Microsoft.KeyVault (stable:7.5)

2025/01/16 • 27 updated methods

GetCertificates (updated)
Description The GetCertificates operation returns the set of certificates resources in the specified key vault. This operation requires the certificates/list permission.
Reference Link ¶

⚶ Changes

{
  "#id": "GetCertificates",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    }
  ],
  "$responses": {
    "200": {
      "$properties": {
        "value": {
          "$properties": {
            "attributes": [
              {
                "@added_1235d0dc5aa64c338a58edf5316cee62": {
                  "#name": "enabled",
                  "Description": "Determines whether the object is enabled.",
                  "Required": false,
                  "Type": "boolean"
                }
              },
              {
                "@added_7d79849534ca44f7bad2d61357a2332f": {
                  "#name": "nbf",
                  "Description": "Not before date in UTC.",
                  "Format": "unixtime",
                  "Required": false,
                  "Type": "integer"
                }
              },
              {
                "@added_0b9fd50c61a34aaba035322cb5e0ae00": {
                  "#name": "exp",
                  "Description": "Expiry date in UTC.",
                  "Format": "unixtime",
                  "Required": false,
                  "Type": "integer"
                }
              },
              {
                "@added_0e65c420606545b5b897c24540857436": {
                  "#name": "created",
                  "Description": "Creation time in UTC.",
                  "Format": "unixtime",
                  "Required": false,
                  "Type": "integer"
                }
              },
              {
                "@added_2aef0ce872b142259dba81dfdac4c217": {
                  "#name": "updated",
                  "Description": "Last updated time in UTC.",
                  "Format": "unixtime",
                  "Required": false,
                  "Type": "integer"
                }
              },
              {
                "#name": "recoveryLevel",
                "Enum": {
                  "new": [
                    [
                      "Purgeable",
                      "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                    ],
                    [
                      "Recoverable+Purgeable",
                      "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                    ],
                    [
                      "Recoverable",
                      "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                    ],
                    [
                      "Recoverable+ProtectedSubscription",
                      "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                    ],
                    [
                      "CustomizedRecoverable+Purgeable",
                      "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                    ],
                    [
                      "CustomizedRecoverable",
                      "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                    ],
                    [
                      "CustomizedRecoverable+ProtectedSubscription",
                      "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                    ]
                  ],
                  "old": [
                    [
                      "Purgeable",
                      "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                    ],
                    [
                      "Recoverable+Purgeable",
                      "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                    ],
                    [
                      "Recoverable",
                      "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                    ],
                    [
                      "Recoverable+ProtectedSubscription",
                      "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                    ],
                    [
                      "CustomizedRecoverable+Purgeable",
                      "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                    ],
                    [
                      "CustomizedRecoverable",
                      "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                    ],
                    [
                      "CustomizedRecoverable+ProtectedSubscription",
                      "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                    ]
                  ]
                }
              }
            ]
          }
        }
      }
    }
  }
}

⚼ Request

GET:  /certificates
{
api-version: string ,
maxresults: integer ,
includePending: boolean ,
}

⚐ Response (200)

{
value:
[
{
id: string ,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
tags: object ,
x5t: string ,
}
,
]
,
nextLink: string ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
}
DeleteCertificate (updated)
Description Deletes all versions of a certificate object along with its associated policy. Delete certificate cannot be used to remove individual versions of a certificate object. This operation requires the certificates/delete permission.
Reference Link ¶

⚶ Changes

{
  "#id": "DeleteCertificate",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    }
  ],
  "$responses": {
    "200": {
      "$properties": {
        "@added_9c1d8f84ca3e4c618ce3912317f95c82": {
          "#name": "id",
          "Description": "The certificate id.",
          "Required": false,
          "Type": "string"
        },
        "@added_20390c84af5742bf80bd28301f1fa64e": {
          "#name": "kid",
          "Description": "The key id.",
          "Required": false,
          "Type": "string"
        },
        "@added_4603843a1f704ca0a06926dbd2655728": {
          "#name": "sid",
          "Description": "The secret id.",
          "Required": false,
          "Type": "string"
        },
        "@added_c589aa69895540d998a0d8faf93e83ac": {
          "#name": "x5t",
          "Description": "Thumbprint of the certificate.",
          "Format": "base64url",
          "Required": false,
          "Type": "string"
        },
        "@added_b2527d7dfd6641e4aa9db7be1d4edcc7": {
          "#name": "policy",
          "Description": "The management policy.",
          "Required": false,
          "Type": "object",
          "$properties": [
            {
              "#name": "id",
              "Description": "The certificate id.",
              "Required": false,
              "Type": "string"
            },
            {
              "#name": "key_props",
              "Description": "Properties of the key backing a certificate.",
              "Required": false,
              "Type": "object",
              "$properties": [
                {
                  "#name": "exportable",
                  "Description": "Indicates if the private key can be exported. Release policy must be provided when creating the first version of an exportable key.",
                  "Required": false,
                  "Type": "boolean"
                },
                {
                  "#name": "kty",
                  "Description": "The type of key pair to be used for the certificate.",
                  "Enum": [
                    [
                      "EC",
                      "Elliptic Curve."
                    ],
                    [
                      "EC-HSM",
                      "Elliptic Curve with a private key which is not exportable from the HSM."
                    ],
                    [
                      "RSA",
                      "RSA (https://tools.ietf.org/html/rfc3447)."
                    ],
                    [
                      "RSA-HSM",
                      "RSA with a private key which is not exportable from the HSM."
                    ],
                    [
                      "oct",
                      "Octet sequence (used to represent symmetric keys)."
                    ],
                    [
                      "oct-HSM",
                      "Octet sequence with a private key which is not exportable from the HSM."
                    ]
                  ],
                  "Required": false,
                  "Type": "string"
                },
                {
                  "#name": "key_size",
                  "Description": "The key size in bits. For example: 2048, 3072, or 4096 for RSA.",
                  "Format": "int32",
                  "Required": false,
                  "Type": "integer"
                },
                {
                  "#name": "reuse_key",
                  "Description": "Indicates if the same key pair will be used on certificate renewal.",
                  "Required": false,
                  "Type": "boolean"
                },
                {
                  "#name": "crv",
                  "Description": "Elliptic curve name. For valid values, see JsonWebKeyCurveName.",
                  "Enum": [
                    [
                      "P-256",
                      "The NIST P-256 elliptic curve, AKA SECG curve SECP256R1."
                    ],
                    [
                      "P-384",
                      "The NIST P-384 elliptic curve, AKA SECG curve SECP384R1."
                    ],
                    [
                      "P-521",
                      "The NIST P-521 elliptic curve, AKA SECG curve SECP521R1."
                    ],
                    [
                      "P-256K",
                      "The SECG SECP256K1 elliptic curve."
                    ]
                  ],
                  "Required": false,
                  "Type": "string"
                }
              ]
            },
            {
              "#name": "secret_props",
              "Description": "Properties of the secret backing a certificate.",
              "Required": false,
              "Type": "object",
              "$properties": [
                {
                  "#name": "contentType",
                  "Description": "The media type (MIME type).",
                  "Required": false,
                  "Type": "string"
                }
              ]
            },
            {
              "#name": "x509_props",
              "Description": "Properties of the X509 component of a certificate.",
              "Required": false,
              "Type": "object",
              "$properties": [
                {
                  "#name": "subject",
                  "Description": "The subject name. Should be a valid X509 distinguished Name.",
                  "Required": false,
                  "Type": "string"
                },
                {
                  "#name": "ekus",
                  "Description": "The enhanced key usage.",
                  "Required": false,
                  "Type": "array",
                  "$items": {
                    "Type": "string"
                  }
                },
                {
                  "#name": "sans",
                  "Description": "The subject alternative names.",
                  "Required": false,
                  "Type": "object",
                  "$properties": [
                    {
                      "#name": "emails",
                      "Description": "Email addresses.",
                      "Required": false,
                      "Type": "array",
                      "$items": {
                        "Type": "string"
                      }
                    },
                    {
                      "#name": "dns_names",
                      "Description": "Domain names.",
                      "Required": false,
                      "Type": "array",
                      "$items": {
                        "Type": "string"
                      }
                    },
                    {
                      "#name": "upns",
                      "Description": "User principal names.",
                      "Required": false,
                      "Type": "array",
                      "$items": {
                        "Type": "string"
                      }
                    }
                  ]
                },
                {
                  "#name": "key_usage",
                  "Description": "Defines how the certificate's key may be used.",
                  "Required": false,
                  "Type": "array",
                  "$items": {
                    "Description": "Supported usages of a certificate key.",
                    "Enum": [
                      [
                        "digitalSignature",
                        "Indicates that the certificate key can be used as a digital signature."
                      ],
                      [
                        "nonRepudiation",
                        "Indicates that the certificate key can be used for authentication."
                      ],
                      [
                        "keyEncipherment",
                        "Indicates that the certificate key can be used for key encryption."
                      ],
                      [
                        "dataEncipherment",
                        "Indicates that the certificate key can be used for data encryption."
                      ],
                      [
                        "keyAgreement",
                        "Indicates that the certificate key can be used to determine key agreement, such as a key created using the Diffie-Hellman key agreement algorithm."
                      ],
                      [
                        "keyCertSign",
                        "Indicates that the certificate key can be used to sign certificates."
                      ],
                      [
                        "cRLSign",
                        "Indicates that the certificate key can be used to sign a certificate revocation list."
                      ],
                      [
                        "encipherOnly",
                        "Indicates that the certificate key can be used for encryption only."
                      ],
                      [
                        "decipherOnly",
                        "Indicates that the certificate key can be used for decryption only."
                      ]
                    ],
                    "Type": "string"
                  }
                },
                {
                  "#name": "validity_months",
                  "Description": "The duration that the certificate is valid in months.",
                  "Format": "int32",
                  "Required": false,
                  "Type": "integer"
                }
              ]
            },
            {
              "#name": "lifetime_actions",
              "Description": "Actions that will be performed by Key Vault over the lifetime of a certificate.",
              "Required": false,
              "Type": "array",
              "$items": {
                "Description": "Action and its trigger that will be performed by Key Vault over the lifetime of a certificate.",
                "Type": "object",
                "$properties": [
                  {
                    "#name": "trigger",
                    "Description": "The condition that will execute the action.",
                    "Required": false,
                    "Type": "object",
                    "$properties": [
                      {
                        "#name": "lifetime_percentage",
                        "Description": "Percentage of lifetime at which to trigger. Value should be between 1 and 99.",
                        "Format": "int32",
                        "Required": false,
                        "Type": "integer"
                      },
                      {
                        "#name": "days_before_expiry",
                        "Description": "Days before expiry to attempt renewal. Value should be between 1 and validity_in_months multiplied by 27. If validity_in_months is 36, then value should be between 1 and 972 (36 * 27).",
                        "Format": "int32",
                        "Required": false,
                        "Type": "integer"
                      }
                    ]
                  },
                  {
                    "#name": "action",
                    "Description": "The action that will be executed.",
                    "Required": false,
                    "Type": "object",
                    "$properties": [
                      {
                        "#name": "action_type",
                        "Description": "The type of the action.",
                        "Enum": [
                          [
                            "EmailContacts",
                            "A certificate policy that will email certificate contacts."
                          ],
                          [
                            "AutoRenew",
                            "A certificate policy that will auto-renew a certificate."
                          ]
                        ],
                        "Required": false,
                        "Type": "string"
                      }
                    ]
                  }
                ]
              }
            },
            {
              "#name": "issuer",
              "Description": "Parameters for the issuer of the X509 component of a certificate.",
              "Required": false,
              "Type": "object",
              "$properties": [
                {
                  "#name": "name",
                  "Description": "Name of the referenced issuer object or reserved names; for example, 'Self' or 'Unknown'.",
                  "Required": false,
                  "Type": "string"
                },
                {
                  "#name": "cty",
                  "Description": "Certificate type as supported by the provider (optional); for example 'OV-SSL', 'EV-SSL'",
                  "Required": false,
                  "Type": "string"
                },
                {
                  "#name": "cert_transparency",
                  "Description": "Indicates if the certificates generated under this policy should be published to certificate transparency logs.",
                  "Required": false,
                  "Type": "boolean"
                }
              ]
            },
            {
              "#name": "attributes",
              "Description": "The certificate attributes.",
              "Required": false,
              "Type": "object",
              "$properties": [
                {
                  "#name": "enabled",
                  "Description": "Determines whether the object is enabled.",
                  "Required": false,
                  "Type": "boolean"
                },
                {
                  "#name": "nbf",
                  "Description": "Not before date in UTC.",
                  "Format": "unixtime",
                  "Required": false,
                  "Type": "integer"
                },
                {
                  "#name": "exp",
                  "Description": "Expiry date in UTC.",
                  "Format": "unixtime",
                  "Required": false,
                  "Type": "integer"
                },
                {
                  "#name": "created",
                  "Description": "Creation time in UTC.",
                  "Format": "unixtime",
                  "Required": false,
                  "Type": "integer"
                },
                {
                  "#name": "updated",
                  "Description": "Last updated time in UTC.",
                  "Format": "unixtime",
                  "Required": false,
                  "Type": "integer"
                },
                {
                  "#name": "recoverableDays",
                  "Description": "softDelete data retention days. Value should be >=7 and <=90 when softDelete enabled, otherwise 0.",
                  "Format": "int32",
                  "Required": false,
                  "Type": "integer"
                },
                {
                  "#name": "recoveryLevel",
                  "Description": "Reflects the deletion recovery level currently in effect for certificates in the current vault. If it contains 'Purgeable', the certificate can be permanently deleted by a privileged user; otherwise, only the system can purge the certificate, at the end of the retention interval.",
                  "Enum": [
                    [
                      "Purgeable",
                      "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                    ],
                    [
                      "Recoverable+Purgeable",
                      "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                    ],
                    [
                      "Recoverable",
                      "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                    ],
                    [
                      "Recoverable+ProtectedSubscription",
                      "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                    ],
                    [
                      "CustomizedRecoverable+Purgeable",
                      "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                    ],
                    [
                      "CustomizedRecoverable",
                      "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                    ],
                    [
                      "CustomizedRecoverable+ProtectedSubscription",
                      "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                    ]
                  ],
                  "Required": false,
                  "Type": "string"
                }
              ]
            }
          ]
        },
        "@added_a142fdce4edc45d3ab774d28811152a6": {
          "#name": "cer",
          "Description": "CER contents of x509 certificate.",
          "Format": "byte",
          "Required": false,
          "Type": "string"
        },
        "@added_846753a4623948e39d8722d41cc73a88": {
          "#name": "contentType",
          "Description": "The content type of the secret. eg. 'application/x-pem-file' or 'application/x-pkcs12',",
          "Required": false,
          "Type": "string"
        },
        "@added_041b9133f70b4e5590e5c9e014540169": {
          "#name": "attributes",
          "Description": "The certificate attributes.",
          "Required": false,
          "Type": "object",
          "$properties": [
            {
              "#name": "enabled",
              "Description": "Determines whether the object is enabled.",
              "Required": false,
              "Type": "boolean"
            },
            {
              "#name": "nbf",
              "Description": "Not before date in UTC.",
              "Format": "unixtime",
              "Required": false,
              "Type": "integer"
            },
            {
              "#name": "exp",
              "Description": "Expiry date in UTC.",
              "Format": "unixtime",
              "Required": false,
              "Type": "integer"
            },
            {
              "#name": "created",
              "Description": "Creation time in UTC.",
              "Format": "unixtime",
              "Required": false,
              "Type": "integer"
            },
            {
              "#name": "updated",
              "Description": "Last updated time in UTC.",
              "Format": "unixtime",
              "Required": false,
              "Type": "integer"
            },
            {
              "#name": "recoverableDays",
              "Description": "softDelete data retention days. Value should be >=7 and <=90 when softDelete enabled, otherwise 0.",
              "Format": "int32",
              "Required": false,
              "Type": "integer"
            },
            {
              "#name": "recoveryLevel",
              "Description": "Reflects the deletion recovery level currently in effect for certificates in the current vault. If it contains 'Purgeable', the certificate can be permanently deleted by a privileged user; otherwise, only the system can purge the certificate, at the end of the retention interval.",
              "Enum": [
                [
                  "Purgeable",
                  "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                ],
                [
                  "Recoverable+Purgeable",
                  "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "Recoverable",
                  "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "Recoverable+ProtectedSubscription",
                  "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "CustomizedRecoverable+Purgeable",
                  "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                ],
                [
                  "CustomizedRecoverable",
                  "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                ],
                [
                  "CustomizedRecoverable+ProtectedSubscription",
                  "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                ]
              ],
              "Required": false,
              "Type": "string"
            }
          ]
        },
        "@added_4fec21ea1f1f4d6c88fdbcc1aa90de91": {
          "#name": "tags",
          "Description": "Application specific metadata in the form of key-value pairs",
          "Required": false,
          "Type": "object"
        }
      }
    }
  }
}

