Get Certificate

venafi_tpp.get_certificate
ActionBusiness appsconnection required

Calls the Venafi TLS Protect Datacenter API with the connection's credentials.

Read one Certificate object, with its issuance and validation detail.

Connection

Required
Yes — the node will not save without one
Auth type
Custom
Providers
Venafi TLS Protect Datacenter
Secret shape
{"username": "…", "password": "…"} or {"access_token": "…"}
Config it needs
base_url, client_id, scope
Resolved by
config.connection_id, else node.connection_id

Configuration

1 field, 1 required. A dotted path is a nested object and name[] an array of objects — the editor renders the same tree.

FieldTypeRequiredDefaultConstraintsExample
guid
GUID of the Certificate object, with or without the braces Venafi writes it in.
stringYes——{2b6b673f-2c55-46fc-935a-5836eae9b9db}

Example configuration

Every value below is the contract’s own example or default — nothing invented.

{
  "guid": "{2b6b673f-2c55-46fc-935a-5836eae9b9db}"
}

Output

One shape.

result

FieldTypeExample
DN
Distinguished Name of the certificate object.
string—
Guid
GUID of the certificate object.
string—
Name
Name of the certificate object.
string—
ManagementType
How far the platform manages it.
string—
SchemaClass
The object's class.
string—
CreatedOn
When the object was created.
string—
CertificateDetails.CN
Common Name on the certificate.
string—
CertificateDetails.Issuer
The issuing authority's DN.
string—
CertificateDetails.Subject
The certificate's subject DN.
string—
CertificateDetails.Serial
Serial number of the certificate.
string—
CertificateDetails.Thumbprint
SHA-1 thumbprint.
string—
CertificateDetails.ValidFrom
Start of the validity window.
string—
CertificateDetails.ValidTo
End of the validity window.
string—
CertificateDetails.KeyAlgorithm
Public key algorithm.
string—
CertificateDetails.KeySize
Public key size in bits.
number—
ProcessingDetails
Where the certificate is in its lifecycle.
object—
ValidationDetails
The combined result of every validation.
object—
RenewalDetails
The parameters a renewal would use.
object—
Contact
Identities notified about this certificate.
array—
Approver
Identities that approve work on this certificate.
array—
{
  "Approver": [],
  "CertificateDetails": {
    "CN": "",
    "Issuer": "",
    "KeyAlgorithm": "",
    "KeySize": 0,
    "Serial": "",
    "Subject": "",
    "Thumbprint": "",
    "ValidFrom": "",
    "ValidTo": ""
  },
  "Contact": [],
  "CreatedOn": "",
  "DN": "",
  "Guid": "",
  "ManagementType": "",
  "Name": "",
  "ProcessingDetails": {},
  "RenewalDetails": {},
  "SchemaClass": "",
  "ValidationDetails": {}
}

See Get Certificate run in a workflow.

In a technical demo we add the Venafi TLS Protect Datacenter connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.