Class CertificateSummary
- All Implemented Interfaces:
Serializable
,SdkPojo
,ToCopyableBuilder<CertificateSummary.Builder,
CertificateSummary>
This structure is returned in the response object of ListCertificates action.
- See Also:
-
Nested Class Summary
Nested Classes -
Method Summary
Modifier and TypeMethodDescriptionstatic CertificateSummary.Builder
builder()
final String
Amazon Resource Name (ARN) of the certificate.final Instant
The time at which the certificate was requested.final String
Fully qualified domain name (FQDN), such as www.example.com or example.com, for the certificate.final boolean
final boolean
equalsBySdkFields
(Object obj) Indicates whether some other object is "equal to" this one by SDK fields.final Boolean
exported()
Indicates whether the certificate has been exported.final List
<ExtendedKeyUsageName> Contains a list of Extended Key Usage X.509 v3 extension objects.Contains a list of Extended Key Usage X.509 v3 extension objects.final <T> Optional
<T> getValueForField
(String fieldName, Class<T> clazz) final Boolean
When called by ListCertificates, indicates whether the full list of subject alternative names has been included in the response.final boolean
For responses, this returns true if the service returned a value for the ExtendedKeyUsages property.final int
hashCode()
final boolean
For responses, this returns true if the service returned a value for the KeyUsages property.final boolean
For responses, this returns true if the service returned a value for the SubjectAlternativeNameSummaries property.final Instant
The date and time when the certificate was imported.final Boolean
inUse()
Indicates whether the certificate is currently in use by any Amazon Web Services resources.final Instant
issuedAt()
The time at which the certificate was issued.final KeyAlgorithm
The algorithm that was used to generate the public-private key pair.final String
The algorithm that was used to generate the public-private key pair.final List
<KeyUsageName> A list of Key Usage X.509 v3 extension objects.A list of Key Usage X.509 v3 extension objects.final Instant
notAfter()
The time after which the certificate is not valid.final Instant
The time before which the certificate is not valid.final RenewalEligibility
Specifies whether the certificate is eligible for renewal.final String
Specifies whether the certificate is eligible for renewal.final Instant
The time at which the certificate was revoked.static Class
<? extends CertificateSummary.Builder> final CertificateStatus
status()
The status of the certificate.final String
The status of the certificate.One or more domain names (subject alternative names) included in the certificate.Take this object and create a builder that contains all of the current property values of this object.final String
toString()
Returns a string representation of this object.final CertificateType
type()
The source of the certificate.final String
The source of the certificate.Methods inherited from interface software.amazon.awssdk.utils.builder.ToCopyableBuilder
copy
-
Method Details
-
certificateArn
Amazon Resource Name (ARN) of the certificate. This is of the form:
arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012
For more information about ARNs, see Amazon Resource Names (ARNs).
- Returns:
- Amazon Resource Name (ARN) of the certificate. This is of the form:
arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012
For more information about ARNs, see Amazon Resource Names (ARNs).
-
domainName
Fully qualified domain name (FQDN), such as www.example.com or example.com, for the certificate.
- Returns:
- Fully qualified domain name (FQDN), such as www.example.com or example.com, for the certificate.
-
hasSubjectAlternativeNameSummaries
public final boolean hasSubjectAlternativeNameSummaries()For responses, this returns true if the service returned a value for the SubjectAlternativeNameSummaries property. This DOES NOT check that the value is non-empty (for which, you should check theisEmpty()
method on the property). This is useful because the SDK will never return a null collection or map, but you may need to differentiate between the service returning nothing (or null) and the service returning an empty collection or map. For requests, this returns true if a value for the property was specified in the request builder, and false if a value was not specified. -
subjectAlternativeNameSummaries
One or more domain names (subject alternative names) included in the certificate. This list contains the domain names that are bound to the public key that is contained in the certificate. The subject alternative names include the canonical domain name (CN) of the certificate and additional domain names that can be used to connect to the website.
When called by ListCertificates, this parameter will only return the first 100 subject alternative names included in the certificate. To display the full list of subject alternative names, use DescribeCertificate.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the
hasSubjectAlternativeNameSummaries()
method.- Returns:
- One or more domain names (subject alternative names) included in the certificate. This list contains the
domain names that are bound to the public key that is contained in the certificate. The subject
alternative names include the canonical domain name (CN) of the certificate and additional domain names
that can be used to connect to the website.
When called by ListCertificates, this parameter will only return the first 100 subject alternative names included in the certificate. To display the full list of subject alternative names, use DescribeCertificate.
-
hasAdditionalSubjectAlternativeNames
When called by ListCertificates, indicates whether the full list of subject alternative names has been included in the response. If false, the response includes all of the subject alternative names included in the certificate. If true, the response only includes the first 100 subject alternative names included in the certificate. To display the full list of subject alternative names, use DescribeCertificate.
- Returns:
- When called by ListCertificates, indicates whether the full list of subject alternative names has been included in the response. If false, the response includes all of the subject alternative names included in the certificate. If true, the response only includes the first 100 subject alternative names included in the certificate. To display the full list of subject alternative names, use DescribeCertificate.
-
status
The status of the certificate.
