GetCertificateResponse

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/stackit/main/json-schema/stackit-get-certificate-response-schema.json",
  "title": "GetCertificateResponse",
  "description": "GetCertificateResponse returns name, id and public key",
  "x-generated": "2026-10-18",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/stackit-certificates-openapi.yml#/components/schemas/GetCertificateResponse",
  "properties": {
    "data": {
      "$ref": "#/$defs/Data"
    },
    "id": {
      "description": "The certificates resource id",
      "pattern": "^[0-9a-z](?:(?:[0-9a-z]|-){0,251}[0-9a-z])?$",
      "type": "string"
    },
    "labels": {
      "additionalProperties": {
        "type": "string"
      },
      "description": "Labels represent user-defined metadata as key-value pairs.\nLabel count should not exceed 64 per Certificate.\n**Key Formatting Rules:**\nLength: 1-63 characters.\nCharacters: Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between.\nKeys starting with 'stackit-' are system-reserved; users MUST NOT manage them.\n\n**Value Formatting Rules:**\nLength: 0-63 characters (empty string explicitly allowed).\nCharacters (for non-empty values): Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between.\n",
      "type": "object"
    },
    "name": {
      "description": "Certificate display name",
      "pattern": "^[0-9a-z](?:(?:[0-9a-z]|-){0,251}[0-9a-z])?$",
      "type": "string"
    },
    "publicKey": {
      "description": "The PEM encoded public key part",
      "type": "string"
    },
    "region": {
      "description": "Region of the LoadBalancer",
      "type": "string"
    },
    "usage": {
      "$ref": "#/$defs/Usage"
    }
  },
  "type": "object",
  "$defs": {
    "Data": {
      "properties": {
        "dnsNames": {
          "description": "Comma-separated list of all domains and IP addresses the certificate is valid for (Subject Alternative Names).",
          "type": "string"
        },
        "extendedKeyUsage": {
          "description": "Comma-separated list of purposes the cert is valid for. 'Server Auth' is required for Load Balancer use.",
          "type": "string"
        },
        "fingerprintSha1": {
          "description": "The legacy SHA1 thumbprint. Provided for cross-referencing with older systems and browsers.",
          "pattern": "^[a-fA-F0-9]{40}$",
          "type": "string"
        },
        "fingerprintSha256": {
          "description": "The unique SHA256 hash of the raw certificate bytes. Use this as the primary unique identifier.",
          "pattern": "^[a-fA-F0-9]{64}$",
          "type": "string"
        },
        "isCa": {
          "description": "Indicates if the certificate is a Certificate Authority, meaning it can sign other certificates.",
          "type": "boolean"
        },
        "isSelfSigned": {
          "description": "Indicates if the certificate was signed by its own private key rather than a trusted third-party CA.",
          "type": "boolean"
        },
        "issuerCn": {
          "description": "The Common Name of the Certificate Authority (CA) that signed and issued the certificate.",
          "type": "string"
        },
        "keyStrength": {
          "description": "Human-readable summary of the public key's algorithm and bit-length or curve name.",
          "type": "string"
        },
        "notAfter": {
          "description": "The expiration timestamp. After this date, browsers will show security warnings (RFC3339 format).",
          "type": "string"
        },
        "notBefore": {
          "description": "The timestamp indicating when the certificate starts being valid (RFC3339 format).",
          "type": "string"
        },
        "organization": {
          "description": "Organization name associated with the certificate subject.",
          "type": "string"
        },
        "publicKeyAlgorithm": {
          "description": "The cryptographic algorithm used to generate the public/private key pair.",
          "type": "string"
        },
        "serialNumber": {
          "description": "The unique serial number assigned by the CA, represented in uppercase hexadecimal format.",
          "type": "string"
        },
        "signatureAlgorithm": {
          "description": "The algorithm used by the CA to sign this certificate.",
          "type": "string"
        },
        "subjectCn": {
          "description": "The primary identity of the certificate. Fallback sequence: Common Name -> First DNS Name -> Full Subject String.",
          "type": "string"
        }
      },
      "type": "object"
    },
    "Usage": {
      "properties": {
        "count": {
          "description": "Number of listeners using this certificate.",
          "format": "int32",
          "type": "integer"
        },
        "items": {
          "description": "List of Load Balancers with their associated listeners that use this certificate.",
          "items": {
            "$ref": "#/$defs/UsageItem"
          },
          "type": "array"
        }
      },
      "type": "object"
    },
    "UsageItem": {
      "properties": {
        "listenerNames": {
          "description": "The list of listener names in this Load Balancer, that are using the certificate.",
          "items": {
            "type": "string"
          },
          "type": "array"
        },
        "loadBalancerName": {
          "description": "The display name of the Load Balancer.",
          "type": "string"
        }
      },
      "type": "object"
    }
  }
}