{"type":"api","title":"Get Internal CA","meta":{"id":"/apps/pubhub/media/cdo-api-documentation/ee9bdf946673e45c4f256a22e0a754e29a9b2098/54f4ba30-7fe2-3433-bbd5-a4d458aee37e","info":{"title":"Cisco Cloud-delivered Firewall Management Center (cdFMC) API","version":"1.15.0","description":"Use the documentation to explore the endpoints the cdFMC has to offer","contact":{"name":"Cisco Firepower TAC","email":"ngfw-support@cisco.com"}},"tags":[{"name":"Analysis"},{"name":"Audit"},{"name":"Backup"},{"name":"Change Management"},{"name":"Chassis"},{"name":"Deployment"},{"name":"Device Clusters"},{"name":"Device Groups"},{"name":"Device HA Pairs"},{"name":"Devices"},{"name":"Health"},{"name":"Integration"},{"name":"Intelligence"},{"name":"License"},{"name":"Network Map"},{"name":"Object"},{"name":"Policy"},{"name":"Policy Assignments"},{"name":"Search"},{"name":"Status"},{"name":"System Configuration"},{"name":"System Information"},{"name":"Templates"},{"name":"Troubleshoot"},{"name":"Updates"},{"name":"Users"}],"openapi":"3.0.1","servers":[{"url":"https://api.us.security.cisco.com/firewall","description":"US"},{"url":"https://api.eu.security.cisco.com/firewall","description":"EU"},{"url":"https://api.apj.security.cisco.com/firewall","description":"APJ"},{"url":"https://api.au.security.cisco.com/firewall","description":"AUS"},{"url":"https://api.in.security.cisco.com/firewall","description":"IN"},{"url":"https://api.int.security.cisco.com/firewall","description":"Staging"},{"url":"https://scale.manage.security.cisco.com/api/rest","description":"Scale"},{"url":"https://ci.manage.security.cisco.com/api/rest","description":"CI"},{"url":"https://manage.stg.secure.cisco/api/rest","description":"Stgf9"}],"securitySchemes":{"bearerAuth":{"bearerFormat":"JWT","scheme":"bearer","type":"http"}}},"spec":{"deprecated":false,"description":"**Get the internal certificate authority associated with the specified ID.**","operationId":"getInternalCA","parameters":[{"description":"Unique identifier of the internal certificate authority.","in":"path","name":"objectId","required":true,"schema":{"type":"string"}},{"description":"UUID of the ticket for tracking the configuration changes.","in":"header","name":"ticket-id","required":false,"schema":{"type":"string"}},{"name":"domainUUID","description":"Domain UUID","in":"path","required":true,"schema":{"type":"string"},"$$ref":"#/components/parameters/domainUUID"}],"responses":{"200":{"content":{"application/json":{"examples":{"Example 1 : GET /fmc_config/v1/domain/domainUUID/object/internalcas/89bf0f10-9c12-11ec-b407-2bbe55c5f4d0 ( Get InternalCA by id )":{"value":{"cert":"-----BEGIN CERTIFICATE-----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\nQuxGuU1bpUIdznOp0do9NUuQ\n-----END CERTIFICATE-----","certFingerprint":"1D:9B:A6:DE:B2:58:D5:28:9F:E0:31:F6:E2:C2:33:97:65:C3:60:EF","csr":"-----BEGIN CERTIFICATE REQUEST-----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\neIbBiy/YQ2BUumAESZbynNCdM9fXtxm5pxRMQ3eeloTRSjP6WOu4\n-----END CERTIFICATE REQUEST-----\n","id":"89bf0f10-9c12-11ec-b407-2bbe55c5f4d0","issuerCommonName":"internal1024.internal1024","issuerOrganization":"Sourcefire","issuerOrganizationUnit":"Development","links":{"self":"https://172.29.182.90:10215/api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f/object/internalcas/89bf0f10-9c12-11ec-b407-2bbe55c5f4d0"},"name":"csr_test1_modified_again","passPhrase":"********","privateKey":"********","publicKeyFingerprint":"dc66f0b774901337adcda2cd9a94fa45eac463d2","serialNumber":"1 (0x1)","subjectCommonName":"internalCA.csr1","subjectCountry":"US","subjectLocality":"Milpitas","subjectOrganization":"Cisco","subjectOrganizationUnit":"SBG","subjectState":"California","type":"InternalCA","validityEndDate":"2023-03-04T23:28:33Z","validityStartDate":"2022-03-04T23:28:33Z"}}},"schema":{"type":"object","description":"Represents the CA public key certificate of a CA the user's organization controls. Internal CA objects can be used in encryption policy rules to decrypt outgoing encrypted traffic by re-signing the server certificate with the internal CA.","properties":{"cert":{"description":"PEM, DER, or PKCS#7 formatted certificate contents.","type":"string"},"certFingerprint":{"description":"Unique sequence used to identify the certificate.","type":"string"},"csr":{"description":"PEM-formatted Certificate Signing Request contents which can be sent to CA for signing a certificate.","type":"string"},"description":{"type":"string"},"id":{"description":"Unique identifier representing resource.","type":"string"},"issuerCommonName":{"description":"Common name of the issuer that signed and issued the certificate.","type":"string"},"issuerOrganization":{"description":"Organization, company name, of the issuer that signed and issued the certificate.","type":"string"},"issuerOrganizationUnit":{"description":"Organization Unit, division or unit, of the issuer that signed and issued the certificate.