Get Certificate

venafi_cloud.get_certificate
ActionBusiness appsconnection required

Calls the Venafi TLS Protect Cloud API with the connection's credentials.

Read one certificate's record: validity, subject, issuer and instances.

Connection

Required
Yes — the node will not save without one
Auth type
API key
Providers
Venafi TLS Protect Cloud
Secret shape
the API key, or {"api_key": "…"}
Config it needs
region, base_url
Resolved by
config.connection_id, else node.connection_id

Configuration

1 field, 1 required. A dotted path is a nested object and name[] an array of objects — the editor renders the same tree.

FieldTypeRequiredDefaultConstraintsExample
certificate_id
The certificate id, which a request emits as 'certificate_ids[0]' once issued.
stringYes——df7a8100-64c3-11eb-bcda-99e9056552b5

Example configuration

Every value below is the contract’s own example or default — nothing invented.

{
  "certificate_id": "df7a8100-64c3-11eb-bcda-99e9056552b5"
}

Output

One shape.

result

FieldTypeExample
id
The certificate id.
string—
certificateName
The certificate's name in Venafi.
string—
certificateStatus
ACTIVE, RETIRED or DELETED.
string—
validityStart
When the certificate became valid, ISO-8601.
string—
validityEnd
When the certificate expires, as ISO-8601.
string—
subjectDN
The full subject distinguished name.
string—
subjectCN
The subject common name.
string—
subjectAlternativeNameDns
The DNS SANs on the certificate.
array—
issuerDN
The issuer's distinguished name.
string—
issuerCN
The issuer's common name.
string—
keyStrength
The key length in bits.
number—
signatureAlgorithm
The signature algorithm used.
string—
applicationIds
The applications the certificate belongs to.
array—
instances
Where Venafi has seen the certificate deployed.
array—
{
  "applicationIds": [],
  "certificateName": "",
  "certificateStatus": "",
  "id": "",
  "instances": [],
  "issuerCN": "",
  "issuerDN": "",
  "keyStrength": 0,
  "signatureAlgorithm": "",
  "subjectAlternativeNameDns": [],
  "subjectCN": "",
  "subjectDN": "",
  "validityEnd": "",
  "validityStart": ""
}

See Get Certificate run in a workflow.

In a technical demo we add the Venafi TLS Protect Cloud connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.