| Name | Type | Description | Notes |
|---|---|---|---|
| AcmeEnabled | bool | [optional] | |
| AllowAnyName | bool | [optional] | |
| AllowCopyExtFromCsr | bool | [optional] | |
| AllowSubdomains | bool | [optional] | |
| AllowedDomainsList | List<string> | [optional] | |
| AllowedExtraExtensions | Dictionary<string, List<string>> | [optional] | |
| AllowedIpSans | List<string> | [optional] | |
| AllowedUriSans | List<string> | [optional] | |
| AutoRenewCertificate | bool | [optional] | |
| BasicConstraints | string | [optional] | |
| BasicConstraintsCritical | bool | [optional] | |
| BasicConstraintsValidForNonCa | bool | [optional] | |
| CertificateAuthorityMode | string | [optional] | |
| ClientFlag | bool | [optional] | |
| CodeSigningFlag | bool | [optional] | |
| Country | List<string> | [optional] | |
| CreatePrivateCrl | bool | [optional] | |
| CreatePrivateOcsp | bool | CreatePrivateOcsp enables exposing an OCSP endpoint on the Gateway and embedding its URL in the AIA extension of issued certificates. | [optional] |
| CreatePublicCrl | bool | [optional] | |
| CreatePublicOcsp | bool | CreatePublicOcsp enables exposing a public OCSP endpoint on the Gateway and embedding its URL in the AIA extension of issued certificates. | [optional] |
| DestinationPath | string | DestinationPath is the destination to save generated certificates | [optional] |
| DisableWildcards | bool | [optional] | |
| EnforceHostnames | bool | [optional] | |
| ExpirationEvents | List<CertificateExpirationEvent> | ExpirationNotification holds a list of expiration notices that should be sent in case a certificate is about to expire, this value is being propagated to the Certificate resources that are created | [optional] |
| GwClusterId | long | [optional] | |
| GwClusterUrl | string | GWClusterURL is required when CAMode is "public" and it defines the cluster URL the PKI should be issued from. The GW cluster must have permissions to read associated target's details | [optional] |
| IsCa | bool | [optional] | |
| KeyBits | long | [optional] | |
| KeyType | string | [optional] | |
| KeyUsageList | List<string> | [optional] | |
| Locality | List<string> | [optional] | |
| MaxPathLen | long | [optional] | |
| NonCriticalKeyUsage | bool | [optional] | |
| NotBeforeDuration | long | A Duration represents the elapsed time between two instants as an int64 nanosecond count. The representation limits the largest representable duration to approximately 290 years. | [optional] |
| OcspNextUpdate | long | OcspNextUpdate defines the desired NextUpdate window for OCSP responses. Value is in seconds; 0 means not set. Minimum enforced is 10 minutes. | [optional] |
| OrganizationList | List<string> | [optional] | |
| OrganizationUnitList | List<string> | [optional] | |
| PkiIssuerType | string | [optional] | |
| PostalCode | List<string> | [optional] | |
| ProtectGeneratedCertificates | bool | ProtectGeneratedCertificates dictates whether the created certificates should be protected from deletion | [optional] |
| Province | List<string> | [optional] | |
| RenewBeforeExpirationInDays | long | [optional] | |
| RequireCn | bool | [optional] | |
| ScepChallengeMode | string | ScepChallengeMode is the SCEP challenge mode. Stage 1 supports only "static". | [optional] |
| ScepEnabled | bool | ScepEnabled turns on SCEP enrollment for this dedicated PKI issuer. | [optional] |
| ServerFlag | bool | [optional] | |
| SplitCertificateChain | bool | SplitCertificateChain, when enabled, separates the leaf certificate from the certificate chain. | [optional] |
| StreetAddress | List<string> | [optional] |