--- title: "CreateCertificateAuthority" --- > Documentation Index > Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt > Use this file to discover all available pages before exploring further. Path: Web Certificates API `POST /v1/organizations/{orgId}/projects/{projectId}/certificate-authorities` ## Authentication Requires one of the following: - `apiKey`, http, header `Authorization` - `oauth`, http, header `Authorization` - `sessionCookie`, apiKey, in cookie ## Path parameters - `CreateCertificateAuthority.path.orgId` (string, required) - format `uuid` - `CreateCertificateAuthority.path.projectId` (string, required) - format `uuid` ## Header parameters - `CreateCertificateAuthority.header.Idempotency-Key` (string, optional) — Makes a retry safe: the same key and request get the stored response. - pattern `^[\x21-\x7e]{1,200}$` ## Request body _Required._ - `CreateCertificateAuthority.keyAlgorithm` (string, required) - one of `"ecdsa-p256"`, `"ecdsa-p384"`, `"rsa-2048"`, `"rsa-3072"`, `"rsa-4096"` - `CreateCertificateAuthority.name` (string, required) - minLength 1; maxLength 100 - `CreateCertificateAuthority.subject` (object, required) - `CreateCertificateAuthority.subject.commonName` (string, required) - minLength 1; maxLength 64 - `CreateCertificateAuthority.subject.country` (array, optional) - `CreateCertificateAuthority.subject.locality` (array, optional) - `CreateCertificateAuthority.subject.organization` (array, optional) - `CreateCertificateAuthority.subject.organizationalUnit` (array, optional) - `CreateCertificateAuthority.subject.province` (array, optional) - `CreateCertificateAuthority.type` (string, required) - one of `"root"`, `"subordinate"` - `CreateCertificateAuthority.description` (string, optional) - maxLength 1000 - `CreateCertificateAuthority.maxLeafValidityDays` (integer, optional) — Subordinates only, default 90; may later only shrink - min 1; max 825 - `CreateCertificateAuthority.nameConstraints` (object, optional) — Fixed at creation. DNS and URI entries: a host or .domain; email: a mailbox, host or .domain; IP: a masked CIDR prefix. A hosted subordinate's are within its parent's. - `CreateCertificateAuthority.nameConstraints.excludedDns` (array, optional) - `CreateCertificateAuthority.nameConstraints.excludedEmail` (array, optional) - `CreateCertificateAuthority.nameConstraints.excludedIp` (array, optional) - `CreateCertificateAuthority.nameConstraints.excludedUri` (array, optional) - `CreateCertificateAuthority.nameConstraints.permittedDns` (array, optional) - `CreateCertificateAuthority.nameConstraints.permittedEmail` (array, optional) - `CreateCertificateAuthority.nameConstraints.permittedIp` (array, optional) - `CreateCertificateAuthority.nameConstraints.permittedUri` (array, optional) - `CreateCertificateAuthority.parentId` (string, optional) — A hosted subordinate's parent CA, in the same project (needs certificates.certificateAuthorities.issue on it) - format `uuid` - `CreateCertificateAuthority.parentKind` (string, optional) — Subordinates only: hosted (the default) or external (signed by your own root, then imported) - one of `"hosted"`, `"external"` - `CreateCertificateAuthority.pathLength` (integer, optional) — Roots -1 (unlimited) to 2, default 1; subordinates 0 to 2 and below the parent's, default 0 - min -1; max 2 - `CreateCertificateAuthority.tags` (map, optional) - `CreateCertificateAuthority.validityDays` (integer, optional) — Roots 365-9132, default 3650; subordinates 365-3653, default 1825 (never past the parent's notAfter) - min 365; max 9132 ## Example request ```json { "description": "string", "keyAlgorithm": "ecdsa-p256", "maxLeafValidityDays": 1, "name": "string", "nameConstraints": { "excludedDns": [ "string" ], "excludedEmail": [ "string" ], "excludedIp": [ "string" ], "excludedUri": [ "string" ], "permittedDns": [ "string" ], "permittedEmail": [ "string" ], "permittedIp": [ "string" ], "permittedUri": [ "string" ] }, "parentId": "70850378-7d3c-4f45-91b7-942d4dfbbd43", "parentKind": "hosted", "pathLength": -1, "subject": { "commonName": "string", "country": [ "string" ], "locality": [ "string" ], "organization": [ "string" ], "organizationalUnit": [ "string" ], "province": [ "string" ] }, "tags": { "property1": "string", "property2": "string" }, "type": "root", "validityDays": 365 } ``` ## Code samples ### cURL ```curl curl --request POST \ --url