AWS::ACMPCA::Certificate Subject
Contains information about the certificate subject. The Subject
field in
the certificate identifies the entity that owns or controls the public key in the
certificate. The entity can be a user, computer, device, or service. The Subject
must contain an X.500 distinguished name (DN). A DN is a sequence of relative
distinguished names (RDNs). The RDNs are separated by commas in the certificate.
Syntax
To declare this entity in your Amazon CloudFormation template, use the following syntax:
JSON
{ "CommonName" :
String
, "Country" :String
, "CustomAttributes" :[ CustomAttribute, ... ]
, "DistinguishedNameQualifier" :String
, "GenerationQualifier" :String
, "GivenName" :String
, "Initials" :String
, "Locality" :String
, "Organization" :String
, "OrganizationalUnit" :String
, "Pseudonym" :String
, "SerialNumber" :String
, "State" :String
, "Surname" :String
, "Title" :String
}
YAML
CommonName:
String
Country:String
CustomAttributes:- CustomAttribute
DistinguishedNameQualifier:String
GenerationQualifier:String
GivenName:String
Initials:String
Locality:String
Organization:String
OrganizationalUnit:String
Pseudonym:String
SerialNumber:String
State:String
Surname:String
Title:String
Properties
CommonName
-
For CA and end-entity certificates in a private PKI, the common name (CN) can be any string within the length limit.
Note: In publicly trusted certificates, the common name must be a fully qualified domain name (FQDN) associated with the certificate subject.
Required: No
Type: String
Minimum:
0
Maximum:
64
Update requires: Replacement
Country
-
Two-digit code that specifies the country in which the certificate subject located.
Required: No
Type: String
Pattern:
[A-Za-z]{2}
Minimum:
2
Maximum:
2
Update requires: Replacement
CustomAttributes
-
Contains a sequence of one or more X.500 relative distinguished names (RDNs), each of which consists of an object identifier (OID) and a value. For more information, see NIST’s definition of Object Identifier (OID)
. Note
Custom attributes cannot be used in combination with standard attributes.
Required: No
Type: Array of CustomAttribute
Minimum:
1
Maximum:
150
Update requires: Replacement
DistinguishedNameQualifier
-
Disambiguating information for the certificate subject.
Required: No
Type: String
Pattern:
[a-zA-Z0-9'()+-.?:/= ]*
Minimum:
0
Maximum:
64
Update requires: Replacement
GenerationQualifier
-
Typically a qualifier appended to the name of an individual. Examples include Jr. for junior, Sr. for senior, and III for third.
Required: No
Type: String
Minimum:
0
Maximum:
3
Update requires: Replacement
GivenName
-
First name.
Required: No
Type: String
Minimum:
0
Maximum:
16
Update requires: Replacement
Initials
-
Concatenation that typically contains the first letter of the GivenName, the first letter of the middle name if one exists, and the first letter of the Surname.
Required: No
Type: String
Minimum:
0
Maximum:
5
Update requires: Replacement
Locality
-
The locality (such as a city or town) in which the certificate subject is located.
Required: No
Type: String
Minimum:
0
Maximum:
128
Update requires: Replacement
Organization
-
Legal name of the organization with which the certificate subject is affiliated.
Required: No
Type: String
Minimum:
0
Maximum:
64
Update requires: Replacement
OrganizationalUnit
-
A subdivision or unit of the organization (such as sales or finance) with which the certificate subject is affiliated.
Required: No
Type: String
Minimum:
0
Maximum:
64
Update requires: Replacement
Pseudonym
-
Typically a shortened version of a longer GivenName. For example, Jonathan is often shortened to John. Elizabeth is often shortened to Beth, Liz, or Eliza.
Required: No
Type: String
Minimum:
0
Maximum:
128
Update requires: Replacement
SerialNumber
-
The certificate serial number.
Required: No
Type: String
Pattern:
[a-zA-Z0-9'()+-.?:/= ]*
Minimum:
0
Maximum:
64
Update requires: Replacement
State
-
State in which the subject of the certificate is located.
Required: No
Type: String
Minimum:
0
Maximum:
128
Update requires: Replacement
Surname
-
Family name. In the US and the UK, for example, the surname of an individual is ordered last. In Asian cultures the surname is typically ordered first.
Required: No
Type: String
Minimum:
0
Maximum:
40
Update requires: Replacement
Title
-
A title such as Mr. or Ms., which is pre-pended to the name to refer formally to the certificate subject.
Required: No
Type: String
Minimum:
0
Maximum:
64
Update requires: Replacement