⚼ Request

DELETE:  /certificates/{certificate-name}
{
api-version: string ,
certificate-name: string ,
}

⚐ Response (200)

{
id: string ,
kid: string ,
sid: string ,
x5t: string ,
policy:
{
id: string ,
key_props:
{
exportable: boolean ,
kty: enum ,
key_size: integer ,
reuse_key: boolean ,
crv: enum ,
}
,
secret_props:
{
contentType: string ,
}
,
x509_props:
{
subject: string ,
ekus:
[
string ,
]
,
sans:
{
emails:
[
string ,
]
,
dns_names:
[
string ,
]
,
upns:
[
string ,
]
,
}
,
key_usage:
[
string ,
]
,
validity_months: integer ,
}
,
lifetime_actions:
[
{
trigger:
{
lifetime_percentage: integer ,
days_before_expiry: integer ,
}
,
action:
{
action_type: enum ,
}
,
}
,
]
,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
}
,
cer: string ,
contentType: string ,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
tags: object ,
recoveryId: string ,
scheduledPurgeDate: integer ,
deletedDate: integer ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
}
GetCertificate (updated)
Description Gets information about a specific certificate. This operation requires the certificates/get permission.
Reference Link ¶

⚶ Changes

{
  "#id": "GetCertificate",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    }
  ],
  "$responses": {
    "200": {
      "$properties": [
        {
          "policy": [
            {
              "key_props": [
                {
                  "#name": "kty",
                  "Enum": {
                    "new": [
                      [
                        "EC",
                        "Elliptic Curve."
                      ],
                      [
                        "EC-HSM",
                        "Elliptic Curve with a private key which is not exportable from the HSM."
                      ],
                      [
                        "RSA",
                        "RSA (https://tools.ietf.org/html/rfc3447)."
                      ],
                      [
                        "RSA-HSM",
                        "RSA with a private key which is not exportable from the HSM."
                      ],
                      [
                        "oct",
                        "Octet sequence (used to represent symmetric keys)."
                      ],
                      [
                        "oct-HSM",
                        "Octet sequence with a private key which is not exportable from the HSM."
                      ]
                    ],
                    "old": [
                      [
                        "EC",
                        ""
                      ],
                      [
                        "EC-HSM",
                        ""
                      ],
                      [
                        "RSA",
                        ""
                      ],
                      [
                        "RSA-HSM",
                        ""
                      ],
                      [
                        "oct",
                        ""
                      ],
                      [
                        "oct-HSM",
                        ""
                      ]
                    ]
                  }
                },
                {
                  "#name": "crv",
                  "Enum": {
                    "new": [
                      [
                        "P-256",
                        "The NIST P-256 elliptic curve, AKA SECG curve SECP256R1."
                      ],
                      [
                        "P-384",
                        "The NIST P-384 elliptic curve, AKA SECG curve SECP384R1."
                      ],
                      [
                        "P-521",
                        "The NIST P-521 elliptic curve, AKA SECG curve SECP521R1."
                      ],
                      [
                        "P-256K",
                        "The SECG SECP256K1 elliptic curve."
                      ]
                    ],
                    "old": [
                      [
                        "P-256",
                        ""
                      ],
                      [
                        "P-384",
                        ""
                      ],
                      [
                        "P-521",
                        ""
                      ],
                      [
                        "P-256K",
                        ""
                      ]
                    ]
                  }
                }
              ]
            },
            {
              "x509_props": [
                {
                  "key_usage": {
                    "Enum": {
                      "new": [
                        [
                          "digitalSignature",
                          "Indicates that the certificate key can be used as a digital signature."
                        ],
                        [
                          "nonRepudiation",
                          "Indicates that the certificate key can be used for authentication."
                        ],
                        [
                          "keyEncipherment",
                          "Indicates that the certificate key can be used for key encryption."
                        ],
                        [
                          "dataEncipherment",
                          "Indicates that the certificate key can be used for data encryption."
                        ],
                        [
                          "keyAgreement",
                          "Indicates that the certificate key can be used to determine key agreement, such as a key created using the Diffie-Hellman key agreement algorithm."
                        ],
                        [
                          "keyCertSign",
                          "Indicates that the certificate key can be used to sign certificates."
                        ],
                        [
                          "cRLSign",
                          "Indicates that the certificate key can be used to sign a certificate revocation list."
                        ],
                        [
                          "encipherOnly",
                          "Indicates that the certificate key can be used for encryption only."
                        ],
                        [
                          "decipherOnly",
                          "Indicates that the certificate key can be used for decryption only."
                        ]
                      ],
                      "old": [
                        [
                          "digitalSignature",
                          ""
                        ],
                        [
                          "nonRepudiation",
                          ""
                        ],
                        [
                          "keyEncipherment",
                          ""
                        ],
                        [
                          "dataEncipherment",
                          ""
                        ],
                        [
                          "keyAgreement",
                          ""
                        ],
                        [
                          "keyCertSign",
                          ""
                        ],
                        [
                          "cRLSign",
                          ""
                        ],
                        [
                          "encipherOnly",
                          ""
                        ],
                        [
                          "decipherOnly",
                          ""
                        ]
                      ]
                    }
                  }
                }
              ]
            },
            {
              "lifetime_actions": {
                "$properties": {
                  "action": [
                    {
                      "#name": "action_type",
                      "Enum": {
                        "new": [
                          [
                            "EmailContacts",
                            "A certificate policy that will email certificate contacts."
                          ],
                          [
                            "AutoRenew",
                            "A certificate policy that will auto-renew a certificate."
                          ]
                        ],
                        "old": [
                          [
                            "EmailContacts",
                            ""
                          ],
                          [
                            "AutoRenew",
                            ""
                          ]
                        ]
                      }
                    }
                  ]
                }
              }
            },
            {
              "attributes": [
                {
                  "@added_909da7a7dc944e39b4b31262fbca82f5": {
                    "#name": "enabled",
                    "Description": "Determines whether the object is enabled.",
                    "Required": false,
                    "Type": "boolean"
                  }
                },
                {
                  "@added_0d20c17759554044acebf282ea17d4dc": {
                    "#name": "nbf",
                    "Description": "Not before date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_a756843d994e4bddae6c671764450da2": {
                    "#name": "exp",
                    "Description": "Expiry date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_a554117023864f7ca1b051e6b4be686b": {
                    "#name": "created",
                    "Description": "Creation time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_33aec54f1c004c7faf3b0097d2cf55f6": {
                    "#name": "updated",
                    "Description": "Last updated time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "#name": "recoveryLevel",
                  "Enum": {
                    "new": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ],
                    "old": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ]
                  }
                }
              ]
            }
          ]
        },
        {
          "#name": "contentType",
          "Description": {
            "new": "The content type of the secret. eg. 'application/x-pem-file' or 'application/x-pkcs12',",
            "old": "The content type of the secret. eg. 'application/x-pem-file' or 'application/x-pkcs12', "
          }
        },
        {
          "attributes": [
            {
              "@added_f0a3e7d65fc54d018162bc7b0d1122dd": {
                "#name": "enabled",
                "Description": "Determines whether the object is enabled.",
                "Required": false,
                "Type": "boolean"
              }
            },
            {
              "@added_bdc41bbca13b4e39b6dcfa82de935dac": {
                "#name": "nbf",
                "Description": "Not before date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_0a5a5a3c5f814d3bba890a1a83f00281": {
                "#name": "exp",
                "Description": "Expiry date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_46fa5e4a9d1f43f98ba32555cdcfff51": {
                "#name": "created",
                "Description": "Creation time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_9d78838e0f154812b9329bd332c9e6da": {
                "#name": "updated",
                "Description": "Last updated time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "#name": "recoveryLevel",
              "Enum": {
                "new": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ],
                "old": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ]
              }
            }
          ]
        }
      ]
    }
  }
}