https://certificates.ezghcloud.com/v1/organizations/497f6eca-6276-4993-bfeb-53cbbbba6f08/projects/497f6eca-6276-4993-bfeb-53cbbbba6f08/certificate-authorities \ --header 'Authorization: Bearer ' \ --header 'Content-Type: application/json' \ --data ' { "description": "string", "keyAlgorithm": "ecdsa-p256", "maxLeafValidityDays": 1, "name": "string", "nameConstraints": { "excludedDns": [ "string" ], "excludedEmail": [ "string" ], "excludedIp": [ "string" ], "excludedUri": [ "string" ], "permittedDns": [ "string" ], "permittedEmail": [ "string" ], "permittedIp": [ "string" ], "permittedUri": [ "string" ] }, "parentId": "70850378-7d3c-4f45-91b7-942d4dfbbd43", "parentKind": "hosted", "pathLength": -1, "subject": { "commonName": "string", "country": [ "string" ], "locality": [ "string" ], "organization": [ "string" ], "organizationalUnit": [ "string" ], "province": [ "string" ] }, "tags": { "property1": "string", "property2": "string" }, "type": "root", "validityDays": 365 } ' ``` ### TypeScript ```typescript const url = 'https://certificates.ezghcloud.com/v1/organizations/497f6eca-6276-4993-bfeb-53cbbbba6f08/projects/497f6eca-6276-4993-bfeb-53cbbbba6f08/certificate-authorities'; const options = { method: 'POST', headers: {'Content-Type': 'application/json', Authorization: 'Bearer '}, body: JSON.stringify({ description: 'string', keyAlgorithm: 'ecdsa-p256', maxLeafValidityDays: 1, name: 'string', nameConstraints: { excludedDns: ['string'], excludedEmail: ['string'], excludedIp: ['string'], excludedUri: ['string'], permittedDns: ['string'], permittedEmail: ['string'], permittedIp: ['string'], permittedUri: ['string'] }, parentId: '70850378-7d3c-4f45-91b7-942d4dfbbd43', parentKind: 'hosted', pathLength: -1, subject: { commonName: 'string', country: ['string'], locality: ['string'], organization: ['string'], organizationalUnit: ['string'], province: ['string'] }, tags: {property1: 'string', property2: 'string'}, type: 'root', validityDays: 365 }) }; fetch(url, options) .then(res => res.json()) .then(json => console.log(json)) .catch(err => console.error(err)); ``` ### Python ```python import requests url = "https://certificates.ezghcloud.com/v1/organizations/497f6eca-6276-4993-bfeb-53cbbbba6f08/projects/497f6eca-6276-4993-bfeb-53cbbbba6f08/certificate-authorities" payload = { "description": "string", "keyAlgorithm": "ecdsa-p256", "maxLeafValidityDays": 1, "name": "string", "nameConstraints": { "excludedDns": ["string"], "excludedEmail": ["string"], "excludedIp": ["string"], "excludedUri": ["string"], "permittedDns": ["string"], "permittedEmail": ["string"], "permittedIp": ["string"], "permittedUri": ["string"] }, "parentId": "70850378-7d3c-4f45-91b7-942d4dfbbd43", "parentKind": "hosted", "pathLength": -1, "subject": { "commonName": "string", "country": ["string"], "locality": ["string"], "organization": ["string"], "organizationalUnit": ["string"], "province": ["string"] }, "tags": { "property1": "string", "property2": "string" }, "type": "root", "validityDays": 365 } headers = { "Content-Type": "application/json", "Authorization": "Bearer " } response = requests.post(url, json=payload, headers=headers) print(response.text) ``` ## Responses ### 202 Accepted: the operation finishes it #### Example ```json { "operation": { "action": "string", "cancellable": true, "createdAt": "2019-08-24T14:15:22Z", "createdBy": {}, "error": {}, "finishedAt": "2019-08-24T14:15:22Z", "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "organizationId": "7bc05553-4b68-44e8-b7bc-37be63c6d9e9", "projectId": "5a8591dd-4039-49df-9202-96385ba3eff8", "startedAt": "2019-08-24T14:15:22Z", "status": "string", "target": { "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "resourceName": "string", "type": "string" }, "type": "string", "updatedAt": "2019-08-24T14:15:22Z" }, "resource": { "acmeDirectoryUrl": "string", "caIssuerUrl": "string", "certificatePem": "string", "chainPem": [ "string" ], "createdAt": "2019-08-24T14:15:22Z", "crlThisUpdate": "2019-08-24T14:15:22Z", "crlUrl": "string", "csrPem": "string", "deletionAt": "2019-08-24T14:15:22Z", "description": "string", "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "keyAlgorithm": "string", "maxLeafValidityDays": 0, "name": "string", "nameConstraints": { "excludedDns": [ "string" ], "excludedEmail": [ "string" ], "excludedIp": [ "string" ], "excludedUri": [ "string" ], "permittedDns": [ "string" ], "permittedEmail": [ "string" ], "permittedIp": [ "string" ], "permittedUri": [ "string" ] }, "notAfter": "2019-08-24T14:15:22Z", "notBefore": "2019-08-24T14:15:22Z", "ocspUrl": "string", "organizationId": "7bc05553-4b68-44e8-b7bc-37be63c6d9e9", "parentId": "70850378-7d3c-4f45-91b7-942d4dfbbd43", "parentKind": "string", "pathLength": 0, "projectId": "5a8591dd-4039-49df-9202-96385ba3eff8", "region": "string", "resourceName": "string", "revocationReason": "unspecified", "revokedAt": "2019-08-24T14:15:22Z", "slug": "string", "state": "string", "subject": { "commonName": "string", "country": [ "string" ], "locality": [ "string" ], "organization": [ "string" ], "organizationalUnit": [ "string" ], "province": [ "string" ] }, "tags": { "property1": "string", "property2": "string" }, "type": "root", "updatedAt": "2019-08-24T14:15:22Z", "validityDays": 0 } } ``` - `CreateCertificateAuthority.response.202.operation` (object, required) - `CreateCertificateAuthority.response.202.operation.action` (string, required) - `CreateCertificateAuthority.response.202.operation.cancellable` (boolean, required) - `CreateCertificateAuthority.response.202.operation.createdAt` (string, required) - format `date-time` - `CreateCertificateAuthority.response.202.operation.createdBy` (object, required) - `CreateCertificateAuthority.response.202.operation.error` (any of, required) - any of: `object`, `null` - `CreateCertificateAuthority.response.202.operation.finishedAt` (any of, required) - any of: `string`, `null` - `CreateCertificateAuthority.response.202.operation.id` (string, required) - format `uuid` - `CreateCertificateAuthority.response.202.operation.organizationId` (string, required) - format `uuid` - `CreateCertificateAuthority.response.202.operation.projectId` (any of, required) - any of: `string`, `null` - `CreateCertificateAuthority.response.202.operation.startedAt` (any of, required) - any of: `string`, `null` - `CreateCertificateAuthority.response.202.operation.status` (string, required) - `CreateCertificateAuthority.response.202.operation.target` (object, required) - `CreateCertificateAuthority.response.202.operation.target.id` (string, required) - format `uuid` - `CreateCertificateAuthority.response.202.operation.target.resourceName` (string, required) - `CreateCertificateAuthority.response.202.operation.target.type` (string, required) - `CreateCertificateAuthority.response.202.operation.type` (string, required) - `CreateCertificateAuthority.response.202.operation.updatedAt` (string, required) - format `date-time` - `CreateCertificateAuthority.response.202.resource` (object, required) - `CreateCertificateAuthority.response.202.resource.acmeDirectoryUrl` (any of, required) - any of: `string`, `null` - `CreateCertificateAuthority.response.202.resource.caIssuerUrl` (string, required) - `CreateCertificateAuthority.response.202.resource.certificatePem` (any of, required) - any of: `string`, `null` - `CreateCertificateAuthority.response.202.resource.chainPem` (array, required) - `CreateCertificateAuthority.response.202.resource.createdAt` (string, required) - format `date-time` - `CreateCertificateAuthority.response.202.resource.crlThisUpdate` (any of, required) — thisUpdate of the CA's newest CRL; null before the first - any of: `string`, `null` - `CreateCertificateAuthority.response.202.resource.crlUrl` (string, required) - `CreateCertificateAuthority.response.202.resource.csrPem` (any of, required) - any of: `string`, `null` - `CreateCertificateAuthority.response.202.resource.deletionAt` (any of, required) - any of: `string`, `null` - `CreateCertificateAuthority.response.202.resource.description` (string, required) - `CreateCertificateAuthority.response.202.resource.id` (string, required) - format `uuid` - `CreateCertificateAuthority.response.202.resource.keyAlgorithm` (string, required) - `CreateCertificateAuthority.response.202.resource.maxLeafValidityDays` (any of, required) - any of: `integer`, `null` - `CreateCertificateAuthority.response.202.resource.name` (string, required) - `CreateCertificateAuthority.response.202.resource.nameConstraints` (object, required) - `CreateCertificateAuthority.response.202.resource.nameConstraints.excludedDns` (array, required) - `CreateCertificateAuthority.response.202.resource.nameConstraints.excludedEmail` (array, required) - `CreateCertificateAuthority.response.202.resource.nameConstraints.excludedIp` (array, required) - `CreateCertificateAuthority.response.202.resource.nameConstraints.excludedUri` (array, required) - `CreateCertificateAuthority.response.202.resource.nameConstraints.permittedDns` (array, required) - `CreateCertificateAuthority.response.202.resource.nameConstraints.permittedEmail` (array, required) - `CreateCertificateAuthority.response.202.resource.nameConstraints.permittedIp` (array, required) - `CreateCertificateAuthority.response.202.resource.nameConstraints.permittedUri` (array, required) - `CreateCertificateAuthority.response.202.resource.notAfter` (any