basicConstraints
|
|
changed
|
|
diff
|
--- before
+++ after
@@ -1 +1,85 @@
-{}
+{
+ "authority_cert_issuer": null,
+ "authority_cert_serial_number": null,
+ "authority_key_identifier": null,
+ "basic_constraints": [
+ "CA:TRUE"
+ ],
+ "basic_constraints_critical": true,
+ "can_parse_csr": true,
+ "extended_key_usage": null,
+ "extended_key_usage_critical": false,
+ "extensions_by_oid": {
+ "2.5.29.14": {
+ "critical": false,
+ "value": "BBQ/Cmb3aWGfxdsMszzmOFcrumrZuA=="
+ },
+ "2.5.29.17": {
+ "critical": false,
+ "value": "MFCCB3NlcnZpY2WCIXNlcnZpY2Uua2lkY2x1c3Rlci5rdWJlaW5pdC5sb2NhbIIicmVnaXN0cnkua2lkY2x1c3Rlci5rdWJlaW5pdC5sb2NhbA=="
+ },
+ "2.5.29.19": {
+ "critical": true,
+ "value": "MAMBAf8="
+ }
+ },
+ "key_usage": null,
+ "key_usage_critical": false,
+ "name_constraints_critical": false,
+ "name_constraints_excluded": null,
+ "name_constraints_permitted": null,
+ "ocsp_must_staple": null,
+ "ocsp_must_staple_critical": false,
+ "public_key": "-----BEGIN PUBLIC KEY-----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\nRws6kB14eIPujx0MeuZdjX0CAwEAAQ==\n-----END PUBLIC KEY-----\n",
+ "public_key_data": {
+ "exponent": 65537,
+ "modulus": 744694599035855252614623383095495614152535217648393396040130307140820845041188830173722293927525484732728257865998610227262035070272581571834789731005483721862360363654613055070314032379075079245806988945221622726968207023492014288588273024434231357266951835743847850824793651159092865866105723048507948701983439594930555424583672115766695776683679389118532434662413774110892122319949262188988301355371212579025639134621682206525382355803257923112516207624568277731391432095159415330258246927921587851382801809843163749663930901666098730207709269499682873628767884036741260345137931149511756777370319022290993890759237134724798290200709286037776171241062686820954852962011705558550629817154507078934477860163884209233483956397207718324171462202264246992280355298938960624528482697124816098345227786629505744230946631927929490159529796676349968117552462869010634600519713732993625180077790947990884585271273085434914491309286504775579694507558921203162838558560522278026909310260990914322821032001035507726928384483117297351621792686224448324076895067712835910188933960440799150548238497804351853937962160882269476761469543812990975554143477458903754926547928357752456659849884949351463938138654386300951394021590710080555627289873789,
+ "size": 4096
+ },
+ "public_key_fingerprints": {
+ "sha256": "70:22:1e:98:4a:a5:76:c3:d0:ac:5f:30:07:22:3d:95:0a:a1:2f:e1:b5:43:18:1c:4c:4b:23:fb:80:6d:3d:fa"
+ },
+ "public_key_type": "RSA",
+ "signature_valid": true,
+ "subject": {
+ "commonName": "service.kidcluster.kubeinit.local",
+ "countryName": "US",
+ "localityName": "MyCity",
+ "organizationName": "MyCompany",
+ "organizationalUnitName": "MyDepartment",
+ "stateOrProvinceName": "MyState"
+ },
+ "subject_alt_name": [
+ "DNS:service",
+ "DNS:service.kidcluster.kubeinit.local",
+ "DNS:registry.kidcluster.kubeinit.local"
+ ],
+ "subject_alt_name_critical": false,
+ "subject_key_identifier": "3f:0a:66:f7:69:61:9f:c5:db:0c:b3:3c:e6:38:57:2b:ba:6a:d9:b8",
+ "subject_ordered": [
+ [
+ "countryName",
+ "US"
+ ],
+ [
+ "stateOrProvinceName",
+ "MyState"
+ ],
+ [
+ "localityName",
+ "MyCity"
+ ],
+ [
+ "organizationName",
+ "MyCompany"
+ ],
+ [
+ "organizationalUnitName",
+ "MyDepartment"
+ ],
+ [
+ "commonName",
+ "service.kidcluster.kubeinit.local"
+ ]
+ ]
+}
|
extendedKeyUsage
|
None
|
filename
|
/var/kubeinit/registry/certs/domain.csr
|
invocation
|
{
"module_args": {
"attributes": null,
"authority_cert_issuer": null,
"authority_cert_serial_number": null,
"authority_key_identifier": null,
"backup": false,
"basic_constraints": [
"CA:TRUE"
],
"basic_constraints_critical": true,
"common_name": "service.kidcluster.kubeinit.local",
"country_name": "US",
"create_subject_key_identifier": true,
"crl_distribution_points": null,
"digest": "sha256",
"email_address": null,
"extended_key_usage": null,
"extended_key_usage_critical": false,
"force": false,
"group": null,
"key_usage": null,
"key_usage_critical": false,
"locality_name": "MyCity",
"mode": null,
"name_constraints_critical": false,
"name_constraints_excluded": null,
"name_constraints_permitted": null,
"ocsp_must_staple": false,
"ocsp_must_staple_critical": false,
"organization_name": "MyCompany",
"organizational_unit_name": "MyDepartment",
"owner": null,
"path": "/var/kubeinit/registry/certs/domain.csr",
"privatekey_content": null,
"privatekey_passphrase": null,
"privatekey_path": "/var/kubeinit/registry/certs/domain.key",
"return_content": false,
"select_crypto_backend": "auto",
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "present",
"state_or_province_name": "MyState",
"subject": null,
"subject_alt_name": [
"DNS:service",
"DNS:service.kidcluster.kubeinit.local",
"DNS:registry.kidcluster.kubeinit.local"
],
"subject_alt_name_critical": false,
"subject_key_identifier": null,
"subject_ordered": null,
"unsafe_writes": false,
"use_common_name_for_san": true,
"version": 1
}
}
|
keyUsage
|
None
|
name_constraints_excluded
|
|
name_constraints_permitted
|
|
ocspMustStaple
|
|
privatekey
|
/var/kubeinit/registry/certs/domain.key
|
subject
|
[
[
"C",
"US"
],
[
"ST",
"MyState"
],
[
"L",
"MyCity"
],
[
"O",
"MyCompany"
],
[
"OU",
"MyDepartment"
],
[
"CN",
"service.kidcluster.kubeinit.local"
]
]
|
subjectAltName
|
[
"DNS:service",
"DNS:service.kidcluster.kubeinit.local",
"DNS:registry.kidcluster.kubeinit.local"
]
|