⚼ Request

GET:  /certificates/{certificate-name}/{certificate-version}
{
api-version: string ,
certificate-name: string ,
certificate-version: string ,
}

⚐ Response (200)

{
id: string ,
kid: string ,
sid: string ,
x5t: string ,
policy:
{
id: string ,
key_props:
{
exportable: boolean ,
kty: enum ,
key_size: integer ,
reuse_key: boolean ,
crv: enum ,
}
,
secret_props:
{
contentType: string ,
}
,
x509_props:
{
subject: string ,
ekus:
[
string ,
]
,
sans:
{
emails:
[
string ,
]
,
dns_names:
[
string ,
]
,
upns:
[
string ,
]
,
}
,
key_usage:
[
string ,
]
,
validity_months: integer ,
}
,
lifetime_actions:
[
{
trigger:
{
lifetime_percentage: integer ,
days_before_expiry: integer ,
}
,
action:
{
action_type: enum ,
}
,
}
,
]
,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
}
,
cer: string ,
contentType: string ,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
tags: object ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
}
UpdateCertificate (updated)
Description The UpdateCertificate operation applies the specified update on the given certificate; the only elements updated are the certificate's attributes. This operation requires the certificates/update permission.
Reference Link ¶

⚶ Changes

{
  "#id": "UpdateCertificate",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    },
    {
      "parameters": {
        "$properties": {
          "policy": [
            {
              "key_props": [
                {
                  "#name": "kty",
                  "Enum": {
                    "new": [
                      [
                        "EC",
                        "Elliptic Curve."
                      ],
                      [
                        "EC-HSM",
                        "Elliptic Curve with a private key which is not exportable from the HSM."
                      ],
                      [
                        "RSA",
                        "RSA (https://tools.ietf.org/html/rfc3447)."
                      ],
                      [
                        "RSA-HSM",
                        "RSA with a private key which is not exportable from the HSM."
                      ],
                      [
                        "oct",
                        "Octet sequence (used to represent symmetric keys)."
                      ],
                      [
                        "oct-HSM",
                        "Octet sequence with a private key which is not exportable from the HSM."
                      ]
                    ],
                    "old": [
                      [
                        "EC",
                        ""
                      ],
                      [
                        "EC-HSM",
                        ""
                      ],
                      [
                        "RSA",
                        ""
                      ],
                      [
                        "RSA-HSM",
                        ""
                      ],
                      [
                        "oct",
                        ""
                      ],
                      [
                        "oct-HSM",
                        ""
                      ]
                    ]
                  }
                },
                {
                  "#name": "crv",
                  "Enum": {
                    "new": [
                      [
                        "P-256",
                        "The NIST P-256 elliptic curve, AKA SECG curve SECP256R1."
                      ],
                      [
                        "P-384",
                        "The NIST P-384 elliptic curve, AKA SECG curve SECP384R1."
                      ],
                      [
                        "P-521",
                        "The NIST P-521 elliptic curve, AKA SECG curve SECP521R1."
                      ],
                      [
                        "P-256K",
                        "The SECG SECP256K1 elliptic curve."
                      ]
                    ],
                    "old": [
                      [
                        "P-256",
                        ""
                      ],
                      [
                        "P-384",
                        ""
                      ],
                      [
                        "P-521",
                        ""
                      ],
                      [
                        "P-256K",
                        ""
                      ]
                    ]
                  }
                }
              ]
            },
            {
              "x509_props": [
                {
                  "key_usage": {
                    "Enum": {
                      "new": [
                        [
                          "digitalSignature",
                          "Indicates that the certificate key can be used as a digital signature."
                        ],
                        [
                          "nonRepudiation",
                          "Indicates that the certificate key can be used for authentication."
                        ],
                        [
                          "keyEncipherment",
                          "Indicates that the certificate key can be used for key encryption."
                        ],
                        [
                          "dataEncipherment",
                          "Indicates that the certificate key can be used for data encryption."
                        ],
                        [
                          "keyAgreement",
                          "Indicates that the certificate key can be used to determine key agreement, such as a key created using the Diffie-Hellman key agreement algorithm."
                        ],
                        [
                          "keyCertSign",
                          "Indicates that the certificate key can be used to sign certificates."
                        ],
                        [
                          "cRLSign",
                          "Indicates that the certificate key can be used to sign a certificate revocation list."
                        ],
                        [
                          "encipherOnly",
                          "Indicates that the certificate key can be used for encryption only."
                        ],
                        [
                          "decipherOnly",
                          "Indicates that the certificate key can be used for decryption only."
                        ]
                      ],
                      "old": [
                        [
                          "digitalSignature",
                          ""
                        ],
                        [
                          "nonRepudiation",
                          ""
                        ],
                        [
                          "keyEncipherment",
                          ""
                        ],
                        [
                          "dataEncipherment",
                          ""
                        ],
                        [
                          "keyAgreement",
                          ""
                        ],
                        [
                          "keyCertSign",
                          ""
                        ],
                        [
                          "cRLSign",
                          ""
                        ],
                        [
                          "encipherOnly",
                          ""
                        ],
                        [
                          "decipherOnly",
                          ""
                        ]
                      ]
                    }
                  }
                }
              ]
            },
            {
              "lifetime_actions": {
                "$properties": {
                  "action": [
                    {
                      "#name": "action_type",
                      "Enum": {
                        "new": [
                          [
                            "EmailContacts",
                            "A certificate policy that will email certificate contacts."
                          ],
                          [
                            "AutoRenew",
                            "A certificate policy that will auto-renew a certificate."
                          ]
                        ],
                        "old": [
                          [
                            "EmailContacts",
                            ""
                          ],
                          [
                            "AutoRenew",
                            ""
                          ]
                        ]
                      }
                    }
                  ]
                }
              }
            },
            {
              "attributes": [
                {
                  "@added_eb0c4114c53f490d831a66d0dbf0758b": {
                    "#name": "enabled",
                    "Description": "Determines whether the object is enabled.",
                    "Required": false,
                    "Type": "boolean"
                  }
                },
                {
                  "@added_d286a58fc3bd4d65b2ee4af1036f5a2f": {
                    "#name": "nbf",
                    "Description": "Not before date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_bf2fa04ca2954a11a8d70cab4a6af643": {
                    "#name": "exp",
                    "Description": "Expiry date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_75087c9a3d3c479a928ffb69138887b5": {
                    "#name": "created",
                    "Description": "Creation time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_c009f87dc6e749fda72b318ee066215b": {
                    "#name": "updated",
                    "Description": "Last updated time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "#name": "recoveryLevel",
                  "Enum": {
                    "new": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ],
                    "old": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ]
                  }
                }
              ]
            }
          ],
          "attributes": [
            {
              "@added_a0f6c50d97454968affa7003ce742b53": {
                "#name": "enabled",
                "Description": "Determines whether the object is enabled.",
                "Required": false,
                "Type": "boolean"
              }
            },
            {
              "@added_e80e6f43e3894d0ebab618a376f35522": {
                "#name": "nbf",
                "Description": "Not before date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_0f6d5735c567402ca90184a8617bea62": {
                "#name": "exp",
                "Description": "Expiry date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_b5c3dac898944e0194e0a275bc5bc78f": {
                "#name": "created",
                "Description": "Creation time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_6ea6f6b1c1284f91a1f52b9018ed39d8": {
                "#name": "updated",
                "Description": "Last updated time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "#name": "recoveryLevel",
              "Enum": {
                "new": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ],
                "old": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ]
              }
            }
          ]
        }
      }
    }
  ],
  "$responses": {
    "200": {
      "$properties": [
        {
          "policy": [
            {
              "key_props": [
                {
                  "#name": "kty",
                  "Enum": {
                    "new": [
                      [
                        "EC",
                        "Elliptic Curve."
                      ],
                      [
                        "EC-HSM",
                        "Elliptic Curve with a private key which is not exportable from the HSM."
                      ],
                      [
                        "RSA",
                        "RSA (https://tools.ietf.org/html/rfc3447)."
                      ],
                      [
                        "RSA-HSM",
                        "RSA with a private key which is not exportable from the HSM."
                      ],
                      [
                        "oct",
                        "Octet sequence (used to represent symmetric keys)."
                      ],
                      [
                        "oct-HSM",
                        "Octet sequence with a private key which is not exportable from the HSM."
                      ]
                    ],
                    "old": [
                      [
                        "EC",
                        ""
                      ],
                      [
                        "EC-HSM",
                        ""
                      ],
                      [
                        "RSA",
                        ""
                      ],
                      [
                        "RSA-HSM",
                        ""
                      ],
                      [
                        "oct",
                        ""
                      ],
                      [
                        "oct-HSM",
                        ""
                      ]
                    ]
                  }
                },
                {
                  "#name": "crv",
                  "Enum": {
                    "new": [
                      [
                        "P-256",
                        "The NIST P-256 elliptic curve, AKA SECG curve SECP256R1."
                      ],
                      [
                        "P-384",
                        "The NIST P-384 elliptic curve, AKA SECG curve SECP384R1."
                      ],
                      [
                        "P-521",
                        "The NIST P-521 elliptic curve, AKA SECG curve SECP521R1."
                      ],
                      [
                        "P-256K",
                        "The SECG SECP256K1 elliptic curve."
                      ]
                    ],
                    "old": [
                      [
                        "P-256",
                        ""
                      ],
                      [
                        "P-384",
                        ""
                      ],
                      [
                        "P-521",
                        ""
                      ],
                      [
                        "P-256K",
                        ""
                      ]
                    ]
                  }
                }
              ]
            },
            {
              "x509_props": [
                {
                  "key_usage": {
                    "Enum": {
                      "new": [
                        [
                          "digitalSignature",
                          "Indicates that the certificate key can be used as a digital signature."
                        ],
                        [
                          "nonRepudiation",
                          "Indicates that the certificate key can be used for authentication."
                        ],
                        [
                          "keyEncipherment",
                          "Indicates that the certificate key can be used for key encryption."
                        ],
                        [
                          "dataEncipherment",
                          "Indicates that the certificate key can be used for data encryption."
                        ],
                        [
                          "keyAgreement",
                          "Indicates that the certificate key can be used to determine key agreement, such as a key created using the Diffie-Hellman key agreement algorithm."
                        ],
                        [
                          "keyCertSign",
                          "Indicates that the certificate key can be used to sign certificates."
                        ],
                        [
                          "cRLSign",
                          "Indicates that the certificate key can be used to sign a certificate revocation list."
                        ],
                        [
                          "encipherOnly",
                          "Indicates that the certificate key can be used for encryption only."
                        ],
                        [
                          "decipherOnly",
                          "Indicates that the certificate key can be used for decryption only."
                        ]
                      ],
                      "old": [
                        [
                          "digitalSignature",
                          ""
                        ],
                        [
                          "nonRepudiation",
                          ""
                        ],
                        [
                          "keyEncipherment",
                          ""
                        ],
                        [
                          "dataEncipherment",
                          ""
                        ],
                        [
                          "keyAgreement",
                          ""
                        ],
                        [
                          "keyCertSign",
                          ""
                        ],
                        [
                          "cRLSign",
                          ""
                        ],
                        [
                          "encipherOnly",
                          ""
                        ],
                        [
                          "decipherOnly",
                          ""
                        ]
                      ]
                    }
                  }
                }
              ]
            },
            {
              "lifetime_actions": {
                "$properties": {
                  "action": [
                    {
                      "#name": "action_type",
                      "Enum": {
                        "new": [
                          [
                            "EmailContacts",
                            "A certificate policy that will email certificate contacts."
                          ],
                          [
                            "AutoRenew",
                            "A certificate policy that will auto-renew a certificate."
                          ]
                        ],
                        "old": [
                          [
                            "EmailContacts",
                            ""
                          ],
                          [
                            "AutoRenew",
                            ""
                          ]
                        ]
                      }
                    }
                  ]
                }
              }
            },
            {
              "attributes": [
                {
                  "@added_7f5093be7cd842fcabc8b8b7c8590579": {
                    "#name": "enabled",
                    "Description": "Determines whether the object is enabled.",
                    "Required": false,
                    "Type": "boolean"
                  }
                },
                {
                  "@added_04d7c302b0b0487a83577080dde25cc8": {
                    "#name": "nbf",
                    "Description": "Not before date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_f478838a90ac4dcb9ee4d726a5dd5ded": {
                    "#name": "exp",
                    "Description": "Expiry date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_1eba628acf1f4dfd8d62abe5f3c5fcaf": {
                    "#name": "created",
                    "Description": "Creation time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_1666e95f601c4f0f8b19e3b1cd4156f9": {
                    "#name": "updated",
                    "Description": "Last updated time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "#name": "recoveryLevel",
                  "Enum": {
                    "new": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ],
                    "old": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ]
                  }
                }
              ]
            }
          ]
        },
        {
          "#name": "contentType",
          "Description": {
            "new": "The content type of the secret. eg. 'application/x-pem-file' or 'application/x-pkcs12',",
            "old": "The content type of the secret. eg. 'application/x-pem-file' or 'application/x-pkcs12', "
          }
        },
        {
          "attributes": [
            {
              "@added_065c2f6e81cc4e78bee24cea4d923b1e": {
                "#name": "enabled",
                "Description": "Determines whether the object is enabled.",
                "Required": false,
                "Type": "boolean"
              }
            },
            {
              "@added_4adc01168c5e47f2875727a25ebba1b0": {
                "#name": "nbf",
                "Description": "Not before date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_b17e4af67f9d4574a9cdaba5685009c3": {
                "#name": "exp",
                "Description": "Expiry date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_f36b1516aa10437a8c0502a1850b095e": {
                "#name": "created",
                "Description": "Creation time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_8317813a27e24f2887f608a7d400977d": {
                "#name": "updated",
                "Description": "Last updated time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "#name": "recoveryLevel",
              "Enum": {
                "new": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ],
                "old": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ]
              }
            }
          ]
        }
      ]
    }
  }
}