A certificate enters status PENDING_VALIDATION upon being requested, unless it fails for any of the reasons given in the troubleshooting topic Certificate request fails. ACM makes repeated attempts to validate a certificate for 72 hours and then times out. If a certificate shows status FAILED or VALIDATION_TIMED_OUT, delete the request, correct the issue with DNS validation or Email validation, and try again. If validation succeeds, the certificate enters status ISSUED.
If the service returns an enum value that is not available in the current SDK version,
status
will returnCertificateStatus.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the service is available fromstatusAsString()
.- Returns:
- The status of the certificate.
A certificate enters status PENDING_VALIDATION upon being requested, unless it fails for any of the reasons given in the troubleshooting topic Certificate request fails. ACM makes repeated attempts to validate a certificate for 72 hours and then times out. If a certificate shows status FAILED or VALIDATION_TIMED_OUT, delete the request, correct the issue with DNS validation or Email validation, and try again. If validation succeeds, the certificate enters status ISSUED.
- See Also:
-
statusAsString
The status of the certificate.
A certificate enters status PENDING_VALIDATION upon being requested, unless it fails for any of the reasons given in the troubleshooting topic Certificate request fails. ACM makes repeated attempts to validate a certificate for 72 hours and then times out. If a certificate shows status FAILED or VALIDATION_TIMED_OUT, delete the request, correct the issue with DNS validation or Email validation, and try again. If validation succeeds, the certificate enters status ISSUED.
If the service returns an enum value that is not available in the current SDK version,
status
will returnCertificateStatus.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the service is available fromstatusAsString()
.- Returns:
- The status of the certificate.
A certificate enters status PENDING_VALIDATION upon being requested, unless it fails for any of the reasons given in the troubleshooting topic Certificate request fails. ACM makes repeated attempts to validate a certificate for 72 hours and then times out. If a certificate shows status FAILED or VALIDATION_TIMED_OUT, delete the request, correct the issue with DNS validation or Email validation, and try again. If validation succeeds, the certificate enters status ISSUED.
- See Also:
-
type
The source of the certificate. For certificates provided by ACM, this value is
AMAZON_ISSUED
. For certificates that you imported with ImportCertificate, this value isIMPORTED
. ACM does not provide managed renewal for imported certificates. For more information about the differences between certificates that you import and those that ACM provides, see Importing Certificates in the Certificate Manager User Guide.If the service returns an enum value that is not available in the current SDK version,
type
will returnCertificateType.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the service is available fromtypeAsString()
.- Returns:
- The source of the certificate. For certificates provided by ACM, this value is
AMAZON_ISSUED
. For certificates that you imported with ImportCertificate, this value isIMPORTED
. ACM does not provide managed renewal for imported certificates. For more information about the differences between certificates that you import and those that ACM provides, see Importing Certificates in the Certificate Manager User Guide. - See Also:
-
typeAsString
The source of the certificate. For certificates provided by ACM, this value is
AMAZON_ISSUED
. For certificates that you imported with ImportCertificate, this value isIMPORTED
. ACM does not provide managed renewal for imported certificates. For more information about the differences between certificates that you import and those that ACM provides, see Importing Certificates in the Certificate Manager User Guide.If the service returns an enum value that is not available in the current SDK version,
type
will returnCertificateType.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the service is available fromtypeAsString()
.- Returns:
- The source of the certificate. For certificates provided by ACM, this value is
AMAZON_ISSUED
. For certificates that you imported with ImportCertificate, this value isIMPORTED
. ACM does not provide managed renewal for imported certificates. For more information about the differences between certificates that you import and those that ACM provides, see Importing Certificates in the Certificate Manager User Guide. - See Also:
-
keyAlgorithm
The algorithm that was used to generate the public-private key pair.
If the service returns an enum value that is not available in the current SDK version,
keyAlgorithm
will returnKeyAlgorithm.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the service is available fromkeyAlgorithmAsString()
.- Returns:
- The algorithm that was used to generate the public-private key pair.
- See Also:
-
keyAlgorithmAsString
The algorithm that was used to generate the public-private key pair.
If the service returns an enum value that is not available in the current SDK version,
keyAlgorithm
will returnKeyAlgorithm.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the service is available fromkeyAlgorithmAsString()
.- Returns:
- The algorithm that was used to generate the public-private key pair.
- See Also:
-
keyUsages
A list of Key Usage X.509 v3 extension objects. Each object is a string value that identifies the purpose of the public key contained in the certificate. Possible extension values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT, NON_REPUDIATION, and more.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the
hasKeyUsages()
method.- Returns:
- A list of Key Usage X.509 v3 extension objects. Each object is a string value that identifies the purpose of the public key contained in the certificate. Possible extension values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT, NON_REPUDIATION, and more.
