Microsoft Azure Functions SiteCertificates API

The SiteCertificates API from Microsoft Azure Functions — 4 operation(s) for sitecertificates.

Operations 10

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/certificates List certificates on an app · Get all certificates in a resource group under a site #
Ask an LLM
“Which certificates are attached to my app?”
“Can I see every certificate stored under a site in the production slot?”
Tell an agent
List the certificates on app {name}.
Show all certificates stored under site {name}.
GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/certificates/{certificateName} Get a certificate on an app · Get a certificate belonging to a given site #
Ask an LLM
“What are the details of one certificate on my app, like its thumbprint or expiry?”
“Can I look up a site certificate by its name?”
Tell an agent
Get certificate {certificateName} on app {name}.
Show expiry and thumbprint for certificate {certificateName} of site {name}.
PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/certificates/{certificateName} Create or replace a certificate on an app · Create or update a certificate under a given site #
Ask an LLM
“How do I upload a new certificate to my app?”
“Can I replace a site certificate's full definition in one call?”
Tell an agent
Create certificate {certificateName} on app {name}.
Upload or replace certificate {certificateName} for site {name} with these properties.
PATCH /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/certificates/{certificateName} Patch an existing certificate on an app · Create or update a certificate under a given site #
Ask an LLM
“Can I change a few fields on a certificate already attached to my app?”
“What's the way to partially update a site certificate?”
Tell an agent
Patch existing certificate {certificateName} on app {name}.
Partially update certificate {certificateName} of site {name}, changing kind to {kind}.
DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/certificates/{certificateName} Delete a certificate from an app · Delete a certificate from the site #
Ask an LLM
“How do I remove a certificate from my app?”
“Can I delete an old certificate from the production site?”
Tell an agent destructive · confirm first
Delete certificate {certificateName} from app {name}.
Remove certificate {certificateName} from site {name}.
GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/slots/{slot}/certificates List certificates on a deployment slot · Get all certificates in a resource group for a given site and a deployment slot #
Ask an LLM
“Which certificates are attached to a deployment slot of my app?”
“Can I see the certificates for a staging slot specifically?”
Tell an agent
List the certificates on slot {slot} of app {name}.
Show all certificates for deployment slot {slot} in site {name}.
GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/slots/{slot}/certificates/{certificateName} Get a certificate on a deployment slot · Get a certificate for a given site and deployment slot #
Ask an LLM
“What are the details of one certificate on a deployment slot?”
“Can I look up a slot certificate by name?”
Tell an agent
Get certificate {certificateName} on slot {slot} of app {name}.
Show certificate {certificateName} for deployment slot {slot} in site {name}.
PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/slots/{slot}/certificates/{certificateName} Create or replace a certificate on a slot · Create or update a certificate in a given site and deployment slot #
Ask an LLM
“How do I add a certificate to a staging deployment slot?”
“Can I replace a deployment slot certificate's whole definition?”
Tell an agent
Create certificate {certificateName} on slot {slot} of app {name}.
Upload or replace certificate {certificateName} for deployment slot {slot} in site {name}.
PATCH /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/slots/{slot}/certificates/{certificateName} Patch an existing certificate on a slot · Create or update a certificate for a site and deployment slot #
Ask an LLM
“Can I partially update a certificate already on a deployment slot?”
“What's the way to change one field on a slot certificate?”
Tell an agent
Patch existing certificate {certificateName} on slot {slot} of app {name}.
Partially update slot {slot} certificate {certificateName} in site {name}, setting kind to {kind}.
DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/slots/{slot}/certificates/{certificateName} Delete a certificate from a deployment slot · Delete a certificate for a given site and deployment slot #
Ask an LLM
“How do I remove a certificate from a deployment slot?”
“Can I delete a certificate from my staging slot only?”
Tell an agent destructive · confirm first
Delete certificate {certificateName} from slot {slot} of app {name}.
