[
    "CA:TRUE"
]

True

--- before

+++ after

@@ -1 +1,85 @@

-{}
+{
+    "authority_cert_issuer": null,
+    "authority_cert_serial_number": null,
+    "authority_key_identifier": null,
+    "basic_constraints": [
+        "CA:TRUE"
+    ],
+    "basic_constraints_critical": true,
+    "can_parse_csr": true,
+    "extended_key_usage": null,
+    "extended_key_usage_critical": false,
+    "extensions_by_oid": {
+        "2.5.29.14": {
+            "critical": false,
+            "value": "BBTv2lKkTAw2yCjLyBKHGqREmycciw=="
+        },
+        "2.5.29.17": {
+            "critical": false,
+            "value": "MFCCB3NlcnZpY2WCIXNlcnZpY2UuY2RrY2x1c3Rlci5rdWJlaW5pdC5sb2NhbIIicmVnaXN0cnkuY2RrY2x1c3Rlci5rdWJlaW5pdC5sb2NhbA=="
+        },
+        "2.5.29.19": {
+            "critical": true,
+            "value": "MAMBAf8="
+        }
+    },
+    "key_usage": null,
+    "key_usage_critical": false,
+    "name_constraints_critical": false,
+    "name_constraints_excluded": null,
+    "name_constraints_permitted": null,
+    "ocsp_must_staple": null,
+    "ocsp_must_staple_critical": false,
+    "public_key": "-----BEGIN PUBLIC KEY-----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\nfR/ojWWyt2QLawEr5P+Zb58CAwEAAQ==\n-----END PUBLIC KEY-----\n",
+    "public_key_data": {
+        "exponent": 65537,
+        "modulus": 995987756173713607770817230470657853121100877246196838073173346460708597375346700030810671869742916800440890385513603100524437537409137314381596545210157236106068665502571590686415237009945999114340706424237340486187169951146331108525200099311592563698534048350591653967390562284846280495417531807709424985152868606501858339106681005021561234287347915174042893995010491201239780374310166494141562434045093344188237386815462487457274259474507817043415139906706480321141069391745914351076877898275480838369712424047682701074078226892947240667266564061758756648324240961111697280768202655013071155955114249512244117834637731457269078644865980089129937512979635331524303797351582372552806475934573436787676086773556656824788416116934608531526428539241735416188346757209687347791476781839222897087042114473154809667533836759851540660165193304425893567984018013408916852156676992799585375649344514798194450829086742121013895654922567024067251956946129509083986787647254546409639005956015308782569850882802706049058524901404098255425693274647492528519818400684058305298829139571235221101132766152246996881861722270324850057858178531445920887560486537023991010325946709173742717908253805304702418356882203694394868278685332189847799083921311,
+        "size": 4096
+    },
+    "public_key_fingerprints": {
+        "sha256": "59:48:c1:1c:6e:92:e7:e9:11:ab:08:8e:a4:a1:b2:90:15:d1:81:db:48:dd:95:b3:8f:34:45:20:1e:7c:13:bd"
+    },
+    "public_key_type": "RSA",
+    "signature_valid": true,
+    "subject": {
+        "commonName": "service.cdkcluster.kubeinit.local",
+        "countryName": "US",
+        "localityName": "MyCity",
+        "organizationName": "MyCompany",
+        "organizationalUnitName": "MyDepartment",
+        "stateOrProvinceName": "MyState"
+    },
+    "subject_alt_name": [
+        "DNS:service",
+        "DNS:service.cdkcluster.kubeinit.local",
+        "DNS:registry.cdkcluster.kubeinit.local"
+    ],
+    "subject_alt_name_critical": false,
+    "subject_key_identifier": "ef:da:52:a4:4c:0c:36:c8:28:cb:c8:12:87:1a:a4:44:9b:27:1c:8b",
+    "subject_ordered": [
+        [
+            "countryName",
+            "US"
+        ],
+        [
+            "stateOrProvinceName",
+            "MyState"
+        ],
+        [
+            "localityName",
+            "MyCity"
+        ],
+        [
+            "organizationName",
+            "MyCompany"
+        ],
+        [
+            "organizationalUnitName",
+            "MyDepartment"
+        ],
+        [
+            "commonName",
+            "service.cdkcluster.kubeinit.local"
+        ]
+    ]
+}

/var/kubeinit/registry/certs/domain.csr

{
    "module_args": {
        "attributes": null,
        "authority_cert_issuer": null,
        "authority_cert_serial_number": null,
        "authority_key_identifier": null,
        "backup": false,
        "basic_constraints": [
            "CA:TRUE"
        ],
        "basic_constraints_critical": true,
        "common_name": "service.cdkcluster.kubeinit.local",
        "country_name": "US",
        "create_subject_key_identifier": true,
        "crl_distribution_points": null,
        "digest": "sha256",
        "email_address": null,
        "extended_key_usage": null,
        "extended_key_usage_critical": false,
        "force": false,
        "group": null,
        "key_usage": null,
        "key_usage_critical": false,
        "locality_name": "MyCity",
        "mode": null,
        "name_constraints_critical": false,
        "name_constraints_excluded": null,
        "name_constraints_permitted": null,
        "ocsp_must_staple": false,
        "ocsp_must_staple_critical": false,
        "organization_name": "MyCompany",
        "organizational_unit_name": "MyDepartment",
        "owner": null,
        "path": "/var/kubeinit/registry/certs/domain.csr",
        "privatekey_content": null,
        "privatekey_passphrase": null,
        "privatekey_path": "/var/kubeinit/registry/certs/domain.key",
        "return_content": false,
        "select_crypto_backend": "auto",
        "selevel": null,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "state_or_province_name": "MyState",
        "subject": null,
        "subject_alt_name": [
            "DNS:service",
            "DNS:service.cdkcluster.kubeinit.local",
            "DNS:registry.cdkcluster.kubeinit.local"
        ],
        "subject_alt_name_critical": false,
        "subject_key_identifier": null,
        "subject_ordered": null,
        "unsafe_writes": false,
        "use_common_name_for_san": true,
        "version": 1
    }
}

[]

[]

False

/var/kubeinit/registry/certs/domain.key

[
    [
        "C",
        "US"
    ],
    [
        "ST",
        "MyState"
    ],
    [
        "L",
        "MyCity"
    ],
    [
        "O",
        "MyCompany"
    ],
    [
        "OU",
        "MyDepartment"
    ],
    [
        "CN",
        "service.cdkcluster.kubeinit.local"
    ]
]

[
    "DNS:service",
    "DNS:service.cdkcluster.kubeinit.local",
    "DNS:registry.cdkcluster.kubeinit.local"
]