Querying CA Certificate Details

Function

Queries details about a CA certificate.

Debugging

You can debug this API through automatic authentication in API Explorer or use the SDK sample code generated by API Explorer.

Authorization Information

Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.

If you are using role/policy-based authorization, see Permissions Policies and Supported Actions for details on the required permissions.
If you are using identity policy-based authorization, no identity policy-based permission required for calling this API.

URI

GET /v2/{project_id}/certmanager/private-certificate-authorities/{cert_id}

**Table 1** Path Parameters
Parameter	Mandatory	Type	Description
project_id	Yes	String	Project ID.
cert_id	Yes	String	Certificate ID.

Request Parameters

None

Response Parameters

Status code: 200

**Table 2** Response body parameters
Parameter	Type	Description
cert_id	String	Certificate ID.
serial_number	String	Serial number.
type	String	Certificate type.
apply	String	Certificate application scope.
distinguished_name	DistinguishedName object	Distinguished name (DN) of the certificate.
key_algorithm	String	RSA algorithm for generating key pairs, either RSA-2048 or RSA-3072.
signature_algorithm	String	Signature hash algorithm, either SHA-256 or SHA-512.
not_before	String	Effective time.
not_after	String	Expiration time.
status	String	Certificate status, which can be DISABLE, ENABLE, EXPIRED, or DELETE.
pem_code	String	PEM code of the certificate.
issuer_name	String	Issuer name.
crl_configuration	CrlConfigurationData object	CRL configuration of the certificate.

**Table 3** DistinguishedName
Parameter	Type	Description
common_name	String	CA name.
country	String	Country or region.
state	String	Province or state.
locality	String	City.
organization	String	Company name.
organizational_unit	String	Department name.

**Table 4** CrlConfigurationData
Parameter	Type	Description
enable	Boolean	Whether to enable the CRL configuration.
type	String	CRL configuration type, either SYSTEM or CUSTOMIZE.
crl_url	String	Enter a value manually when you want to customize it.
valid_day	Integer	Update cycle.

Status code: 400

**Table 5** Response body parameters
Parameter	Type	Description
error_code	String	Error code.
error_msg	String	Error message.
error_detail	String	Error details.
encoded_authorization_message	String	Encrypted detailed reason for rejection. You can call the API decode-authorization-message of STS to decrypt the reason.

Status code: 401

**Table 6** Response body parameters
Parameter	Type	Description
error_code	String	Error code.
error_msg	String	Error message.
error_detail	String	Error details.
encoded_authorization_message	String	Encrypted detailed reason for rejection. You can call the API decode-authorization-message of STS to decrypt the reason.

Status code: 403

**Table 7** Response body parameters
Parameter	Type	Description
error_code	String	Error code.
error_msg	String	Error message.
error_detail	String	Error details.
encoded_authorization_message	String	Encrypted detailed reason for rejection. You can call the API decode-authorization-message of STS to decrypt the reason.

Status code: 404

**Table 8** Response body parameters
Parameter	Type	Description
error_code	String	Error code.
error_msg	String	Error message.
error_detail	String	Error details.
encoded_authorization_message	String	Encrypted detailed reason for rejection. You can call the API decode-authorization-message of STS to decrypt the reason.

Status code: 500

**Table 9** Response body parameters
Parameter	Type	Description
error_code	String	Error code.
error_msg	String	Error message.
error_detail	String	Error details.
encoded_authorization_message	String	Encrypted detailed reason for rejection. You can call the API decode-authorization-message of STS to decrypt the reason.

Example Requests

None

Example Responses

Status code: 200

success

{
  "cert_id" : "f8bc69a2c3284a19ad647df12741f09c",
  "serial_number" : "string",
  "type" : "ROOT, SUBORDINATE",
  "apply" : "VIRTUAL_SMART_CARD",
  "distinguished_name" : {
    "common_name" : "api_test",
    "country" : "CN",
    "state" : "GuangDong",
    "locality" : "DongGuan",
    "organization" : "Huawei",
    "organizational_unit" : "Workspace"
  },
  "key_algorithm" : "RSA-3072",
  "signature_algorithm" : "SHA-256",
  "not_before" : "2024-08-01 00:00:00",
  "not_after" : "2025-08-01 00:00:00",
  "status" : "ENABLE",
  "pem_code" : "",
  "issuer_name" : "C=CN,ST=SZ,O=Huawei Cloud Computing Technologies Co.\\, Ltd.,CN=urn:huawei:workspace",
  "crl_configuration" : {
    "enable" : true,
    "type" : "SYSTEM",
    "crl_url" : "ldap:///CN=hcfactory-AD01-HCFACTORY-CA,CN=AD01-hcfactory,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=hcfactory,DC=huawei,DC=com?certificateRevocationList?base?objectClass=cRLDistributionPoint",
    "valid_day" : 3650
  }
}

Status Codes

Status Code	Description
200	success
400	The request cannot be understood by the server due to malformed syntax.
401	Authentication failed.
403	No operation permissions.
404	No resources found.
500	An internal service error occurred. For details about the error code, see the error code description.