of, required) - any of: `string`, `null` - `CreateCertificateAuthority.response.202.resource.notBefore` (any of, required) - any of: `string`, `null` - `CreateCertificateAuthority.response.202.resource.ocspUrl` (string, required) - `CreateCertificateAuthority.response.202.resource.organizationId` (string, required) - format `uuid` - `CreateCertificateAuthority.response.202.resource.parentId` (any of, required) - any of: `string`, `null` - `CreateCertificateAuthority.response.202.resource.parentKind` (any of, required) - any of: `string`, `null` - `CreateCertificateAuthority.response.202.resource.pathLength` (integer, required) - `CreateCertificateAuthority.response.202.resource.projectId` (string, required) - format `uuid` - `CreateCertificateAuthority.response.202.resource.region` (string, required) - `CreateCertificateAuthority.response.202.resource.resourceName` (string, required) - `CreateCertificateAuthority.response.202.resource.revocationReason` (any of, required) - any of: `string`, `null` - `CreateCertificateAuthority.response.202.resource.revokedAt` (any of, required) — When a subordinate was revoked through its parent (it then stays disabled); null otherwise - any of: `string`, `null` - `CreateCertificateAuthority.response.202.resource.slug` (string, required) - `CreateCertificateAuthority.response.202.resource.state` (string, required) - `CreateCertificateAuthority.response.202.resource.subject` (object, required) - `CreateCertificateAuthority.response.202.resource.subject.commonName` (string, required) - `CreateCertificateAuthority.response.202.resource.subject.country` (array, required) - `CreateCertificateAuthority.response.202.resource.subject.locality` (array, required) - `CreateCertificateAuthority.response.202.resource.subject.organization` (array, required) - `CreateCertificateAuthority.response.202.resource.subject.organizationalUnit` (array, required) - `CreateCertificateAuthority.response.202.resource.subject.province` (array, required) - `CreateCertificateAuthority.response.202.resource.tags` (map, required) - `CreateCertificateAuthority.response.202.resource.type` (string, required) - one of `"root"`, `"subordinate"` - `CreateCertificateAuthority.response.202.resource.updatedAt` (string, required) - format `date-time` - `CreateCertificateAuthority.response.202.resource.validityDays` (integer, required) ### 400 invalid_request (with issues), invalid_cursor, or the endpoint's own 400 codes. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCertificateAuthority.response.400.error` (object, required) - `CreateCertificateAuthority.response.400.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCertificateAuthority.response.400.error.message` (string, required) - maxLength 1024 - `CreateCertificateAuthority.response.400.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCertificateAuthority.response.400.error.issues.message` (string, required) - `CreateCertificateAuthority.response.400.error.issues.path` (string, required) - `CreateCertificateAuthority.response.400.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCertificateAuthority.response.400.error.quota.id` (string, required) - `CreateCertificateAuthority.response.400.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCertificateAuthority.response.400.error.quota.limit` (integer, required) - min 0 - `CreateCertificateAuthority.response.400.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCertificateAuthority.response.400.error.quota.inFlight` (integer, optional) - min 0 - `CreateCertificateAuthority.response.400.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.400.error.quota.region` (string, optional) - `CreateCertificateAuthority.response.400.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.400.error.quota.scopeResourceName` (string, optional) - `CreateCertificateAuthority.response.400.error.quota.used` (integer, optional) - min 0 - `CreateCertificateAuthority.response.400.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 401 unauthenticated: no credential, or one that doesn't check out. