Amazon Private CA · JSON Structure

Amazon Private Ca Key Usage Structure

Defines one or more purposes for which the key contained in the certificate can be used. Default value for each option is false.

Type: object Properties: 9

Certificate AuthorityCertificatesPKISecurityX.509TLSIoT

KeyUsage is a JSON Structure definition published by Amazon Private CA, describing 9 properties. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

DigitalSignature NonRepudiation KeyEncipherment DataEncipherment KeyAgreement KeyCertSign CRLSign EncipherOnly DecipherOnly

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-private-ca/refs/heads/main/json-structure/amazon-private-ca-key-usage-structure.json",
  "name": "KeyUsage",
  "description": "Defines one or more purposes for which the key contained in the certificate can be used. Default value for each option is false.",
  "type": "object",
  "properties": {
    "DigitalSignature": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Boolean"
        },
        {
          "description": " Key can be used for digital signing."
        }
      ]
    },
    "NonRepudiation": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Boolean"
        },
        {
          "description": "Key can be used for non-repudiation."
        }
      ]
    },
    "KeyEncipherment": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Boolean"
        },
        {
          "description": "Key can be used to encipher data."
        }
      ]
    },
    "DataEncipherment": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Boolean"
        },
        {
          "description": "Key can be used to decipher data."
        }
      ]
    },
    "KeyAgreement": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Boolean"
        },
        {
          "description": "Key can be used in a key-agreement protocol."
        }
      ]
    },
    "KeyCertSign": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Boolean"
        },
        {
          "description": "Key can be used to sign certificates."
        }
      ]
    },
    "CRLSign": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Boolean"
        },
        {
          "description": "Key can be used to sign CRLs."
        }
      ]
    },
    "EncipherOnly": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Boolean"
        },
        {
          "description": "Key can be used only to encipher data."
        }
      ]
    },
    "DecipherOnly": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Boolean"
        },
        {
          "description": "Key can be used only to decipher data."
        }
      ]
    }
  }
}