Remove certificate {certificateName} from deployment slot {slot} in site {name}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/microsoft-azure-functions:microsoft-azure-functions-sitecertificates-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

microsoft-azure-functions-sitecertificates-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: WebApps API Client Site Certificates API
  version: '2025-05-01'
  x-typespec-generated:
  - emitter: '@azure-tools/typespec-autorest'
servers:
- url: https://management.azure.com
security:
- azure_auth:
  - user_impersonation
tags:
- name: SiteCertificates
paths:
  /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/certificates:
    get:
      operationId: SiteCertificates_List
      tags:
      - SiteCertificates
      summary: Get all certificates in a resource group under a site
      description: Get all certificates in a resource group under a site.
      parameters:
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
      - name: name
        in: path
        description: Name of the site.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CertificateCollection'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DefaultErrorResponse'
      x-ms-examples:
        List Certificates by resource group:
          $ref: ./examples/ListSiteCertificatesByResourceGroup.json
      x-ms-pageable:
        nextLinkName: nextLink
  ? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/certificates/{certificateName}
  : get:
      operationId: SiteCertificates_Get
      tags:
      - SiteCertificates
      summary: Get a certificate belonging to a given site
      description: Get a certificate belonging to a given site.
      parameters:
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
      - name: name
        in: path
        description: Name of the site.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      - name: certificateName
        in: path
        description: Name of the certificate.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Certificate'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DefaultErrorResponse'
      x-ms-examples:
        Get Certificate:
          $ref: ./examples/GetSiteCertificate.json
    put:
      operationId: SiteCertificates_CreateOrUpdate
      tags:
      - SiteCertificates
      summary: Create or update a certificate under a given site
      description: Create or update a certificate under a given site.
      parameters:
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
      - name: name
        in: path
        description: Name of the site.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      - name: certificateName
        in: path
        description: Name of the certificate.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      responses:
        '200':
          description: Resource 'Certificate' update operation succeeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Certificate'
        '201':
          description: Resource 'Certificate' create operation succeeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Certificate'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DefaultErrorResponse'
      x-ms-examples:
        Create Or Update Certificate:
          $ref: ./examples/CreateOrUpdateSiteCertificate.json
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Certificate'
        description: Details of certificate, if it exists already.
        required: true
    patch:
      operationId: SiteCertificates_Update
      tags:
      - SiteCertificates
      summary: Create or update a certificate under a given site
      description: Create or update a certificate under a given site.
      parameters:
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
      - name: name
        in: path
        description: Name of the site.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      - name: certificateName
        in: path
        description: Name of the certificate.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Certificate'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DefaultErrorResponse'
      x-ms-examples:
        Patch Certificate:
          $ref: ./examples/PatchSiteCertificate.json
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CertificatePatchResource'
        description: Details of certificate, if it exists already.
        required: true
    delete:
      operationId: SiteCertificates_Delete
      tags:
      - SiteCertificates
      summary: Delete a certificate from the site
      description: Delete a certificate from the site.
      parameters:
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
      - name: name
        in: path
        description: Name of the site.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      - name: certificateName
        in: path
        description: Name of the certificate.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      responses:
        '200':
          description: Resource deleted successfully.
        '204':
          description: Resource does not exist.
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DefaultErrorResponse'
      x-ms-examples:
        Delete Certificate:
          $ref: ./examples/DeleteSiteCertificate.json
  ? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/slots/{slot}/certificates
  : get:
      operationId: SiteCertificates_ListSlot
      tags:
      - SiteCertificates
      summary: Get all certificates in a resource group for a given site and a deployment slot
      description: Get all certificates in a resource group for a given site and a deployment slot.
      parameters:
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
      - name: name
        in: path
        description: Name of the site.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      - name: slot
        in: path
        description: Name of the deployment slot. If a slot is not specified, the API will create a binding for the production slot.