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCertificateAuthority.response.401.error` (object, required) - `CreateCertificateAuthority.response.401.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCertificateAuthority.response.401.error.message` (string, required) - maxLength 1024 - `CreateCertificateAuthority.response.401.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCertificateAuthority.response.401.error.issues.message` (string, required) - `CreateCertificateAuthority.response.401.error.issues.path` (string, required) - `CreateCertificateAuthority.response.401.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCertificateAuthority.response.401.error.quota.id` (string, required) - `CreateCertificateAuthority.response.401.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCertificateAuthority.response.401.error.quota.limit` (integer, required) - min 0 - `CreateCertificateAuthority.response.401.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCertificateAuthority.response.401.error.quota.inFlight` (integer, optional) - min 0 - `CreateCertificateAuthority.response.401.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.401.error.quota.region` (string, optional) - `CreateCertificateAuthority.response.401.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.401.error.quota.scopeResourceName` (string, optional) - `CreateCertificateAuthority.response.401.error.quota.used` (integer, optional) - min 0 - `CreateCertificateAuthority.response.401.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 403 access_denied: the caller's policies don't allow the action; forbidden_origin: a cookie-authenticated write from an origin that isn't allowed; spend_limit_reached. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCertificateAuthority.response.403.error` (object, required) - `CreateCertificateAuthority.response.403.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCertificateAuthority.response.403.error.message` (string, required) - maxLength 1024 - `CreateCertificateAuthority.response.403.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCertificateAuthority.response.403.error.issues.message` (string, required) - `CreateCertificateAuthority.response.403.error.issues.path` (string, required) - `CreateCertificateAuthority.response.403.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCertificateAuthority.response.403.error.quota.id` (string, required) - `CreateCertificateAuthority.response.403.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCertificateAuthority.response.403.error.quota.limit` (integer, required) - min 0 - `CreateCertificateAuthority.response.403.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCertificateAuthority.response.403.error.quota.inFlight` (integer, optional) - min 0 - `CreateCertificateAuthority.response.403.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.403.error.quota.region` (string, optional) - `CreateCertificateAuthority.response.403.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.403.error.quota.scopeResourceName` (string, optional) - `CreateCertificateAuthority.response.403.error.quota.used` (integer, optional) - min 0 - `CreateCertificateAuthority.response.403.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 404 not_found: unknown, malformed, or in an organization the caller isn't in. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCertificateAuthority.response.404.error` (object, required) - `CreateCertificateAuthority.response.404.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCertificateAuthority.response.404.error.message` (string, required) - maxLength 1024 - `CreateCertificateAuthority.response.404.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCertificateAuthority.response.404.error.issues.message` (string, required) - `CreateCertificateAuthority.response.404.error.issues.path` (string, required) - `CreateCertificateAuthority.response.404.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCertificateAuthority.response.404.error.quota.id` (string, required) - `CreateCertificateAuthority.response.404.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCertificateAuthority.response.404.error.quota.limit` (integer, required) - min 0 - `CreateCertificateAuthority.response.404.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCertificateAuthority.response.404.error.quota.inFlight` (integer, optional) - min 0 - `CreateCertificateAuthority.response.404.