⚼ Request

PATCH:  /certificates/{certificate-name}/{certificate-version}
{
api-version: string ,
certificate-name: string ,
certificate-version: string ,
parameters:
{
policy:
{
id: string ,
key_props:
{
exportable: boolean ,
kty: enum ,
key_size: integer ,
reuse_key: boolean ,
crv: enum ,
}
,
secret_props:
{
contentType: string ,
}
,
x509_props:
{
subject: string ,
ekus:
[
string ,
]
,
sans:
{
emails:
[
string ,
]
,
dns_names:
[
string ,
]
,
upns:
[
string ,
]
,
}
,
key_usage:
[
string ,
]
,
validity_months: integer ,
}
,
lifetime_actions:
[
{
trigger:
{
lifetime_percentage: integer ,
days_before_expiry: integer ,
}
,
action:
{
action_type: enum ,
}
,
}
,
]
,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
tags: object ,
}
,
}

⚐ Response (200)

{
id: string ,
kid: string ,
sid: string ,
x5t: string ,
policy:
{
id: string ,
key_props:
{
exportable: boolean ,
kty: enum ,
key_size: integer ,
reuse_key: boolean ,
crv: enum ,
}
,
secret_props:
{
contentType: string ,
}
,
x509_props:
{
subject: string ,
ekus:
[
string ,
]
,
sans:
{
emails:
[
string ,
]
,
dns_names:
[
string ,
]
,
upns:
[
string ,
]
,
}
,
key_usage:
[
string ,
]
,
validity_months: integer ,
}
,
lifetime_actions:
[
{
trigger:
{
lifetime_percentage: integer ,
days_before_expiry: integer ,
}
,
action:
{
action_type: enum ,
}
,
}
,
]
,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
}
,
cer: string ,
contentType: string ,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
tags: object ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
}
BackupCertificate (updated)
Description Requests that a backup of the specified certificate be downloaded to the client. All versions of the certificate will be downloaded. This operation requires the certificates/backup permission.
Reference Link ¶

⚶ Changes

{
  "#id": "BackupCertificate",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    }
  ]
}

⚼ Request

POST:  /certificates/{certificate-name}/backup
{
api-version: string ,
certificate-name: string ,
}

⚐ Response (200)

{
value: string ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
}
CreateCertificate (updated)
Description If this is the first version, the certificate resource is created. This operation requires the certificates/create permission.
Reference Link ¶

⚶ Changes

{
  "#id": "CreateCertificate",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    },
    {
      "parameters": {
        "$properties": {
          "policy": [
            {
              "key_props": [
                {
                  "#name": "kty",
                  "Enum": {
                    "new": [
                      [
                        "EC",
                        "Elliptic Curve."
                      ],
                      [
                        "EC-HSM",
                        "Elliptic Curve with a private key which is not exportable from the HSM."
                      ],
                      [
                        "RSA",
                        "RSA (https://tools.ietf.org/html/rfc3447)."
                      ],
                      [
                        "RSA-HSM",
                        "RSA with a private key which is not exportable from the HSM."
                      ],
                      [
                        "oct",
                        "Octet sequence (used to represent symmetric keys)."
                      ],
                      [
                        "oct-HSM",
                        "Octet sequence with a private key which is not exportable from the HSM."
                      ]
                    ],
                    "old": [
                      [
                        "EC",
                        ""
                      ],
                      [
                        "EC-HSM",
                        ""
                      ],
                      [
                        "RSA",
                        ""
                      ],
                      [
                        "RSA-HSM",
                        ""
                      ],
                      [
                        "oct",
                        ""
                      ],
                      [
                        "oct-HSM",
                        ""
                      ]
                    ]
                  }
                },
                {
                  "#name": "crv",
                  "Enum": {
                    "new": [
                      [
                        "P-256",
                        "The NIST P-256 elliptic curve, AKA SECG curve SECP256R1."
                      ],
                      [
                        "P-384",
                        "The NIST P-384 elliptic curve, AKA SECG curve SECP384R1."
                      ],
                      [
                        "P-521",
                        "The NIST P-521 elliptic curve, AKA SECG curve SECP521R1."
                      ],
                      [
                        "P-256K",
                        "The SECG SECP256K1 elliptic curve."
                      ]
                    ],
                    "old": [
                      [
                        "P-256",
                        ""
                      ],
                      [
                        "P-384",
                        ""
                      ],
                      [
                        "P-521",
                        ""
                      ],
                      [
                        "P-256K",
                        ""
                      ]
                    ]
                  }
                }
              ]
            },
            {
              "x509_props": [
                {
                  "key_usage": {
                    "Enum": {
                      "new": [
                        [
                          "digitalSignature",
                          "Indicates that the certificate key can be used as a digital signature."
                        ],
                        [
                          "nonRepudiation",
                          "Indicates that the certificate key can be used for authentication."
                        ],
                        [
                          "keyEncipherment",
                          "Indicates that the certificate key can be used for key encryption."
                        ],
                        [
                          "dataEncipherment",
                          "Indicates that the certificate key can be used for data encryption."
                        ],
                        [
                          "keyAgreement",
                          "Indicates that the certificate key can be used to determine key agreement, such as a key created using the Diffie-Hellman key agreement algorithm."
                        ],
                        [
                          "keyCertSign",
                          "Indicates that the certificate key can be used to sign certificates."
                        ],
                        [
                          "cRLSign",
                          "Indicates that the certificate key can be used to sign a certificate revocation list."
                        ],
                        [
                          "encipherOnly",
                          "Indicates that the certificate key can be used for encryption only."
                        ],
                        [
                          "decipherOnly",
                          "Indicates that the certificate key can be used for decryption only."
                        ]
                      ],
                      "old": [
                        [
                          "digitalSignature",
                          ""
                        ],
                        [
                          "nonRepudiation",
                          ""
                        ],
                        [
                          "keyEncipherment",
                          ""
                        ],
                        [
                          "dataEncipherment",
                          ""
                        ],
                        [
                          "keyAgreement",
                          ""
                        ],
                        [
                          "keyCertSign",
                          ""
                        ],
                        [
                          "cRLSign",
                          ""
                        ],
                        [
                          "encipherOnly",
                          ""
                        ],
                        [
                          "decipherOnly",
                          ""
                        ]
                      ]
                    }
                  }
                }
              ]
            },
            {
              "lifetime_actions": {
                "$properties": {
                  "action": [
                    {
                      "#name": "action_type",
                      "Enum": {
                        "new": [
                          [
                            "EmailContacts",
                            "A certificate policy that will email certificate contacts."
                          ],
                          [
                            "AutoRenew",
                            "A certificate policy that will auto-renew a certificate."
                          ]
                        ],
                        "old": [
                          [
                            "EmailContacts",
                            ""
                          ],
                          [
                            "AutoRenew",
                            ""
                          ]
                        ]
                      }
                    }
                  ]
                }
              }
            },
            {
              "attributes": [
                {
                  "@added_9560acd813fd49519819bbdcc10ac349": {
                    "#name": "enabled",
                    "Description": "Determines whether the object is enabled.",
                    "Required": false,
                    "Type": "boolean"
                  }
                },
                {
                  "@added_edaaf32b1ae54054b7e7225830361681": {
                    "#name": "nbf",
                    "Description": "Not before date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_9c1bf1c8b346480bbee7da2f0b796d29": {
                    "#name": "exp",
                    "Description": "Expiry date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_be3d635bfb154d2c903eb94d69d54a2a": {
                    "#name": "created",
                    "Description": "Creation time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_665d5c774402475b838e766ebf591a2b": {
                    "#name": "updated",
                    "Description": "Last updated time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "#name": "recoveryLevel",
                  "Enum": {
                    "new": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ],
                    "old": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ]
                  }
                }
              ]
            }
          ],
          "attributes": [
            {
              "@added_ecb38629e1e143078b79577f5659d4bb": {
                "#name": "enabled",
                "Description": "Determines whether the object is enabled.",
                "Required": false,
                "Type": "boolean"
              }
            },
            {
              "@added_0408f5153b5a42658745a724f929d425": {
                "#name": "nbf",
                "Description": "Not before date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_a35f8f700b4c4e92aecafdb477d84053": {
                "#name": "exp",
                "Description": "Expiry date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_d379363755854e75b4f22ff76e5d5f98": {
                "#name": "created",
                "Description": "Creation time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_c7aa1a1d10eb4a388898fd08546ce008": {
                "#name": "updated",
                "Description": "Last updated time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "#name": "recoveryLevel",
              "Enum": {
                "new": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ],
                "old": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ]
              }
            }
          ]
        }
      }
    }
  ]
}

⚼ Request

POST:  /certificates/{certificate-name}/create
{
api-version: string ,
certificate-name: string ,
parameters:
{
policy:
{
id: string ,
key_props:
{
exportable: boolean ,
kty: enum ,
key_size: integer ,
reuse_key: boolean ,
crv: enum ,
}
,
secret_props:
{
contentType: string ,
}
,
x509_props:
{
subject: string ,
ekus:
[
string ,
]
,
sans:
{
emails:
[
string ,
]
,
dns_names:
[
string ,
]
,
upns:
[
string ,
]
,
}
,
key_usage:
[
string ,
]
,
validity_months: integer ,
}
,
lifetime_actions:
[
{
trigger:
{
lifetime_percentage: integer ,
days_before_expiry: integer ,
}
,
action:
{
action_type: enum ,
}
,
}
,
]
,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
tags: object ,
}
,
}

⚐ Response (202)