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CertificateCollection'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DefaultErrorResponse'
      x-ms-examples:
        List Certificates by resource group for a slot:
          $ref: ./examples/ListSiteCertificatesByResourceGroupSlot.json
      x-ms-pageable:
        nextLinkName: nextLink
  ? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}/slots/{slot}/certificates/{certificateName}
  : get:
      operationId: SiteCertificates_GetSlot
      tags:
      - SiteCertificates
      summary: Get a certificate for a given site and deployment slot
      description: Get a certificate for a given site and deployment slot.
      parameters:
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
      - name: name
        in: path
        description: Name of the site.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      - name: slot
        in: path
        description: Name of the deployment slot. If a slot is not specified, the API will create a binding for the production slot.
        required: true
        schema:
          type: string
      - name: certificateName
        in: path
        description: Name of the certificate.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Certificate'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DefaultErrorResponse'
      x-ms-examples:
        Get Site Certificate for a slot:
          $ref: ./examples/GetSiteCertificateSlot.json
    put:
      operationId: SiteCertificates_CreateOrUpdateSlot
      tags:
      - SiteCertificates
      summary: Create or update a certificate in a given site and deployment slot
      description: Create or update a certificate in a given site and deployment slot.
      parameters:
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
      - name: name
        in: path
        description: Name of the site.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      - name: slot
        in: path
        description: Name of the deployment slot. If a slot is not specified, the API will create a binding for the production slot.
        required: true
        schema:
          type: string
      - name: certificateName
        in: path
        description: Name of the certificate.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      responses:
        '200':
          description: Resource 'Certificate' update operation succeeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Certificate'
        '201':
          description: Resource 'Certificate' create operation succeeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Certificate'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DefaultErrorResponse'
      x-ms-examples:
        Create Or Update Certificate for slot:
          $ref: ./examples/CreateOrUpdateSiteCertificateSlot.json
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Certificate'
        description: Details of certificate, if it exists already.
        required: true
    patch:
      operationId: SiteCertificates_UpdateSlot
      tags:
      - SiteCertificates
      summary: Create or update a certificate for a site and deployment slot
      description: Create or update a certificate for a site and deployment slot.
      parameters:
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
      - name: name
        in: path
        description: Name of the site.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      - name: slot
        in: path
        description: Name of the deployment slot. If a slot is not specified, the API will create a binding for the production slot.
        required: true
        schema:
          type: string
      - name: certificateName
        in: path
        description: Name of the certificate.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Certificate'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DefaultErrorResponse'
      x-ms-examples:
        Patch Certificate for slot:
          $ref: ./examples/PatchSiteCertificateSlot.json
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CertificatePatchResource'
        description: Details of certificate, if it exists already.
        required: true
    delete:
      operationId: SiteCertificates_DeleteSlot
      tags:
      - SiteCertificates
      summary: Delete a certificate for a given site and deployment slot
      description: Delete a certificate for a given site and deployment slot.
      parameters:
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
      - name: name
        in: path
        description: Name of the site.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      - name: slot
        in: path
        description: Name of the deployment slot. If a slot is not specified, the API will create a binding for the production slot.
        required: true
        schema:
          type: string
      - name: certificateName
        in: path
        description: Name of the certificate.
        required: true
        schema:
          type: string
          pattern: ^[A-z][A-z0-9]*$
      responses:
        '200':
          description: Resource deleted successfully.
        '204':
          description: Resource does not exist.
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DefaultErrorResponse'
      x-ms-examples:
        Delete Certificate for slot:
          $ref: ./examples/DeleteSiteCertificateSlot.json
components:
  schemas:
    DefaultErrorResponseErrorDetailsItem:
      type: object
      description: Detailed errors.
      properties:
        code:
          type: string
          description: Standardized string to programmatically identify the error.
          readOnly: true
        message:
          type: string
          description: Detailed error description and debugging information.
          readOnly: true
        target:
          type: string
          description: Detailed error description and debugging information.
          readOnly: true
    CertificatePatchResourceProperties:
      type: object
      description: CertificatePatchResource resource specific properties
      properties:
        password:
          type: string
          description: Certificate password.
