AWS::ACMPCA::Certificate ExtendedKeyUsage
Specifies additional purposes for which the certified public key may be used other
than basic purposes indicated in the KeyUsage
extension.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "ExtendedKeyUsageObjectIdentifier" :
String
, "ExtendedKeyUsageType" :String
}
YAML
ExtendedKeyUsageObjectIdentifier:
String
ExtendedKeyUsageType:String
Properties
ExtendedKeyUsageObjectIdentifier
-
Specifies a custom
ExtendedKeyUsage
with an object identifier (OID).Required: No
Type: String
Minimum:
0
Maximum:
64
Pattern:
^([0-2])\.([0-9]|([0-3][0-9]))((\.([0-9]+)){0,126})$
Update requires: Replacement
ExtendedKeyUsageType
-
Specifies a standard
ExtendedKeyUsage
as defined as in RFC 5280. Required: No
Type: String
Allowed values:
CERTIFICATE_TRANSPARENCY | CLIENT_AUTH | CODE_SIGNING | DOCUMENT_SIGNING | EMAIL_PROTECTION | OCSP_SIGNING | SERVER_AUTH | SMART_CARD_LOGIN | TIME_STAMPING
Update requires: Replacement