{
id: string ,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
csr: string ,
cancellation_requested: boolean ,
status: string ,
status_details: string ,
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
target: string ,
request_id: string ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
}
ImportCertificate (updated)
Description Imports an existing valid certificate, containing a private key, into Azure Key Vault. This operation requires the certificates/import permission. The certificate to be imported can be in either PFX or PEM format. If the certificate is in PEM format the PEM file must contain the key as well as x509 certificates. Key Vault will only accept a key in PKCS#8 format.
Reference Link ¶

⚶ Changes

{
  "#id": "ImportCertificate",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    },
    {
      "parameters": {
        "$properties": {
          "policy": [
            {
              "key_props": [
                {
                  "#name": "kty",
                  "Enum": {
                    "new": [
                      [
                        "EC",
                        "Elliptic Curve."
                      ],
                      [
                        "EC-HSM",
                        "Elliptic Curve with a private key which is not exportable from the HSM."
                      ],
                      [
                        "RSA",
                        "RSA (https://tools.ietf.org/html/rfc3447)."
                      ],
                      [
                        "RSA-HSM",
                        "RSA with a private key which is not exportable from the HSM."
                      ],
                      [
                        "oct",
                        "Octet sequence (used to represent symmetric keys)."
                      ],
                      [
                        "oct-HSM",
                        "Octet sequence with a private key which is not exportable from the HSM."
                      ]
                    ],
                    "old": [
                      [
                        "EC",
                        ""
                      ],
                      [
                        "EC-HSM",
                        ""
                      ],
                      [
                        "RSA",
                        ""
                      ],
                      [
                        "RSA-HSM",
                        ""
                      ],
                      [
                        "oct",
                        ""
                      ],
                      [
                        "oct-HSM",
                        ""
                      ]
                    ]
                  }
                },
                {
                  "#name": "crv",
                  "Enum": {
                    "new": [
                      [
                        "P-256",
                        "The NIST P-256 elliptic curve, AKA SECG curve SECP256R1."
                      ],
                      [
                        "P-384",
                        "The NIST P-384 elliptic curve, AKA SECG curve SECP384R1."
                      ],
                      [
                        "P-521",
                        "The NIST P-521 elliptic curve, AKA SECG curve SECP521R1."
                      ],
                      [
                        "P-256K",
                        "The SECG SECP256K1 elliptic curve."
                      ]
                    ],
                    "old": [
                      [
                        "P-256",
                        ""
                      ],
                      [
                        "P-384",
                        ""
                      ],
                      [
                        "P-521",
                        ""
                      ],
                      [
                        "P-256K",
                        ""
                      ]
                    ]
                  }
                }
              ]
            },
            {
              "x509_props": [
                {
                  "key_usage": {
                    "Enum": {
                      "new": [
                        [
                          "digitalSignature",
                          "Indicates that the certificate key can be used as a digital signature."
                        ],
                        [
                          "nonRepudiation",
                          "Indicates that the certificate key can be used for authentication."
                        ],
                        [
                          "keyEncipherment",
                          "Indicates that the certificate key can be used for key encryption."
                        ],
                        [
                          "dataEncipherment",
                          "Indicates that the certificate key can be used for data encryption."
                        ],
                        [
                          "keyAgreement",
                          "Indicates that the certificate key can be used to determine key agreement, such as a key created using the Diffie-Hellman key agreement algorithm."
                        ],
                        [
                          "keyCertSign",
                          "Indicates that the certificate key can be used to sign certificates."
                        ],
                        [
                          "cRLSign",
                          "Indicates that the certificate key can be used to sign a certificate revocation list."
                        ],
                        [
                          "encipherOnly",
                          "Indicates that the certificate key can be used for encryption only."
                        ],
                        [
                          "decipherOnly",
                          "Indicates that the certificate key can be used for decryption only."
                        ]
                      ],
                      "old": [
                        [
                          "digitalSignature",
                          ""
                        ],
                        [
                          "nonRepudiation",
                          ""
                        ],
                        [
                          "keyEncipherment",
                          ""
                        ],
                        [
                          "dataEncipherment",
                          ""
                        ],
                        [
                          "keyAgreement",
                          ""
                        ],
                        [
                          "keyCertSign",
                          ""
                        ],
                        [
                          "cRLSign",
                          ""
                        ],
                        [
                          "encipherOnly",
                          ""
                        ],
                        [
                          "decipherOnly",
                          ""
                        ]
                      ]
                    }
                  }
                }
              ]
            },
            {
              "lifetime_actions": {
                "$properties": {
                  "action": [
                    {
                      "#name": "action_type",
                      "Enum": {
                        "new": [
                          [
                            "EmailContacts",
                            "A certificate policy that will email certificate contacts."
                          ],
                          [
                            "AutoRenew",
                            "A certificate policy that will auto-renew a certificate."
                          ]
                        ],
                        "old": [
                          [
                            "EmailContacts",
                            ""
                          ],
                          [
                            "AutoRenew",
                            ""
                          ]
                        ]
                      }
                    }
                  ]
                }
              }
            },
            {
              "attributes": [
                {
                  "@added_43bf8097d55a48e2ada8e6276c380911": {
                    "#name": "enabled",
                    "Description": "Determines whether the object is enabled.",
                    "Required": false,
                    "Type": "boolean"
                  }
                },
                {
                  "@added_e08057d6119142dba2677fc0c571e1d2": {
                    "#name": "nbf",
                    "Description": "Not before date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_a2e459cab5cb423eba03e12eed05c615": {
                    "#name": "exp",
                    "Description": "Expiry date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_19c70498004943edab9b594af0c4b79a": {
                    "#name": "created",
                    "Description": "Creation time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_029caa316dc844af957fabfa71d9ef9d": {
                    "#name": "updated",
                    "Description": "Last updated time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "#name": "recoveryLevel",
                  "Enum": {
                    "new": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ],
                    "old": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ]
                  }
                }
              ]
            }
          ],
          "attributes": [
            {
              "@added_6701c30282d546f2be1e1fc995fe518c": {
                "#name": "enabled",
                "Description": "Determines whether the object is enabled.",
                "Required": false,
                "Type": "boolean"
              }
            },
            {
              "@added_ea68fbce98c14229aa8cf6d093279482": {
                "#name": "nbf",
                "Description": "Not before date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_c6533f9edb4b4b49ab6150f8513cd254": {
                "#name": "exp",
                "Description": "Expiry date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_4d9ea23aaf2748109002d7bb6fbc5654": {
                "#name": "created",
                "Description": "Creation time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_4189ad01315747008c0f5a39b9a14d6e": {
                "#name": "updated",
                "Description": "Last updated time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "#name": "recoveryLevel",
              "Enum": {
                "new": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ],
                "old": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ]
              }
            }
          ]
        }
      }
    }
  ],
  "$responses": {
    "200": {
      "$properties": [
        {
          "policy": [
            {
              "key_props": [
                {
                  "#name": "kty",
                  "Enum": {
                    "new": [
                      [
                        "EC",
                        "Elliptic Curve."
                      ],
                      [
                        "EC-HSM",
                        "Elliptic Curve with a private key which is not exportable from the HSM."
                      ],
                      [
                        "RSA",
                        "RSA (https://tools.ietf.org/html/rfc3447)."
                      ],
                      [
                        "RSA-HSM",
                        "RSA with a private key which is not exportable from the HSM."
                      ],
                      [
                        "oct",
                        "Octet sequence (used to represent symmetric keys)."
                      ],
                      [
                        "oct-HSM",
                        "Octet sequence with a private key which is not exportable from the HSM."
                      ]
                    ],
                    "old": [
                      [
                        "EC",
                        ""
                      ],
                      [
                        "EC-HSM",
                        ""
                      ],
                      [
                        "RSA",
                        ""
                      ],
                      [
                        "RSA-HSM",
                        ""
                      ],
                      [
                        "oct",
                        ""
                      ],
                      [
                        "oct-HSM",
                        ""
                      ]
                    ]
                  }
                },
                {
                  "#name": "crv",
                  "Enum": {
                    "new": [
                      [
                        "P-256",
                        "The NIST P-256 elliptic curve, AKA SECG curve SECP256R1."
                      ],
                      [
                        "P-384",
                        "The NIST P-384 elliptic curve, AKA SECG curve SECP384R1."
                      ],
                      [
                        "P-521",
                        "The NIST P-521 elliptic curve, AKA SECG curve SECP521R1."
                      ],
                      [
                        "P-256K",
                        "The SECG SECP256K1 elliptic curve."
                      ]
                    ],
                    "old": [
                      [
                        "P-256",
                        ""
                      ],
                      [
                        "P-384",
                        ""
                      ],
                      [
                        "P-521",
                        ""
                      ],
                      [
                        "P-256K",
                        ""
                      ]
                    ]
                  }
                }
              ]
            },
            {
              "x509_props": [
                {
                  "key_usage": {
                    "Enum": {
                      "new": [
                        [
                          "digitalSignature",
                          "Indicates that the certificate key can be used as a digital signature."
                        ],
                        [
                          "nonRepudiation",
                          "Indicates that the certificate key can be used for authentication."
                        ],
                        [
                          "keyEncipherment",
                          "Indicates that the certificate key can be used for key encryption."
                        ],
                        [
                          "dataEncipherment",
                          "Indicates that the certificate key can be used for data encryption."
                        ],
                        [
                          "keyAgreement",
                          "Indicates that the certificate key can be used to determine key agreement, such as a key created using the Diffie-Hellman key agreement algorithm."
                        ],
                        [
                          "keyCertSign",
                          "Indicates that the certificate key can be used to sign certificates."
                        ],
                        [
                          "cRLSign",
                          "Indicates that the certificate key can be used to sign a certificate revocation list."
                        ],
                        [
                          "encipherOnly",
                          "Indicates that the certificate key can be used for encryption only."
                        ],
                        [
                          "decipherOnly",
                          "Indicates that the certificate key can be used for decryption only."
                        ]
                      ],
                      "old": [
                        [
                          "digitalSignature",
                          ""
                        ],
                        [
                          "nonRepudiation",
                          ""
                        ],
                        [
                          "keyEncipherment",
                          ""
                        ],
                        [
                          "dataEncipherment",
                          ""
                        ],
                        [
                          "keyAgreement",
                          ""
                        ],
                        [
                          "keyCertSign",
                          ""
                        ],
                        [
                          "cRLSign",
                          ""
                        ],
                        [
                          "encipherOnly",
                          ""
                        ],
                        [
                          "decipherOnly",
                          ""
                        ]
                      ]
                    }
                  }
                }
              ]
            },
            {
              "lifetime_actions": {
                "$properties": {
                  "action": [
                    {
                      "#name": "action_type",
                      "Enum": {
                        "new": [
                          [
                            "EmailContacts",
                            "A certificate policy that will email certificate contacts."
                          ],
                          [
                            "AutoRenew",
                            "A certificate policy that will auto-renew a certificate."
                          ]
                        ],
                        "old": [
                          [
                            "EmailContacts",
                            ""
                          ],
                          [
                            "AutoRenew",
                            ""
                          ]
                        ]
                      }
                    }
                  ]
                }
              }
            },
            {
              "attributes": [
                {
                  "@added_55b8a2bf3eb64bc083498f8eabd6621b": {
                    "#name": "enabled",
                    "Description": "Determines whether the object is enabled.",
                    "Required": false,
                    "Type": "boolean"
                  }
                },
                {
                  "@added_61d1a32bff2143fe83e2286b0970789a": {
                    "#name": "nbf",
                    "Description": "Not before date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_f923c0975502434a8e667e42602559f0": {
                    "#name": "exp",
                    "Description": "Expiry date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_2109e616812046cf867b889ae36be5b8": {
                    "#name": "created",
                    "Description": "Creation time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_e53516c2faa3458aa89b9aaab620d681": {
                    "#name": "updated",
                    "Description": "Last updated time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "#name": "recoveryLevel",
                  "Enum": {
                    "new": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ],
                    "old": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ]
                  }
                }
              ]
            }
          ]
        },
        {
          "#name": "contentType",
          "Description": {
            "new": "The content type of the secret. eg. 'application/x-pem-file' or 'application/x-pkcs12',",
            "old": "The content type of the secret. eg. 'application/x-pem-file' or 'application/x-pkcs12', "
          }
        },
        {
          "attributes": [
            {
              "@added_73ba6ea18a404657be05f3dca2f98a8d": {
                "#name": "enabled",
                "Description": "Determines whether the object is enabled.",
                "Required": false,
                "Type": "boolean"
              }
            },
            {
              "@added_d8537146828f401584e8552a8de4b928": {
                "#name": "nbf",
                "Description": "Not before date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_0bc3722de5bf4dabae7e8e592773d97d": {
                "#name": "exp",
                "Description": "Expiry date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_ffaaf32a418e43e3aa883b44b3a1fd51": {
                "#name": "created",
                "Description": "Creation time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_8a38eaacaffd4b51b8f8923f585e35e6": {
                "#name": "updated",
                "Description": "Last updated time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "#name": "recoveryLevel",
              "Enum": {
                "new": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ],
                "old": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ]
              }
            }
          ]
        }
      ]
    }
  }
}