          readOnly: true
        friendlyName:
          type: string
          description: Friendly name of the certificate.
          readOnly: true
        subjectName:
          type: string
          description: Subject name of the certificate.
          readOnly: true
        hostNames:
          type: array
          description: Host names the certificate applies to.
          items:
            type: string
        pfxBlob:
          type: string
          format: byte
          description: Pfx blob.
        siteName:
          type: string
          description: App name.
          readOnly: true
        selfLink:
          type: string
          description: Self link.
          readOnly: true
        issuer:
          type: string
          description: Certificate issuer.
          readOnly: true
        issueDate:
          type: string
          format: date-time
          description: Certificate issue Date.
          readOnly: true
        expirationDate:
          type: string
          format: date-time
          description: Certificate expiration date.
          readOnly: true
        thumbprint:
          type: string
          description: Certificate thumbprint.
          readOnly: true
        valid:
          type: boolean
          description: Is the certificate valid?.
          readOnly: true
        cerBlob:
          type: string
          format: byte
          description: Raw bytes of .cer file
          readOnly: true
        publicKeyHash:
          type: string
          description: Public key hash.
          readOnly: true
        hostingEnvironmentProfile:
          $ref: '#/components/schemas/HostingEnvironmentProfile'
          description: Specification for the App Service Environment to use for the certificate.
          readOnly: true
        keyVaultId:
          type: string
          description: Key Vault Csm resource Id.
        keyVaultSecretName:
          type: string
          description: Key Vault secret name.
        keyVaultSecretStatus:
          $ref: '#/components/schemas/KeyVaultSecretStatus'
          description: Status of the Key Vault secret.
          readOnly: true
        serverFarmId:
          type: string
          description: 'Resource ID of the associated App Service plan, formatted as: "/subscriptions/{subscriptionID}/resourceGroups/{groupName}/providers/Microsoft.Web/serverfarms/{appServicePlanName}".'
        canonicalName:
          type: string
          description: CNAME of the certificate to be issued via free certificate
        domainValidationMethod:
          type: string
          description: Method of domain validation for free cert
    CertificateProperties:
      type: object
      description: Certificate resource specific properties
      properties:
        password:
          type: string
          description: Certificate password.
        friendlyName:
          type: string
          description: Friendly name of the certificate.
          readOnly: true
        subjectName:
          type: string
          description: Subject name of the certificate.
          readOnly: true
        hostNames:
          type: array
          description: Host names the certificate applies to.
          items:
            type: string
        pfxBlob:
          type: string
          format: byte
          description: Pfx blob.
        siteName:
          type: string
          description: App name.
          readOnly: true
        selfLink:
          type: string
          description: Self link.
          readOnly: true
        issuer:
          type: string
          description: Certificate issuer.
          readOnly: true
        issueDate:
          type: string
          format: date-time
          description: Certificate issue Date.
          readOnly: true
        expirationDate:
          type: string
          format: date-time
          description: Certificate expiration date.
          readOnly: true
        thumbprint:
          type: string
          description: Certificate thumbprint.
          readOnly: true
        valid:
          type: boolean
          description: Is the certificate valid?.
          readOnly: true
        cerBlob:
          type: string
          format: byte
          description: Raw bytes of .cer file
          readOnly: true
        publicKeyHash:
          type: string
          description: Public key hash.
          readOnly: true
        hostingEnvironmentProfile:
          $ref: '#/components/schemas/HostingEnvironmentProfile'
          description: Specification for the App Service Environment to use for the certificate.
          readOnly: true
        keyVaultId:
          type: string
          format: arm-id
          description: Azure Key Vault Csm resource Id.
          x-ms-arm-id-details:
            allowedResources:
            - type: Microsoft.KeyVault/vaults
        keyVaultSecretName:
          type: string
          description: Azure Key Vault secret name.
        keyVaultSecretStatus:
          $ref: '#/components/schemas/KeyVaultSecretStatus'
          description: Status of the Key Vault secret.
