| Name | Type | Description | Notes |
|---|---|---|---|
| acmeEnabled | Boolean | [optional] | |
| allowAnyName | Boolean | [optional] | |
| allowCopyExtFromCsr | Boolean | [optional] | |
| allowSubdomains | Boolean | [optional] | |
| allowedDomainsList | [String] | [optional] | |
| allowedExtraExtensions | {String: [String]} | [optional] | |
| allowedIpSans | [String] | [optional] | |
| allowedUriSans | [String] | [optional] | |
| autoRenewCertificate | Boolean | [optional] | |
| basicConstraintsValidForNonCa | Boolean | [optional] | |
| certificateAuthorityMode | String | [optional] | |
| clientFlag | Boolean | [optional] | |
| codeSigningFlag | Boolean | [optional] | |
| country | [String] | [optional] | |
| createPrivateCrl | Boolean | [optional] | |
| createPrivateOcsp | Boolean | CreatePrivateOcsp enables exposing an OCSP endpoint on the Gateway and embedding its URL in the AIA extension of issued certificates. | [optional] |
| createPublicCrl | Boolean | [optional] | |
| createPublicOcsp | Boolean | CreatePublicOcsp enables exposing a public OCSP endpoint on the Gateway and embedding its URL in the AIA extension of issued certificates. | [optional] |
| destinationPath | String | DestinationPath is the destination to save generated certificates | [optional] |
| disableWildcards | Boolean | [optional] | |
| enforceHostnames | Boolean | [optional] | |
| expirationEvents | [CertificateExpirationEvent] | ExpirationNotification holds a list of expiration notices that should be sent in case a certificate is about to expire, this value is being propagated to the Certificate resources that are created | [optional] |
| gwClusterId | Number | [optional] | |
| gwClusterUrl | String | GWClusterURL is required when CAMode is "public" and it defines the cluster URL the PKI should be issued from. The GW cluster must have permissions to read associated target's details | [optional] |
| isCa | Boolean | [optional] | |
| keyBits | Number | [optional] | |
| keyType | String | [optional] | |
| keyUsageList | [String] | [optional] | |
| locality | [String] | [optional] | |
| maxPathLen | Number | [optional] | |
| nonCriticalKeyUsage | Boolean | [optional] | |
| notBeforeDuration | Number | A Duration represents the elapsed time between two instants as an int64 nanosecond count. The representation limits the largest representable duration to approximately 290 years. | [optional] |
| ocspNextUpdate | Number | OcspNextUpdate defines the desired NextUpdate window for OCSP responses. Value is in seconds; 0 means not set. Minimum enforced is 10 minutes. | [optional] |
| organizationList | [String] | [optional] | |
| organizationUnitList | [String] | [optional] | |
| pkiIssuerType | String | [optional] | |
| postalCode | [String] | [optional] | |
| protectGeneratedCertificates | Boolean | ProtectGeneratedCertificates dictates whether the created certificates should be protected from deletion | [optional] |
| province | [String] | [optional] | |
| renewBeforeExpirationInDays | Number | [optional] | |
| requireCn | Boolean | [optional] | |
| serverFlag | Boolean | [optional] | |
| streetAddress | [String] | [optional] |