⚼ Request

POST:  /certificates/{certificate-name}/import
{
api-version: string ,
certificate-name: string ,
parameters:
{
value: string ,
pwd: string ,
policy:
{
id: string ,
key_props:
{
exportable: boolean ,
kty: enum ,
key_size: integer ,
reuse_key: boolean ,
crv: enum ,
}
,
secret_props:
{
contentType: string ,
}
,
x509_props:
{
subject: string ,
ekus:
[
string ,
]
,
sans:
{
emails:
[
string ,
]
,
dns_names:
[
string ,
]
,
upns:
[
string ,
]
,
}
,
key_usage:
[
string ,
]
,
validity_months: integer ,
}
,
lifetime_actions:
[
{
trigger:
{
lifetime_percentage: integer ,
days_before_expiry: integer ,
}
,
action:
{
action_type: enum ,
}
,
}
,
]
,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
tags: object ,
}
,
}

⚐ Response (200)

{
id: string ,
kid: string ,
sid: string ,
x5t: string ,
policy:
{
id: string ,
key_props:
{
exportable: boolean ,
kty: enum ,
key_size: integer ,
reuse_key: boolean ,
crv: enum ,
}
,
secret_props:
{
contentType: string ,
}
,
x509_props:
{
subject: string ,
ekus:
[
string ,
]
,
sans:
{
emails:
[
string ,
]
,
dns_names:
[
string ,
]
,
upns:
[
string ,
]
,
}
,
key_usage:
[
string ,
]
,
validity_months: integer ,
}
,
lifetime_actions:
[
{
trigger:
{
lifetime_percentage: integer ,
days_before_expiry: integer ,
}
,
action:
{
action_type: enum ,
}
,
}
,
]
,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
}
,
cer: string ,
contentType: string ,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
tags: object ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
}
GetCertificateOperation (updated)
Description Gets the creation operation associated with a specified certificate. This operation requires the certificates/get permission.
Reference Link ¶

⚶ Changes

{
  "#id": "GetCertificateOperation",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    }
  ]
}

⚼ Request

GET:  /certificates/{certificate-name}/pending
{
api-version: string ,
certificate-name: string ,
}

⚐ Response (200)

{
id: string ,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
csr: string ,
cancellation_requested: boolean ,
status: string ,
status_details: string ,
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
target: string ,
request_id: string ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
}
UpdateCertificateOperation (updated)
Description Updates a certificate creation operation that is already in progress. This operation requires the certificates/update permission.
Reference Link ¶

⚶ Changes

{
  "#id": "UpdateCertificateOperation",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    }
  ]
}

⚼ Request

PATCH:  /certificates/{certificate-name}/pending
{
api-version: string ,
certificate-name: string ,
certificateOperation:
{
cancellation_requested: boolean ,
}
,
}

⚐ Response (200)

{
id: string ,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
csr: string ,
cancellation_requested: boolean ,
status: string ,
status_details: string ,
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
target: string ,
request_id: string ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
}
DeleteCertificateOperation (updated)
Description Deletes the creation operation for a specified certificate that is in the process of being created. The certificate is no longer created. This operation requires the certificates/update permission.
Reference Link ¶

⚶ Changes

{
  "#id": "DeleteCertificateOperation",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    }
  ]
}

⚼ Request

DELETE:  /certificates/{certificate-name}/pending
{
api-version: string ,
certificate-name: string ,
}

⚐ Response (200)

{
id: string ,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
csr: string ,
cancellation_requested: boolean ,
status: string ,
status_details: string ,
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
target: string ,
request_id: string ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
}
MergeCertificate (updated)
Description The MergeCertificate operation performs the merging of a certificate or certificate chain with a key pair currently available in the service. This operation requires the certificates/create permission.
Reference Link ¶

⚶ Changes

{
  "#id": "MergeCertificate",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    },
    {
      "parameters": {
        "$properties": {
          "attributes": [
            {
              "@added_a92d9fa7f00c4179b0fbcd77a61ca242": {
                "#name": "enabled",
                "Description": "Determines whether the object is enabled.",
                "Required": false,
                "Type": "boolean"
              }
            },
            {
              "@added_402d1ac6d7054516b2f4178de7df084e": {
                "#name": "nbf",
                "Description": "Not before date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_72f8075089564c6191d85aeb48c64d08": {
                "#name": "exp",
                "Description": "Expiry date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_ddc799adb47f4b5099d8c67b3972f0ea": {
                "#name": "created",
                "Description": "Creation time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_830da76ba0a046668780589d5c79f732": {
                "#name": "updated",
                "Description": "Last updated time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "#name": "recoveryLevel",
              "Enum": {
                "new": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ],
                "old": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ]
              }
            }
          ]
        }
      }
    }
  ],
  "$responses": {
    "201": {
      "$properties": [
        {
          "policy": [
            {
              "key_props": [
                {
                  "#name": "kty",
                  "Enum": {
                    "new": [
                      [
                        "EC",
                        "Elliptic Curve."
                      ],
                      [
                        "EC-HSM",
                        "Elliptic Curve with a private key which is not exportable from the HSM."
                      ],
                      [
                        "RSA",
                        "RSA (https://tools.ietf.org/html/rfc3447)."
                      ],
                      [
                        "RSA-HSM",
                        "RSA with a private key which is not exportable from the HSM."
                      ],
                      [
                        "oct",
                        "Octet sequence (used to represent symmetric keys)."
                      ],
                      [
                        "oct-HSM",
                        "Octet sequence with a private key which is not exportable from the HSM."
                      ]
                    ],
                    "old": [
                      [
                        "EC",
                        ""
                      ],
                      [
                        "EC-HSM",
                        ""
                      ],
                      [
                        "RSA",
                        ""
                      ],
                      [
                        "RSA-HSM",
                        ""
                      ],
                      [
                        "oct",
                        ""
                      ],
                      [
                        "oct-HSM",
                        ""
                      ]
                    ]
                  }
                },
                {
                  "#name": "crv",
                  "Enum": {
                    "new": [
                      [
                        "P-256",
                        "The NIST P-256 elliptic curve, AKA SECG curve SECP256R1."
                      ],
                      [
                        "P-384",
                        "The NIST P-384 elliptic curve, AKA SECG curve SECP384R1."
                      ],
                      [
                        "P-521",
                        "The NIST P-521 elliptic curve, AKA SECG curve SECP521R1."
                      ],
                      [
                        "P-256K",
                        "The SECG SECP256K1 elliptic curve."
                      ]
                    ],
                    "old": [
                      [
                        "P-256",
                        ""
                      ],
                      [
                        "P-384",
                        ""
                      ],
                      [
                        "P-521",
                        ""
                      ],
                      [
                        "P-256K",
                        ""
                      ]
                    ]
                  }
                }
              ]
            },
            {
              "x509_props": [
                {
                  "key_usage": {
                    "Enum": {
                      "new": [
                        [
                          "digitalSignature",
                          "Indicates that the certificate key can be used as a digital signature."
                        ],
                        [
                          "nonRepudiation",
                          "Indicates that the certificate key can be used for authentication."
                        ],
                        [
                          "keyEncipherment",
                          "Indicates that the certificate key can be used for key encryption."
                        ],
                        [
                          "dataEncipherment",
                          "Indicates that the certificate key can be used for data encryption."
                        ],
                        [
                          "keyAgreement",
                          "Indicates that the certificate key can be used to determine key agreement, such as a key created using the Diffie-Hellman key agreement algorithm."
                        ],
                        [
                          "keyCertSign",
                          "Indicates that the certificate key can be used to sign certificates."
                        ],
                        [
                          "cRLSign",
                          "Indicates that the certificate key can be used to sign a certificate revocation list."
                        ],
                        [
                          "encipherOnly",
                          "Indicates that the certificate key can be used for encryption only."
                        ],
                        [
                          "decipherOnly",
                          "Indicates that the certificate key can be used for decryption only."
                        ]
                      ],
                      "old": [
                        [
                          "digitalSignature",
                          ""
                        ],
                        [
                          "nonRepudiation",
                          ""
                        ],
                        [
                          "keyEncipherment",
                          ""
                        ],
                        [
                          "dataEncipherment",
                          ""
                        ],
                        [
                          "keyAgreement",
                          ""
                        ],
                        [
                          "keyCertSign",
                          ""
                        ],
                        [
                          "cRLSign",
                          ""
                        ],
                        [
                          "encipherOnly",
                          ""
                        ],
                        [
                          "decipherOnly",
                          ""
                        ]
                      ]
                    }
                  }
                }
              ]
            },
            {
              "lifetime_actions": {
                "$properties": {
                  "action": [
                    {
                      "#name": "action_type",
                      "Enum": {
                        "new": [
                          [
                            "EmailContacts",
                            "A certificate policy that will email certificate contacts."
                          ],
                          [
                            "AutoRenew",
                            "A certificate policy that will auto-renew a certificate."
                          ]
                        ],
                        "old": [
                          [
                            "EmailContacts",
                            ""
                          ],
                          [
                            "AutoRenew",
                            ""
                          ]
                        ]
                      }
                    }
                  ]
                }
              }
            },
            {
              "attributes": [
                {
                  "@added_07f525e1333b4311b6d2a50ccf0e9e74": {
                    "#name": "enabled",
                    "Description": "Determines whether the object is enabled.",
                    "Required": false,
                    "Type": "boolean"
                  }
                },
                {
                  "@added_97151ce0a96e49c3bb287a04515d6218": {
                    "#name": "nbf",
                    "Description": "Not before date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_d13e2d0d01224b1faf23b50095361a0b": {
                    "#name": "exp",
                    "Description": "Expiry date in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_410f76fbfe3d4f4695d15083fdad9d0d": {
                    "#name": "created",
                    "Description": "Creation time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "@added_8d55970cff2149fb9eb00f10d7e39da9": {
                    "#name": "updated",
                    "Description": "Last updated time in UTC.",
                    "Format": "unixtime",
                    "Required": false,
                    "Type": "integer"
                  }
                },
                {
                  "#name": "recoveryLevel",
                  "Enum": {
                    "new": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ],
                    "old": [
                      [
                        "Purgeable",
                        "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                      ],
                      [
                        "Recoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "Recoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                      ],
                      [
                        "CustomizedRecoverable+Purgeable",
                        "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                      ],
                      [
                        "CustomizedRecoverable",
                        "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                      ],
                      [
                        "CustomizedRecoverable+ProtectedSubscription",
                        "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                      ]
                    ]
                  }
                }
              ]
            }
          ]
        },
        {
          "#name": "contentType",
          "Description": {
            "new": "The content type of the secret. eg. 'application/x-pem-file' or 'application/x-pkcs12',",
            "old": "The content type of the secret. eg. 'application/x-pem-file' or 'application/x-pkcs12', "
          }
        },
        {
          "attributes": [
            {
              "@added_36c19c06ba8b4583b52dcf7d1c509672": {
                "#name": "enabled",
                "Description": "Determines whether the object is enabled.",
                "Required": false,
                "Type": "boolean"
              }
            },
            {
              "@added_4c44bf1a376240cd9ddd96cd6848a29e": {
                "#name": "nbf",
                "Description": "Not before date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_1c6a71a8d17242e3be60ff8406ba8bbf": {
                "#name": "exp",
                "Description": "Expiry date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_778b000312e944d49608f54bb5b36b6c": {
                "#name": "created",
                "Description": "Creation time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_bd2e83d7f5ca429b9327bd9414ec890f": {
                "#name": "updated",
                "Description": "Last updated time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "#name": "recoveryLevel",
              "Enum": {
                "new": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ],
                "old": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ]
              }
            }
          ]
        }
      ]
    }
  }
}