          readOnly: true
        serverFarmId:
          type: string
          format: arm-id
          description: Resource ID of the associated App Service plan.
          x-ms-arm-id-details:
            allowedResources:
            - type: Microsoft.Web/serverfarms
        canonicalName:
          type: string
          description: CNAME of the certificate to be issued via free certificate
        domainValidationMethod:
          type: string
          description: Method of domain validation for free cert
    DefaultErrorResponseError:
      type: object
      description: Error model.
      properties:
        code:
          type: string
          description: Standardized string to programmatically identify the error.
          readOnly: true
        message:
          type: string
          description: Detailed error description and debugging information.
          readOnly: true
        target:
          type: string
          description: Detailed error description and debugging information.
          readOnly: true
        details:
          type: array
          items:
            $ref: '#/components/schemas/DefaultErrorResponseErrorDetailsItem'
          x-ms-identifiers: []
        innererror:
          type: string
          description: More information to debug error.
          readOnly: true
    HostingEnvironmentProfile:
      type: object
      description: Specification for an App Service Environment to use for this resource.
      properties:
        id:
          type: string
          description: Resource ID of the App Service Environment.
        name:
          type: string
          description: Name of the App Service Environment.
          readOnly: true
        type:
          type: string
          description: Resource type of the App Service Environment.
          readOnly: true
    CertificatePatchResource:
      type: object
      description: ARM resource for a certificate.
      properties:
        properties:
          $ref: '#/components/schemas/CertificatePatchResourceProperties'
          description: CertificatePatchResource resource specific properties
          x-ms-client-flatten: true
      allOf:
      - $ref: '#/components/schemas/ProxyOnlyResource'
    CertificateCollection:
      type: object
      description: Collection of certificates.
      properties:
        value:
          type: array
          description: The Certificate items on this page
          items:
            $ref: '#/components/schemas/Certificate'
        nextLink:
          type: string
          format: uri
          description: The link to the next page of items
      required:
      - value
    DefaultErrorResponse:
      type: object
      description: App Service error response.
      properties:
        error:
          $ref: '#/components/schemas/DefaultErrorResponseError'
          description: Error model.
          readOnly: true
    Certificate:
      type: object
      description: SSL certificate for an app.
      properties:
        properties:
          $ref: '#/components/schemas/CertificateProperties'
          description: Certificate resource specific properties
          x-ms-client-flatten: true
        kind:
          type: string
          description: Kind of resource. If the resource is an app, you can refer to https://github.com/Azure/app-service-linux-docs/blob/master/Things_You_Should_Know/kind_property.md#app-service-resource-kind-reference for details supported values for kind.
      allOf:
      - $ref: ../../../../../../common-types/resource-management/v5/types.json#/definitions/TrackedResource
    ProxyOnlyResource:
      type: object
      description: Azure proxy only resource. This resource is not tracked by Azure Resource Manager.
      properties:
        id:
          type: string
          description: Resource Id.
          readOnly: true
        name:
          type: string
          description: Resource Name.
          readOnly: true
        kind:
          type: string
          description: Kind of resource.
        type:
          type: string
          description: Resource type.
          readOnly: true
    KeyVaultSecretStatus:
      type: string
      description: Status of the Key Vault secret.
      enum:
      - Initialized
      - WaitingOnCertificateOrder
      - Succeeded
      - CertificateOrderFailed
      - OperationNotPermittedOnKeyVault
      - AzureServiceUnauthorizedToAccessKeyVault
      - KeyVaultDoesNotExist
      - KeyVaultSecretDoesNotExist
      - UnknownError
      - ExternalPrivateKey
      - Unknown
      x-ms-enum:
        name: KeyVaultSecretStatus
        modelAsString: false
  securitySchemes:
    azure_auth:
      type: oauth2
      flows:
        implicit:
          scopes:
            user_impersonation: impersonate your user account
          authorizationUrl: https://login.microsoftonline.com/common/oauth2/authorize
      description: Azure Active Directory OAuth2 Flow.