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.404.error.quota.region` (string, optional) - `CreateCertificateAuthority.response.404.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.404.error.quota.scopeResourceName` (string, optional) - `CreateCertificateAuthority.response.404.error.quota.used` (integer, optional) - min 0 - `CreateCertificateAuthority.response.404.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 409 quota_exceeded (an allocation quota, with quota), idempotency_conflict, idempotency_in_progress (with Retry-After), organization_deletion_pending, operation_in_progress, or the endpoint's own 409 codes. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCertificateAuthority.response.409.error` (object, required) - `CreateCertificateAuthority.response.409.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCertificateAuthority.response.409.error.message` (string, required) - maxLength 1024 - `CreateCertificateAuthority.response.409.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCertificateAuthority.response.409.error.issues.message` (string, required) - `CreateCertificateAuthority.response.409.error.issues.path` (string, required) - `CreateCertificateAuthority.response.409.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCertificateAuthority.response.409.error.quota.id` (string, required) - `CreateCertificateAuthority.response.409.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCertificateAuthority.response.409.error.quota.limit` (integer, required) - min 0 - `CreateCertificateAuthority.response.409.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCertificateAuthority.response.409.error.quota.inFlight` (integer, optional) - min 0 - `CreateCertificateAuthority.response.409.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.409.error.quota.region` (string, optional) - `CreateCertificateAuthority.response.409.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.409.error.quota.scopeResourceName` (string, optional) - `CreateCertificateAuthority.response.409.error.quota.used` (integer, optional) - min 0 - `CreateCertificateAuthority.response.409.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 413 payload_too_large: the body is over the endpoint's limit (1 MiB unless it says otherwise). #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCertificateAuthority.response.413.error` (object, required) - `CreateCertificateAuthority.response.413.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCertificateAuthority.response.413.error.message` (string, required) - maxLength 1024 - `CreateCertificateAuthority.response.413.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCertificateAuthority.response.413.error.issues.message` (string, required) - `CreateCertificateAuthority.response.413.error.issues.path` (string, required) - `CreateCertificateAuthority.response.413.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCertificateAuthority.response.413.error.quota.id` (string, required) - `CreateCertificateAuthority.response.413.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCertificateAuthority.response.413.error.quota.limit` (integer, required) - min 0 - `CreateCertificateAuthority.response.413.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCertificateAuthority.response.413.error.quota.inFlight` (integer, optional) - min 0 - `CreateCertificateAuthority.response.413.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.413.error.quota.region` (string, optional) - `CreateCertificateAuthority.response.413.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.413.error.quota.scopeResourceName` (string, optional) - `CreateCertificateAuthority.response.413.error.quota.used` (integer, optional) - min 0 - `CreateCertificateAuthority.response.413.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 429 too_many_requests, with Retry-After; or quota_exceeded (a rate, usage or concurrency quota, with quota), never with Retry-After. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCertificateAuthority.response.429.error` (object, required) - `CreateCertificateAuthority.response.429.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCertificateAuthority.response.429.error.message` (string, required) - maxLength 1024 - `CreateCertificateAuthority.response.429.