-
hasKeyUsages
public final boolean hasKeyUsages()For responses, this returns true if the service returned a value for the KeyUsages property. This DOES NOT check that the value is non-empty (for which, you should check theisEmpty()
method on the property). This is useful because the SDK will never return a null collection or map, but you may need to differentiate between the service returning nothing (or null) and the service returning an empty collection or map. For requests, this returns true if a value for the property was specified in the request builder, and false if a value was not specified. -
keyUsagesAsStrings
A list of Key Usage X.509 v3 extension objects. Each object is a string value that identifies the purpose of the public key contained in the certificate. Possible extension values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT, NON_REPUDIATION, and more.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the
hasKeyUsages()
method.- Returns:
- A list of Key Usage X.509 v3 extension objects. Each object is a string value that identifies the purpose of the public key contained in the certificate. Possible extension values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT, NON_REPUDIATION, and more.
-
extendedKeyUsages
Contains a list of Extended Key Usage X.509 v3 extension objects. Each object specifies a purpose for which the certificate public key can be used and consists of a name and an object identifier (OID).
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the
hasExtendedKeyUsages()
method.- Returns:
- Contains a list of Extended Key Usage X.509 v3 extension objects. Each object specifies a purpose for which the certificate public key can be used and consists of a name and an object identifier (OID).
-
hasExtendedKeyUsages
public final boolean hasExtendedKeyUsages()For responses, this returns true if the service returned a value for the ExtendedKeyUsages property. This DOES NOT check that the value is non-empty (for which, you should check theisEmpty()
method on the property). This is useful because the SDK will never return a null collection or map, but you may need to differentiate between the service returning nothing (or null) and the service returning an empty collection or map. For requests, this returns true if a value for the property was specified in the request builder, and false if a value was not specified. -
extendedKeyUsagesAsStrings
Contains a list of Extended Key Usage X.509 v3 extension objects. Each object specifies a purpose for which the certificate public key can be used and consists of a name and an object identifier (OID).
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the
hasExtendedKeyUsages()
method.- Returns:
- Contains a list of Extended Key Usage X.509 v3 extension objects. Each object specifies a purpose for which the certificate public key can be used and consists of a name and an object identifier (OID).
-
inUse
Indicates whether the certificate is currently in use by any Amazon Web Services resources.
- Returns:
- Indicates whether the certificate is currently in use by any Amazon Web Services resources.
-
exported
Indicates whether the certificate has been exported. This value exists only when the certificate type is
PRIVATE
.- Returns:
- Indicates whether the certificate has been exported. This value exists only when the certificate type is
PRIVATE
.
-
renewalEligibility
Specifies whether the certificate is eligible for renewal. At this time, only exported private certificates can be renewed with the RenewCertificate command.
If the service returns an enum value that is not available in the current SDK version,
renewalEligibility
will returnRenewalEligibility.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the service is available fromrenewalEligibilityAsString()
.- Returns:
- Specifies whether the certificate is eligible for renewal. At this time, only exported private certificates can be renewed with the RenewCertificate command.
- See Also:
-
renewalEligibilityAsString
Specifies whether the certificate is eligible for renewal. At this time, only exported private certificates can be renewed with the RenewCertificate command.
If the service returns an enum value that is not available in the current SDK version,
renewalEligibility
will returnRenewalEligibility.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the service is available fromrenewalEligibilityAsString()
.- Returns:
- Specifies whether the certificate is eligible for renewal. At this time, only exported private certificates can be renewed with the RenewCertificate command.
- See Also:
-
notBefore
The time before which the certificate is not valid.
- Returns:
- The time before which the certificate is not valid.
-
notAfter
The time after which the certificate is not valid.
- Returns:
- The time after which the certificate is not valid.
-
createdAt
The time at which the certificate was requested.
- Returns:
- The time at which the certificate was requested.
-
issuedAt
The time at which the certificate was issued. This value exists only when the certificate type is
AMAZON_ISSUED
.- Returns:
- The time at which the certificate was issued. This value exists only when the certificate type is
AMAZON_ISSUED
.
-
importedAt
The date and time when the certificate was imported. This value exists only when the certificate type is
IMPORTED
.- Returns:
- The date and time when the certificate was imported. This value exists only when the certificate type is
IMPORTED
.
-
revokedAt
The time at which the certificate was revoked. This value exists only when the certificate status is
REVOKED
.- Returns:
- The time at which the certificate was revoked. This value exists only when the certificate status is
REVOKED
.
-
toBuilder
Description copied from interface:ToCopyableBuilder
Take this object and create a builder that contains all of the current property values of this object.- Specified by:
toBuilder
in interfaceToCopyableBuilder<CertificateSummary.Builder,
CertificateSummary> - Returns:
- a builder for type T
-
builder
-
serializableBuilderClass
-
hashCode
public final int hashCode() -
equals
-
equalsBySdkFields
Description copied from interface:SdkPojo
Indicates whether some other object is "equal to" this one by SDK fields. An SDK field is a modeled, non-inherited field in anSdkPojo
class, and is generated based on a service model.If an
SdkPojo
class does not have any inherited fields,equalsBySdkFields
andequals
are essentially the same.- Specified by:
equalsBySdkFields
in interfaceSdkPojo
- Parameters:
obj
- the object to be compared with- Returns:
- true if the other object equals to this object by sdk fields, false otherwise.
-
toString
Returns a string representation of this object. This is useful for testing and debugging. Sensitive data will be redacted from this string using a placeholder value. -
getValueForField
-
sdkFields
-