⚼ Request

POST:  /certificates/{certificate-name}/pending/merge
{
api-version: string ,
certificate-name: string ,
parameters:
{
x5c:
[
string ,
]
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
tags: object ,
}
,
}

⚐ Response (201)

{
id: string ,
kid: string ,
sid: string ,
x5t: string ,
policy:
{
id: string ,
key_props:
{
exportable: boolean ,
kty: enum ,
key_size: integer ,
reuse_key: boolean ,
crv: enum ,
}
,
secret_props:
{
contentType: string ,
}
,
x509_props:
{
subject: string ,
ekus:
[
string ,
]
,
sans:
{
emails:
[
string ,
]
,
dns_names:
[
string ,
]
,
upns:
[
string ,
]
,
}
,
key_usage:
[
string ,
]
,
validity_months: integer ,
}
,
lifetime_actions:
[
{
trigger:
{
lifetime_percentage: integer ,
days_before_expiry: integer ,
}
,
action:
{
action_type: enum ,
}
,
}
,
]
,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
}
,
cer: string ,
contentType: string ,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
tags: object ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
}
GetCertificatePolicy (updated)
Description The GetCertificatePolicy operation returns the specified certificate policy resources in the specified key vault. This operation requires the certificates/get permission.
Reference Link ¶

⚶ Changes

{
  "#id": "GetCertificatePolicy",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    }
  ],
  "$responses": {
    "200": {
      "$properties": {
        "key_props": [
          {
            "#name": "kty",
            "Enum": {
              "new": [
                [
                  "EC",
                  "Elliptic Curve."
                ],
                [
                  "EC-HSM",
                  "Elliptic Curve with a private key which is not exportable from the HSM."
                ],
                [
                  "RSA",
                  "RSA (https://tools.ietf.org/html/rfc3447)."
                ],
                [
                  "RSA-HSM",
                  "RSA with a private key which is not exportable from the HSM."
                ],
                [
                  "oct",
                  "Octet sequence (used to represent symmetric keys)."
                ],
                [
                  "oct-HSM",
                  "Octet sequence with a private key which is not exportable from the HSM."
                ]
              ],
              "old": [
                [
                  "EC",
                  ""
                ],
                [
                  "EC-HSM",
                  ""
                ],
                [
                  "RSA",
                  ""
                ],
                [
                  "RSA-HSM",
                  ""
                ],
                [
                  "oct",
                  ""
                ],
                [
                  "oct-HSM",
                  ""
                ]
              ]
            }
          },
          {
            "#name": "crv",
            "Enum": {
              "new": [
                [
                  "P-256",
                  "The NIST P-256 elliptic curve, AKA SECG curve SECP256R1."
                ],
                [
                  "P-384",
                  "The NIST P-384 elliptic curve, AKA SECG curve SECP384R1."
                ],
                [
                  "P-521",
                  "The NIST P-521 elliptic curve, AKA SECG curve SECP521R1."
                ],
                [
                  "P-256K",
                  "The SECG SECP256K1 elliptic curve."
                ]
              ],
              "old": [
                [
                  "P-256",
                  ""
                ],
                [
                  "P-384",
                  ""
                ],
                [
                  "P-521",
                  ""
                ],
                [
                  "P-256K",
                  ""
                ]
              ]
            }
          }
        ],
        "x509_props": [
          {
            "key_usage": {
              "Enum": {
                "new": [
                  [
                    "digitalSignature",
                    "Indicates that the certificate key can be used as a digital signature."
                  ],
                  [
                    "nonRepudiation",
                    "Indicates that the certificate key can be used for authentication."
                  ],
                  [
                    "keyEncipherment",
                    "Indicates that the certificate key can be used for key encryption."
                  ],
                  [
                    "dataEncipherment",
                    "Indicates that the certificate key can be used for data encryption."
                  ],
                  [
                    "keyAgreement",
                    "Indicates that the certificate key can be used to determine key agreement, such as a key created using the Diffie-Hellman key agreement algorithm."
                  ],
                  [
                    "keyCertSign",
                    "Indicates that the certificate key can be used to sign certificates."
                  ],
                  [
                    "cRLSign",
                    "Indicates that the certificate key can be used to sign a certificate revocation list."
                  ],
                  [
                    "encipherOnly",
                    "Indicates that the certificate key can be used for encryption only."
                  ],
                  [
                    "decipherOnly",
                    "Indicates that the certificate key can be used for decryption only."
                  ]
                ],
                "old": [
                  [
                    "digitalSignature",
                    ""
                  ],
                  [
                    "nonRepudiation",
                    ""
                  ],
                  [
                    "keyEncipherment",
                    ""
                  ],
                  [
                    "dataEncipherment",
                    ""
                  ],
                  [
                    "keyAgreement",
                    ""
                  ],
                  [
                    "keyCertSign",
                    ""
                  ],
                  [
                    "cRLSign",
                    ""
                  ],
                  [
                    "encipherOnly",
                    ""
                  ],
                  [
                    "decipherOnly",
                    ""
                  ]
                ]
              }
            }
          }
        ],
        "lifetime_actions": {
          "$properties": {
            "action": [
              {
                "#name": "action_type",
                "Enum": {
                  "new": [
                    [
                      "EmailContacts",
                      "A certificate policy that will email certificate contacts."
                    ],
                    [
                      "AutoRenew",
                      "A certificate policy that will auto-renew a certificate."
                    ]
                  ],
                  "old": [
                    [
                      "EmailContacts",
                      ""
                    ],
                    [
                      "AutoRenew",
                      ""
                    ]
                  ]
                }
              }
            ]
          }
        },
        "attributes": [
          {
            "@added_8883a6e85e3648fba6559bf9792f63f5": {
              "#name": "enabled",
              "Description": "Determines whether the object is enabled.",
              "Required": false,
              "Type": "boolean"
            }
          },
          {
            "@added_6061ba78d3c94cb381f605d83531d744": {
              "#name": "nbf",
              "Description": "Not before date in UTC.",
              "Format": "unixtime",
              "Required": false,
              "Type": "integer"
            }
          },
          {
            "@added_2d326f5eae5543dcb8760655aa6e8d4a": {
              "#name": "exp",
              "Description": "Expiry date in UTC.",
              "Format": "unixtime",
              "Required": false,
              "Type": "integer"
            }
          },
          {
            "@added_55171d1f2b414058a6cb9e9ad3d95d6a": {
              "#name": "created",
              "Description": "Creation time in UTC.",
              "Format": "unixtime",
              "Required": false,
              "Type": "integer"
            }
          },
          {
            "@added_9d0da6881da94c5e9cfdf3411dc3c963": {
              "#name": "updated",
              "Description": "Last updated time in UTC.",
              "Format": "unixtime",
              "Required": false,
              "Type": "integer"
            }
          },
          {
            "#name": "recoveryLevel",
            "Enum": {
              "new": [
                [
                  "Purgeable",
                  "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                ],
                [
                  "Recoverable+Purgeable",
                  "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "Recoverable",
                  "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "Recoverable+ProtectedSubscription",
                  "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "CustomizedRecoverable+Purgeable",
                  "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                ],
                [
                  "CustomizedRecoverable",
                  "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                ],
                [
                  "CustomizedRecoverable+ProtectedSubscription",
                  "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                ]
              ],
              "old": [
                [
                  "Purgeable",
                  "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                ],
                [
                  "Recoverable+Purgeable",
                  "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "Recoverable",
                  "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "Recoverable+ProtectedSubscription",
                  "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "CustomizedRecoverable+Purgeable",
                  "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                ],
                [
                  "CustomizedRecoverable",
                  "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                ],
                [
                  "CustomizedRecoverable+ProtectedSubscription",
                  "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                ]
              ]
            }
          }
        ]
      }
    }
  }
}

⚼ Request

GET:  /certificates/{certificate-name}/policy
{
api-version: string ,
certificate-name: string ,
}

⚐ Response (200)

{
id: string ,
key_props:
{
exportable: boolean ,
kty: enum ,
key_size: integer ,
reuse_key: boolean ,
crv: enum ,
}
,
secret_props:
{
contentType: string ,
}
,
x509_props:
{
subject: string ,
ekus:
[
string ,
]
,
sans:
{
emails:
[
string ,
]
,
dns_names:
[
string ,
]
,
upns:
[
string ,
]
,
}
,
key_usage:
[
string ,
]
,
validity_months: integer ,
}
,
lifetime_actions:
[
{
trigger:
{
lifetime_percentage: integer ,
days_before_expiry: integer ,
}
,
action:
{
action_type: enum ,
}
,
}
,
]
,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
innererror: string ,
}
,
}
UpdateCertificatePolicy (updated)
Description Set specified members in the certificate policy. Leave others as null. This operation requires the certificates/update permission.
Reference Link ¶

