Certificate
The `AWS::ACMPCA::Certificate` resource is used to issue a certificate using your private certificate authority. For more information, see the IssueCertificate action.
Properties
Specifies X.509 certificate information to be included in the issued certificate. An `APIPassthrough` or `APICSRPassthrough` template variant must be selected, or else this parameter is ignored.
The issued Base64 PEM-encoded certificate.
The Amazon Resource Name (ARN) for the private CA issues the certificate.
The certificate signing request (CSR) for the certificate.
The name of the algorithm that will be used to sign the certificate to be issued. This parameter should not be confused with the `SigningAlgorithm` parameter used to sign a CSR in the `CreateCertificateAuthority` action. The specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key.
Specifies a custom configuration template to use when issuing a certificate. If this parameter is not provided, PCAshort defaults to the `EndEntityCertificate/V1` template. For more information about PCAshort templates, see Using Templates.
The period of time during which the certificate will be valid.
Information describing the start of the validity period of the certificate. This parameter sets the "Not Before" date for the certificate. By default, when issuing a certificate, PCAshort sets the "Not Before" date to the issuance time minus 60 minutes. This compensates for clock inconsistencies across computer systems. The `ValidityNotBefore` parameter can be used to customize the "Not Before" value. Unlike the `Validity` parameter, the `ValidityNotBefore` parameter is optional. The `ValidityNotBefore` value is expressed as an explicit date and time, using the `Validity` type value `ABSOLUTE`.