basicConstraints
|
|
changed
|
|
diff
|
--- before
+++ after
@@ -1 +1,85 @@
-{}
+{
+ "authority_cert_issuer": null,
+ "authority_cert_serial_number": null,
+ "authority_key_identifier": null,
+ "basic_constraints": [
+ "CA:TRUE"
+ ],
+ "basic_constraints_critical": true,
+ "can_parse_csr": true,
+ "extended_key_usage": null,
+ "extended_key_usage_critical": false,
+ "extensions_by_oid": {
+ "2.5.29.14": {
+ "critical": false,
+ "value": "BBTM9M/gGK1xUxvVRjjxzXtp8RipPw=="
+ },
+ "2.5.29.17": {
+ "critical": false,
+ "value": "MFCCB3NlcnZpY2WCIXNlcnZpY2Uua2lkY2x1c3Rlci5rdWJlaW5pdC5sb2NhbIIicmVnaXN0cnkua2lkY2x1c3Rlci5rdWJlaW5pdC5sb2NhbA=="
+ },
+ "2.5.29.19": {
+ "critical": true,
+ "value": "MAMBAf8="
+ }
+ },
+ "key_usage": null,
+ "key_usage_critical": false,
+ "name_constraints_critical": false,
+ "name_constraints_excluded": null,
+ "name_constraints_permitted": null,
+ "ocsp_must_staple": null,
+ "ocsp_must_staple_critical": false,
+ "public_key": "-----BEGIN PUBLIC KEY-----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\ny5AQqcDqeLY5bPNXyKQIpRcCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+ "public_key_data": {
+ "exponent": 65537,
+ "modulus": 677129399184966553079067284736089857432513190887003430864651434839147136082141836583611181816236386173365579357474578346939334433364485629484722539239442486527794305176574771532161664922997867950690632723893437051007822926320361186888134225592316959225487581998606396355542829109970569579319867364285885227410414122687790492318998845172347574620390569706045199582185652919500301515566800137913534284463177341440414220381837385605963132905717341872597320505844703066358737066240624594606307404751491140460383601133660980978207030651703375982853025198136496587309151434894055409294092732489758972877066961288847123071189398978312333844487603042664138384120739942860719861801571852739755819029337976929508357848128190231645083597498145870253149908924687953964791607302222672639234983525426534745617682335273414010589300837900366100851448888610737982976960908685544160554448613384889383668044239773826377837206930453640821692261062184809527875874596193396272024442073698853845130249672654691447769361322719126033506148064956718855314716667818236033851660719796418358336465086045342236752015270196417060399206788370332797587888691951032343765232714377256861424129455455686165204270358111592801631394406843073070473835524814093633630807319,
+ "size": 4096
+ },
+ "public_key_fingerprints": {
+ "sha256": "52:27:3b:9d:51:c2:e5:00:5f:91:2f:a0:81:5f:61:8a:72:dc:e7:2d:3e:8e:87:6d:4e:84:91:28:a8:8b:e9:c9"
+ },
+ "public_key_type": "RSA",
+ "signature_valid": true,
+ "subject": {
+ "commonName": "service.kidcluster.kubeinit.local",
+ "countryName": "US",
+ "localityName": "MyCity",
+ "organizationName": "MyCompany",
+ "organizationalUnitName": "MyDepartment",
+ "stateOrProvinceName": "MyState"
+ },
+ "subject_alt_name": [
+ "DNS:service",
+ "DNS:service.kidcluster.kubeinit.local",
+ "DNS:registry.kidcluster.kubeinit.local"
+ ],
+ "subject_alt_name_critical": false,
+ "subject_key_identifier": "cc:f4:cf:e0:18:ad:71:53:1b:d5:46:38:f1:cd:7b:69:f1:18:a9:3f",
+ "subject_ordered": [
+ [
+ "countryName",
+ "US"
+ ],
+ [
+ "stateOrProvinceName",
+ "MyState"
+ ],
+ [
+ "localityName",
+ "MyCity"
+ ],
+ [
+ "organizationName",
+ "MyCompany"
+ ],
+ [
+ "organizationalUnitName",
+ "MyDepartment"
+ ],
+ [
+ "commonName",
+ "service.kidcluster.kubeinit.local"
+ ]
+ ]
+}
|
extendedKeyUsage
|
None
|
filename
|
/var/kubeinit/registry/certs/domain.csr
|
invocation
|
{
"module_args": {
"attributes": null,
"authority_cert_issuer": null,
"authority_cert_serial_number": null,
"authority_key_identifier": null,
"backup": false,
"basic_constraints": [
"CA:TRUE"
],
"basic_constraints_critical": true,
"common_name": "service.kidcluster.kubeinit.local",
"country_name": "US",
"create_subject_key_identifier": true,
"crl_distribution_points": null,
"digest": "sha256",
"email_address": null,
"extended_key_usage": null,
"extended_key_usage_critical": false,
"force": false,
"group": null,
"key_usage": null,
"key_usage_critical": false,
"locality_name": "MyCity",
"mode": null,
"name_constraints_critical": false,
"name_constraints_excluded": null,
"name_constraints_permitted": null,
"ocsp_must_staple": false,
"ocsp_must_staple_critical": false,
"organization_name": "MyCompany",
"organizational_unit_name": "MyDepartment",
"owner": null,
"path": "/var/kubeinit/registry/certs/domain.csr",
"privatekey_content": null,
"privatekey_passphrase": null,
"privatekey_path": "/var/kubeinit/registry/certs/domain.key",
"return_content": false,
"select_crypto_backend": "auto",
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "present",
"state_or_province_name": "MyState",
"subject": null,
"subject_alt_name": [
"DNS:service",
"DNS:service.kidcluster.kubeinit.local",
"DNS:registry.kidcluster.kubeinit.local"
],
"subject_alt_name_critical": false,
"subject_key_identifier": null,
"subject_ordered": null,
"unsafe_writes": false,
"use_common_name_for_san": true,
"version": 1
}
}
|
keyUsage
|
None
|
name_constraints_excluded
|
|
name_constraints_permitted
|
|
ocspMustStaple
|
|
privatekey
|
/var/kubeinit/registry/certs/domain.key
|
subject
|
[
[
"C",
"US"
],
[
"ST",
"MyState"
],
[
"L",
"MyCity"
],
[
"O",
"MyCompany"
],
[
"OU",
"MyDepartment"
],
[
"CN",
"service.kidcluster.kubeinit.local"
]
]
|
subjectAltName
|
[
"DNS:service",
"DNS:service.kidcluster.kubeinit.local",
"DNS:registry.kidcluster.kubeinit.local"
]
|