⚶ Changes

{
  "#id": "UpdateCertificatePolicy",
  "$parameters": [
    {
      "#name": "api-version",
      "Description": {
        "new": "The API version to use for this operation.",
        "old": "Client API version."
      }
    },
    {
      "certificatePolicy": {
        "$properties": {
          "key_props": [
            {
              "#name": "kty",
              "Enum": {
                "new": [
                  [
                    "EC",
                    "Elliptic Curve."
                  ],
                  [
                    "EC-HSM",
                    "Elliptic Curve with a private key which is not exportable from the HSM."
                  ],
                  [
                    "RSA",
                    "RSA (https://tools.ietf.org/html/rfc3447)."
                  ],
                  [
                    "RSA-HSM",
                    "RSA with a private key which is not exportable from the HSM."
                  ],
                  [
                    "oct",
                    "Octet sequence (used to represent symmetric keys)."
                  ],
                  [
                    "oct-HSM",
                    "Octet sequence with a private key which is not exportable from the HSM."
                  ]
                ],
                "old": [
                  [
                    "EC",
                    ""
                  ],
                  [
                    "EC-HSM",
                    ""
                  ],
                  [
                    "RSA",
                    ""
                  ],
                  [
                    "RSA-HSM",
                    ""
                  ],
                  [
                    "oct",
                    ""
                  ],
                  [
                    "oct-HSM",
                    ""
                  ]
                ]
              }
            },
            {
              "#name": "crv",
              "Enum": {
                "new": [
                  [
                    "P-256",
                    "The NIST P-256 elliptic curve, AKA SECG curve SECP256R1."
                  ],
                  [
                    "P-384",
                    "The NIST P-384 elliptic curve, AKA SECG curve SECP384R1."
                  ],
                  [
                    "P-521",
                    "The NIST P-521 elliptic curve, AKA SECG curve SECP521R1."
                  ],
                  [
                    "P-256K",
                    "The SECG SECP256K1 elliptic curve."
                  ]
                ],
                "old": [
                  [
                    "P-256",
                    ""
                  ],
                  [
                    "P-384",
                    ""
                  ],
                  [
                    "P-521",
                    ""
                  ],
                  [
                    "P-256K",
                    ""
                  ]
                ]
              }
            }
          ],
          "x509_props": [
            {
              "key_usage": {
                "Enum": {
                  "new": [
                    [
                      "digitalSignature",
                      "Indicates that the certificate key can be used as a digital signature."
                    ],
                    [
                      "nonRepudiation",
                      "Indicates that the certificate key can be used for authentication."
                    ],
                    [
                      "keyEncipherment",
                      "Indicates that the certificate key can be used for key encryption."
                    ],
                    [
                      "dataEncipherment",
                      "Indicates that the certificate key can be used for data encryption."
                    ],
                    [
                      "keyAgreement",
                      "Indicates that the certificate key can be used to determine key agreement, such as a key created using the Diffie-Hellman key agreement algorithm."
                    ],
                    [
                      "keyCertSign",
                      "Indicates that the certificate key can be used to sign certificates."
                    ],
                    [
                      "cRLSign",
                      "Indicates that the certificate key can be used to sign a certificate revocation list."
                    ],
                    [
                      "encipherOnly",
                      "Indicates that the certificate key can be used for encryption only."
                    ],
                    [
                      "decipherOnly",
                      "Indicates that the certificate key can be used for decryption only."
                    ]
                  ],
                  "old": [
                    [
                      "digitalSignature",
                      ""
                    ],
                    [
                      "nonRepudiation",
                      ""
                    ],
                    [
                      "keyEncipherment",
                      ""
                    ],
                    [
                      "dataEncipherment",
                      ""
                    ],
                    [
                      "keyAgreement",
                      ""
                    ],
                    [
                      "keyCertSign",
                      ""
                    ],
                    [
                      "cRLSign",
                      ""
                    ],
                    [
                      "encipherOnly",
                      ""
                    ],
                    [
                      "decipherOnly",
                      ""
                    ]
                  ]
                }
              }
            }
          ],
          "lifetime_actions": {
            "$properties": {
              "action": [
                {
                  "#name": "action_type",
                  "Enum": {
                    "new": [
                      [
                        "EmailContacts",
                        "A certificate policy that will email certificate contacts."
                      ],
                      [
                        "AutoRenew",
                        "A certificate policy that will auto-renew a certificate."
                      ]
                    ],
                    "old": [
                      [
                        "EmailContacts",
                        ""
                      ],
                      [
                        "AutoRenew",
                        ""
                      ]
                    ]
                  }
                }
              ]
            }
          },
          "attributes": [
            {
              "@added_0c3bf03c22084f7e839dd212ac352f96": {
                "#name": "enabled",
                "Description": "Determines whether the object is enabled.",
                "Required": false,
                "Type": "boolean"
              }
            },
            {
              "@added_b8358f99db17447d9423a7dd3f81ab25": {
                "#name": "nbf",
                "Description": "Not before date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_3b8eb89ea2b14f9abb88f8306e0541de": {
                "#name": "exp",
                "Description": "Expiry date in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_476cc98a8aee4ebbbf3feee168f2c866": {
                "#name": "created",
                "Description": "Creation time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "@added_b95c825bcfbb4f4a8c9861cb22322531": {
                "#name": "updated",
                "Description": "Last updated time in UTC.",
                "Format": "unixtime",
                "Required": false,
                "Type": "integer"
              }
            },
            {
              "#name": "recoveryLevel",
              "Enum": {
                "new": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ],
                "old": [
                  [
                    "Purgeable",
                    "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                  ],
                  [
                    "Recoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "Recoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                  ],
                  [
                    "CustomizedRecoverable+Purgeable",
                    "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                  ],
                  [
                    "CustomizedRecoverable",
                    "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                  ],
                  [
                    "CustomizedRecoverable+ProtectedSubscription",
                    "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                  ]
                ]
              }
            }
          ]
        }
      }
    }
  ],
  "$responses": {
    "200": {
      "$properties": {
        "key_props": [
          {
            "#name": "kty",
            "Enum": {
              "new": [
                [
                  "EC",
                  "Elliptic Curve."
                ],
                [
                  "EC-HSM",
                  "Elliptic Curve with a private key which is not exportable from the HSM."
                ],
                [
                  "RSA",
                  "RSA (https://tools.ietf.org/html/rfc3447)."
                ],
                [
                  "RSA-HSM",
                  "RSA with a private key which is not exportable from the HSM."
                ],
                [
                  "oct",
                  "Octet sequence (used to represent symmetric keys)."
                ],
                [
                  "oct-HSM",
                  "Octet sequence with a private key which is not exportable from the HSM."
                ]
              ],
              "old": [
                [
                  "EC",
                  ""
                ],
                [
                  "EC-HSM",
                  ""
                ],
                [
                  "RSA",
                  ""
                ],
                [
                  "RSA-HSM",
                  ""
                ],
                [
                  "oct",
                  ""
                ],
                [
                  "oct-HSM",
                  ""
                ]
              ]
            }
          },
          {
            "#name": "crv",
            "Enum": {
              "new": [
                [
                  "P-256",
                  "The NIST P-256 elliptic curve, AKA SECG curve SECP256R1."
                ],
                [
                  "P-384",
                  "The NIST P-384 elliptic curve, AKA SECG curve SECP384R1."
                ],
                [
                  "P-521",
                  "The NIST P-521 elliptic curve, AKA SECG curve SECP521R1."
                ],
                [
                  "P-256K",
                  "The SECG SECP256K1 elliptic curve."
                ]
              ],
              "old": [
                [
                  "P-256",
                  ""
                ],
                [
                  "P-384",
                  ""
                ],
                [
                  "P-521",
                  ""
                ],
                [
                  "P-256K",
                  ""
                ]
              ]
            }
          }
        ],
        "x509_props": [
          {
            "key_usage": {
              "Enum": {
                "new": [
                  [
                    "digitalSignature",
                    "Indicates that the certificate key can be used as a digital signature."
                  ],
                  [
                    "nonRepudiation",
                    "Indicates that the certificate key can be used for authentication."
                  ],
                  [
                    "keyEncipherment",
                    "Indicates that the certificate key can be used for key encryption."
                  ],
                  [
                    "dataEncipherment",
                    "Indicates that the certificate key can be used for data encryption."
                  ],
                  [
                    "keyAgreement",
                    "Indicates that the certificate key can be used to determine key agreement, such as a key created using the Diffie-Hellman key agreement algorithm."
                  ],
                  [
                    "keyCertSign",
                    "Indicates that the certificate key can be used to sign certificates."
                  ],
                  [
                    "cRLSign",
                    "Indicates that the certificate key can be used to sign a certificate revocation list."
                  ],
                  [
                    "encipherOnly",
                    "Indicates that the certificate key can be used for encryption only."
                  ],
                  [
                    "decipherOnly",
                    "Indicates that the certificate key can be used for decryption only."
                  ]
                ],
                "old": [
                  [
                    "digitalSignature",
                    ""
                  ],
                  [
                    "nonRepudiation",
                    ""
                  ],
                  [
                    "keyEncipherment",
                    ""
                  ],
                  [
                    "dataEncipherment",
                    ""
                  ],
                  [
                    "keyAgreement",
                    ""
                  ],
                  [
                    "keyCertSign",
                    ""
                  ],
                  [
                    "cRLSign",
                    ""
                  ],
                  [
                    "encipherOnly",
                    ""
                  ],
                  [
                    "decipherOnly",
                    ""
                  ]
                ]
              }
            }
          }
        ],
        "lifetime_actions": {
          "$properties": {
            "action": [
              {
                "#name": "action_type",
                "Enum": {
                  "new": [
                    [
                      "EmailContacts",
                      "A certificate policy that will email certificate contacts."
                    ],
                    [
                      "AutoRenew",
                      "A certificate policy that will auto-renew a certificate."
                    ]
                  ],
                  "old": [
                    [
                      "EmailContacts",
                      ""
                    ],
                    [
                      "AutoRenew",
                      ""
                    ]
                  ]
                }
              }
            ]
          }
        },
        "attributes": [
          {
            "@added_f0481aa677e64f58a41feac9b2d7db5b": {
              "#name": "enabled",
              "Description": "Determines whether the object is enabled.",
              "Required": false,
              "Type": "boolean"
            }
          },
          {
            "@added_f7f20e41f8ca40c58ab23e6b6b79d9ea": {
              "#name": "nbf",
              "Description": "Not before date in UTC.",
              "Format": "unixtime",
              "Required": false,
              "Type": "integer"
            }
          },
          {
            "@added_9a4154ea22444b15837fb2ddc0840b89": {
              "#name": "exp",
              "Description": "Expiry date in UTC.",
              "Format": "unixtime",
              "Required": false,
              "Type": "integer"
            }
          },
          {
            "@added_6d3cb8fb430a4fffab48c850281defff": {
              "#name": "created",
              "Description": "Creation time in UTC.",
              "Format": "unixtime",
              "Required": false,
              "Type": "integer"
            }
          },
          {
            "@added_6abde2adc6a04433804f606508e1e204": {
              "#name": "updated",
              "Description": "Last updated time in UTC.",
              "Format": "unixtime",
              "Required": false,
              "Type": "integer"
            }
          },
          {
            "#name": "recoveryLevel",
            "Enum": {
              "new": [
                [
                  "Purgeable",
                  "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                ],
                [
                  "Recoverable+Purgeable",
                  "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "Recoverable",
                  "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "Recoverable+ProtectedSubscription",
                  "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "CustomizedRecoverable+Purgeable",
                  "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                ],
                [
                  "CustomizedRecoverable",
                  "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7 <= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                ],
                [
                  "CustomizedRecoverable+ProtectedSubscription",
                  "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7 <= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                ]
              ],
              "old": [
                [
                  "Purgeable",
                  "Denotes a vault state in which deletion is an irreversible operation, without the possibility for recovery. This level corresponds to no protection being available against a Delete operation; the data is irretrievably lost upon accepting a Delete operation at the entity level or higher (vault, resource group, subscription etc.)"
                ],
                [
                  "Recoverable+Purgeable",
                  "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval (90 days), unless a Purge operation is requested, or the subscription is cancelled. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "Recoverable",
                  "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge). This level guarantees the recoverability of the deleted entity during the retention interval(90 days) and while the subscription is still available. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "Recoverable+ProtectedSubscription",
                  "Denotes a vault and subscription state in which deletion is recoverable within retention interval (90 days), immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself  cannot be permanently canceled. System wil permanently delete it after 90 days, if not recovered"
                ],
                [
                  "CustomizedRecoverable+Purgeable",
                  "Denotes a vault state in which deletion is recoverable, and which also permits immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90). This level guarantees the recoverability of the deleted entity during the retention interval, unless a Purge operation is requested, or the subscription is cancelled."
                ],
                [
                  "CustomizedRecoverable",
                  "Denotes a vault state in which deletion is recoverable without the possibility for immediate and permanent deletion (i.e. purge when 7<= SoftDeleteRetentionInDays < 90).This level guarantees the recoverability of the deleted entity during the retention interval and while the subscription is still available."
                ],
                [
                  "CustomizedRecoverable+ProtectedSubscription",
                  "Denotes a vault and subscription state in which deletion is recoverable, immediate and permanent deletion (i.e. purge) is not permitted, and in which the subscription itself cannot be permanently canceled when 7<= SoftDeleteRetentionInDays < 90. This level guarantees the recoverability of the deleted entity during the retention interval, and also reflects the fact that the subscription itself cannot be cancelled."
                ]
              ]
            }
          }
        ]
      }
    }
  }
}

⚼ Request

PATCH:  /certificates/{certificate-name}/policy
{
api-version: string ,
certificate-name: string ,
certificatePolicy:
{
id: string ,
key_props:
{
exportable: boolean ,
kty: enum ,
key_size: integer ,
reuse_key: boolean ,
crv: enum ,
}
,
secret_props:
{
contentType: string ,
}
,
x509_props:
{
subject: string ,
ekus:
[
string ,
]
,
sans:
{
emails:
[
string ,
]
,
dns_names:
[
string ,
]
,
upns:
[
string ,
]
,
}
,
key_usage:
[
string ,
]
,
validity_months: integer ,
}
,
lifetime_actions:
[
{
trigger:
{
lifetime_percentage: integer ,
days_before_expiry: integer ,
}
,
action:
{
action_type: enum ,
}
,
}
,
]
,
issuer:
{
name: string ,
cty: string ,
cert_transparency: boolean ,
}
,
attributes:
{
enabled: boolean ,
nbf: integer ,
exp: integer ,
created: integer ,
updated: integer ,
recoverableDays: integer ,
recoveryLevel: enum ,
}
,
}
,
}

⚐ Response (200)

{
id: string ,
key_props:
{
exportable: boolean ,
kty: enum ,
key_size: integer ,
reuse_key: boolean ,
crv: enum ,
}
,
secret_props:
{
contentType: string ,
}
,
x509_props:
{
subject: string ,