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"metadata":{"type":"object","description":"Defines read only details about the object - whether it is system defined, last user who modified the object etc.","properties":{"domain":{"description":"Defines the domains this instance belongs to (if applicable).","type":"object","properties":{"id":{"description":"Unique UUID of this domain","type":"string"},"links":{"description":"Links to the domain resource URLs.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"Name of the domain.","type":"string"},"type":{"description":"Domain type definition (fixed).","type":"string"},"uuid":{"type":"string"}},"$$ref":"#/components/schemas/Domain"},"isLocked":{"type":"boolean"},"lastUser":{"description":"The last user who modified this instance.","type":"object","properties":{"id":{"description":"The unique UUID of the user","type":"string"},"links":{"description":"Contains the self referencing links to this resource","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"Name of the user.","type":"string"},"type":{"description":"The user type (fixed).","type":"string"}},"$$ref":"#/components/schemas/MetadataUser"},"matches":{"items":{"type":"string"},"type":"array"},"readOnly":{"description":"Details regarding the read only status of this instance","type":"object","properties":{"reason":{"description":"Reason the resource is read only - SYSTEM (if it is system defined), RBAC (if user RBAC permissions make it read only) or DOMAIN (if resource is read only in current domain).","enum":["RBAC","SYSTEM","DOMAIN"],"type":"string"},"state":{"description":"True if this resource us read only and false otherwise.","type":"boolean"}},"$$ref":"#/components/schemas/ReadOnly"},"timestamp":{"description":"The last updated timestamp.","format":"int32","type":"integer"}},"$$ref":"#/components/schemas/Metadata"},"name":{"description":"User chosen resource name.","type":"string"},"passPhrase":{"description":"Passphrase used for encrypted private key.","type":"string"},"privateKey":{"description":"PEM, DER, or PKCS#7 formatted key contents.","type":"string"},"publicKeyFingerprint":{"description":"SHA1 hash sequence used to identify the public key.","type":"string"},"serialNumber":{"description":"Unique number assigned by CA to the certificate on generation. The issuer name and serial number identify a unique certificate.","type":"string"},"subjectCommonName":{"description":"Common name of the subject being certified in the given certificate.","type":"string"},"subjectCountry":{"description":"An ISO3166 two character country code of the subject being certified in the given certificate.","type":"string"},"subjectLocality":{"description":"An Unicode alphanumeric string containing the locality, city name, of the subject being certified in the given certificate.","type":"string"},"subjectOrganization":{"description":"Organization, company name, of the subject being certified in the given certificate.","type":"string"},"subjectOrganizationUnit":{"description":"The Organization Unit, division or unit, of the subject being certified in the given certificate.","type":"string"},"subjectState":{"description":"An Unicode alphanumeric string containing the state or the province of the subject being certified in the given certificate.","type":"string"},"type":{"description":"Type of the response object. This value is always 'InternalCA'.","type":"string"},"validityEndDate":{"description":"Certificate validity end date in ISO 8601 format. Defaulted to validity duration of 3650 days at the time of generation of self-signed certificate.","type":"string"},"validityStartDate":{"description":"Certificate validity start date in ISO 8601 format. Defaulted to current date and time in GMT zone at the self-sign certificate generation.","type":"string"}},"$$ref":"#/components/schemas/InternalCA"}}},"description":"OK"},"default":{"content":{"application/json":{"schema":{"type":"object","properties":{"category":{"description":"Describes the category of the error thrown.","enum":["FRAMEWORK","OTHER","VALIDATION"],"type":"string"},"messages":{"description":"List of error messages which the response has.","items":{"type":"object","properties":{"bulkPayloadIndex":{"description":"More details about the error.","type":"string"},"code":{"description":"More details about the error.","type":"string"},"description":{"description":"More details about the error.","type":"string"},"details":{"description":"More details about the error.","type":"string"},"errorCode":{"description":"More details about the error.","type":"string"},"location":{"description":"More details about the error.","type":"string"},"severity":{"description":"Specifies the Highest level severity among all the error messages.","enum":["ERROR","WARN"],"type":"string"}},"$$ref":"#/components/schemas/ErrorMessagesContainer"},"type":"array"},"severity":{"description":"Specifies the Highest level severity among all the error messages.","enum":["ERROR","WARN"],"type":"string"}},"$$ref":"#/components/schemas/ErrorResponse"}}},"description":"Error"}},"tags":["Object"],"__originalOperationId":"getInternalCA","method":"get","path":"/v1/cdfmc/api/fmc_config/v1/domain/{domainUUID}/object/internalcas/{objectId}"}}