<GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeName>: A subject_alternative_names block as defined below.
validityInMonths Integer: The Certificates Validity Period in Months.

extendedKeyUsages string[]: A list of Extended/Enhanced Key Usages.
keyUsages string[]: A list of uses associated with this Key.
subject string: The Certificate's Subject.
subjectAlternativeNames GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeName[]: A subject_alternative_names block as defined below.
validityInMonths number: The Certificates Validity Period in Months.

extended_key_usages Sequence[str]: A list of Extended/Enhanced Key Usages.
key_usages Sequence[str]: A list of uses associated with this Key.
subject str: The Certificate's Subject.
subject_alternative_names Sequence[GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeName]: A subject_alternative_names block as defined below.
validity_in_months int: The Certificates Validity Period in Months.

extendedKeyUsages List<String>: A list of Extended/Enhanced Key Usages.
keyUsages List<String>: A list of uses associated with this Key.
subject String: The Certificate's Subject.
subjectAlternativeNames List<Property Map>: A subject_alternative_names block as defined below.
validityInMonths Number: The Certificates Validity Period in Months.

GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeName

DnsNames List<string>: A list of alternative DNS names (FQDNs) identified by the Certificate.
Emails List<string>: A list of email addresses identified by this Certificate.
Upns List<string>: A list of User Principal Names identified by the Certificate.

DnsNames []string: A list of alternative DNS names (FQDNs) identified by the Certificate.
Emails []string: A list of email addresses identified by this Certificate.
Upns []string: A list of User Principal Names identified by the Certificate.

dnsNames List<String>: A list of alternative DNS names (FQDNs) identified by the Certificate.
emails List<String>: A list of email addresses identified by this Certificate.
upns List<String>: A list of User Principal Names identified by the Certificate.

dnsNames string[]: A list of alternative DNS names (FQDNs) identified by the Certificate.
emails string[]: A list of email addresses identified by this Certificate.
upns string[]: A list of User Principal Names identified by the Certificate.

dns_names Sequence[str]: A list of alternative DNS names (FQDNs) identified by the Certificate.
emails Sequence[str]: A list of email addresses identified by this Certificate.
upns Sequence[str]: A list of User Principal Names identified by the Certificate.

dnsNames List<String>: A list of alternative DNS names (FQDNs) identified by the Certificate.
emails List<String>: A list of email addresses identified by this Certificate.
upns List<String>: A list of User Principal Names identified by the Certificate.

Package Details

Repository: Azure Classic pulumi/pulumi-azure
License: Apache-2.0
Notes: This Pulumi package is based on the azurerm Terraform Provider.

We recommend using Azure Native.

Azure v6.22.0 published on Tuesday, Apr 1, 2025 by Pulumi

pulumi/pulumi-azure

azure.keyvault.getCertificate

On this page

On this page

Example Usage

Using getCertificate

getCertificate Result

Supporting Types

GetCertificateCertificatePolicy

GetCertificateCertificatePolicyIssuerParameter

GetCertificateCertificatePolicyKeyProperty

GetCertificateCertificatePolicyLifetimeAction

GetCertificateCertificatePolicyLifetimeActionAction

GetCertificateCertificatePolicyLifetimeActionTrigger

GetCertificateCertificatePolicySecretProperty

GetCertificateCertificatePolicyX509CertificateProperty

GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeName

Package Details

On this page

On this page