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCertificateAuthority.response.429.error.issues.message` (string, required) - `CreateCertificateAuthority.response.429.error.issues.path` (string, required) - `CreateCertificateAuthority.response.429.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCertificateAuthority.response.429.error.quota.id` (string, required) - `CreateCertificateAuthority.response.429.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCertificateAuthority.response.429.error.quota.limit` (integer, required) - min 0 - `CreateCertificateAuthority.response.429.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCertificateAuthority.response.429.error.quota.inFlight` (integer, optional) - min 0 - `CreateCertificateAuthority.response.429.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.429.error.quota.region` (string, optional) - `CreateCertificateAuthority.response.429.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.429.error.quota.scopeResourceName` (string, optional) - `CreateCertificateAuthority.response.429.error.quota.used` (integer, optional) - min 0 - `CreateCertificateAuthority.response.429.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 500 internal_error: a bug; the details are in the logs, under the request ID. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCertificateAuthority.response.500.error` (object, required) - `CreateCertificateAuthority.response.500.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCertificateAuthority.response.500.error.message` (string, required) - maxLength 1024 - `CreateCertificateAuthority.response.500.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCertificateAuthority.response.500.error.issues.message` (string, required) - `CreateCertificateAuthority.response.500.error.issues.path` (string, required) - `CreateCertificateAuthority.response.500.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCertificateAuthority.response.500.error.quota.id` (string, required) - `CreateCertificateAuthority.response.500.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCertificateAuthority.response.500.error.quota.limit` (integer, required) - min 0 - `CreateCertificateAuthority.response.500.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCertificateAuthority.response.500.error.quota.inFlight` (integer, optional) - min 0 - `CreateCertificateAuthority.response.500.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.500.error.quota.region` (string, optional) - `CreateCertificateAuthority.response.500.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.500.error.quota.scopeResourceName` (string, optional) - `CreateCertificateAuthority.response.500.error.quota.used` (integer, optional) - min 0 - `CreateCertificateAuthority.response.500.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 503 unavailable: a dependency the request needs is down. Retry after Retry-After. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCertificateAuthority.response.503.error` (object, required) - `CreateCertificateAuthority.response.503.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCertificateAuthority.response.503.error.message` (string, required) - maxLength 1024 - `CreateCertificateAuthority.response.503.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCertificateAuthority.response.503.error.issues.message` (string, required) - `CreateCertificateAuthority.response.503.error.issues.path` (string, required) - `CreateCertificateAuthority.response.503.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCertificateAuthority.response.503.error.quota.id` (string, required) - `CreateCertificateAuthority.response.503.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCertificateAuthority.response.503.error.quota.limit` (integer, required) - min 0 - `CreateCertificateAuthority.response.503.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCertificateAuthority.response.503.error.quota.inFlight` (integer, optional) - min 0 - `CreateCertificateAuthority.response.503.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.503.error.quota.region` (string, optional) - `CreateCertificateAuthority.response.503.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCertificateAuthority.response.503.error.quota.scopeResourceName` (string, optional) - `CreateCertificateAuthority.response.503.error.quota.used` (integer, optional) - min 0 - `CreateCertificateAuthority.response.503.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. Source: https://docs.ezghcloud.com/certificates-api/CreateCertificateAuthority/index.md