Amazonka.CertificateManagerPCA.Types.Extensions

Documentation

data Extensions

Contains X.509 extension information for a certificate.

See: newExtensions smart constructor.

Constructors

Extensions'

Fields

• certificatePolicies :: Maybe (NonEmpty PolicyInformation)

  Contains a sequence of one or more policy information terms, each of which consists of an object identifier (OID) and optional qualifiers. For more information, see NIST's definition of Object Identifier (OID).

  In an end-entity certificate, these terms indicate the policy under which the certificate was issued and the purposes for which it may be used. In a CA certificate, these terms limit the set of policies for certification paths that include this certificate.

• customExtensions :: Maybe (NonEmpty CustomExtension)

  Contains a sequence of one or more X.509 extensions, each of which consists of an object identifier (OID), a base64-encoded value, and the critical flag. For more information, see the Global OID reference database.

• extendedKeyUsage :: Maybe (NonEmpty ExtendedKeyUsage)

  Specifies additional purposes for which the certified public key may be used other than basic purposes indicated in the KeyUsage extension.

• keyUsage :: Maybe KeyUsage
• subjectAlternativeNames :: Maybe (NonEmpty GeneralName)

  The subject alternative name extension allows identities to be bound to the subject of the certificate. These identities may be included in addition to or in place of the identity in the subject field of the certificate.

Instances

ToJSON Extensions

Defined in Amazonka.CertificateManagerPCA.Types.Extensions

Methods

toJSON :: Extensions -> Value

toEncoding :: Extensions -> Encoding

toJSONList :: [Extensions] -> Value

toEncodingList :: [Extensions] -> Encoding

Generic Extensions

Defined in Amazonka.CertificateManagerPCA.Types.Extensions

Associated Types

type Rep Extensions :: Type -> Type

Methods

from :: Extensions -> Rep Extensions x

to :: Rep Extensions x -> Extensions

Read Extensions

Defined in Amazonka.CertificateManagerPCA.Types.Extensions

Methods

readsPrec :: Int -> ReadS Extensions

readList :: ReadS [Extensions]

readPrec :: ReadPrec Extensions

readListPrec :: ReadPrec [Extensions]

Show Extensions

Defined in Amazonka.CertificateManagerPCA.Types.Extensions

Methods

showsPrec :: Int -> Extensions -> ShowS

show :: Extensions -> String

showList :: [Extensions] -> ShowS

NFData Extensions

Defined in Amazonka.CertificateManagerPCA.Types.Extensions

Methods

rnf :: Extensions -> ()

Eq Extensions

Defined in Amazonka.CertificateManagerPCA.Types.Extensions

Methods

(==) :: Extensions -> Extensions -> Bool

(/=) :: Extensions -> Extensions -> Bool

Hashable Extensions

Defined in Amazonka.CertificateManagerPCA.Types.Extensions

Methods

hashWithSalt :: Int -> Extensions -> Int

hash :: Extensions -> Int

type Rep Extensions

Defined in Amazonka.CertificateManagerPCA.Types.Extensions

type Rep Extensions = D1 ('MetaData "Extensions" "Amazonka.CertificateManagerPCA.Types.Extensions" "amazonka-certificatemanager-pca-2.0-BrCc8DEClV63rMSVXz2XYH" 'False) (C1 ('MetaCons "Extensions'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "certificatePolicies") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (NonEmpty PolicyInformation))) :*: S1 ('MetaSel ('Just "customExtensions") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (NonEmpty CustomExtension)))) :*: (S1 ('MetaSel ('Just "extendedKeyUsage") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (NonEmpty ExtendedKeyUsage))) :*: (S1 ('MetaSel ('Just "keyUsage") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyUsage)) :*: S1 ('MetaSel ('Just "subjectAlternativeNames") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (NonEmpty GeneralName)))))))

newExtensions :: Extensions

Create a value of Extensions with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:certificatePolicies:Extensions', extensions_certificatePolicies - Contains a sequence of one or more policy information terms, each of which consists of an object identifier (OID) and optional qualifiers. For more information, see NIST's definition of Object Identifier (OID).

In an end-entity certificate, these terms indicate the policy under which the certificate was issued and the purposes for which it may be used. In a CA certificate, these terms limit the set of policies for certification paths that include this certificate.

$sel:customExtensions:Extensions', extensions_customExtensions - Contains a sequence of one or more X.509 extensions, each of which consists of an object identifier (OID), a base64-encoded value, and the critical flag. For more information, see the Global OID reference database.

$sel:extendedKeyUsage:Extensions', extensions_extendedKeyUsage - Specifies additional purposes for which the certified public key may be used other than basic purposes indicated in the KeyUsage extension.

$sel:keyUsage:Extensions', extensions_keyUsage - Undocumented member.

$sel:subjectAlternativeNames:Extensions', extensions_subjectAlternativeNames - The subject alternative name extension allows identities to be bound to the subject of the certificate. These identities may be included in addition to or in place of the identity in the subject field of the certificate.

extensions_certificatePolicies :: Lens' Extensions (Maybe (NonEmpty PolicyInformation))

Contains a sequence of one or more policy information terms, each of which consists of an object identifier (OID) and optional qualifiers. For more information, see NIST's definition of Object Identifier (OID).

In an end-entity certificate, these terms indicate the policy under which the certificate was issued and the purposes for which it may be used. In a CA certificate, these terms limit the set of policies for certification paths that include this certificate.

extensions_customExtensions :: Lens' Extensions (Maybe (NonEmpty CustomExtension))

Contains a sequence of one or more X.509 extensions, each of which consists of an object identifier (OID), a base64-encoded value, and the critical flag. For more information, see the Global OID reference database.

extensions_extendedKeyUsage :: Lens' Extensions (Maybe (NonEmpty ExtendedKeyUsage))

Specifies additional purposes for which the certified public key may be used other than basic purposes indicated in the KeyUsage extension.

extensions_keyUsage :: Lens' Extensions (Maybe KeyUsage)

Undocumented member.

extensions_subjectAlternativeNames :: Lens' Extensions (Maybe (NonEmpty GeneralName))

The subject alternative name extension allows identities to be bound to the subject of the certificate. These identities may be included in addition to or in place of the identity in the subject field of the certificate.