CA set

Get details of a CA set with its version.

data "akamai_mtlstruststore_ca_set" "my-ca-set" {
  id = "12345"
}

output "my-ca-set" {
  value = data.akamai_mtlstruststore_ca_set.my-ca-set
}
my-ca-set = {
  account_id            = "A-CCT1234"
  allow_insecure_sha1   = true
  certificates          = [
    {
      certificate_pem     = <<-EOT
            -----BEGIN CERTIFICATE-----
            MIID <sample - removed for readability> .... Mweq
            -----END CERTIFICATE-----
        EOT
      created_by          = "jsmith"
      created_date        = "2023-11-01T18:55:37.140673Z"
      description         = "Testing a CA set"
      end_date            = "2028-12-06T15:08:21Z"
      fingerprint         = "abc12345def6ghi78jklm9no012pqr456stu6vwx7yz89ab012cd34efghijklm56n"
      issuer              = "CN=AkamaiCorpRoot-G1, O=Akamai Technologies Inc."
      serial_number       = "ab12c345def6gh7i8jklm9no012pqr4"
      signature_algorithm = "SHA256WITHRSA"
      start_date          = "2008-12-11T15:08:21Z"
      subject             = "CN=AkamaiCorpRoot-G1, O=Akamai Technologies Inc."
    },
  ]
  created_by            = "jsmith"
  created_date          = "2025-07-08T10:55:10.622323Z"
  deleted_by            = null
  deleted_date          = null
  description           = null
  id                    = "12345"
  name                  = "my-ca-set"
  production_version    = 1
  removal_date          = null
  staging_version       = 1
  status                = "NOT_DELETED"
  version               = 2
  version_created_by    = "jsmith"
  version_created_date  = "2025-07-08T11:00:30.220991Z"
  version_description   = "This CA set version is cloned from version 1."
  version_modified_by   = null
  version_modified_date = null
  version_removal_date  = null
  version_status        = "NOT_DELETED"
}

Arguments

Pass a CA set's ID or name in the data block to get the CA set's details.

ArgumentRequiredDescription
idYour CA set's ID.
nameYour CA set's name. It must match exactly. If there are multiple CA sets with the same name, you get an error. In this case, use the id argument to fetch the CA set.
versionThe CA set's version number. If not provided, the latest version is returned by default. If the CA set doesn't have any versions, then no version details are returned.

Attributes

Returned to you are the details of a CA set with its version.

AttributeDescription
account_idThe account's ID that the CA set belongs to.
idThe CA set's ID.
nameThe CA set's name.
allow_insecure_sha1When set to true, it allows certificates with a SHA-1 signature. When set to false, it allows the version's certificates only with a signature algorithm of SHA-256 or better.
descriptionAny additional comments added to the CA set when creating it.
created_byThe user who created the CA set.
created_dateThe timestamp indicating when the CA set was created.
deleted_byThe user who deleted the CA set.
deleted_dateThe timestamp indicating when the CA set was deleted.
versionThe CA set's version number.
version_created_byThe user who created the CA set version.
version_created_dateThe timestamp indicating when the CA set version was created.
version_modified_byThe user who modified the CA set version.
version_modified_dateThe timestamp indicating when the CA set version was modified.
version_descriptionAny additional comments added to the CA set version when creating or updating it.
staging_versionThe version number of the CA set that is active on the staging network.
production_versionThe version number of the CA set that is active on the production network.
certificatesCertificates that are valid, non-expired, root, or intermediate. Each certificate record includes:

  • certificate_pem. The certificate in PEM format, as found in a Base64 ASCII encoded file.

  • description. A human-readable description of the certificate.

  • created_by. The user who created the certificate.

  • created_date. The timestamp indicating when the certificate was created.

  • start_date. The timestamp indicating when the certificate started.

  • end_date. The timestamp indicating when the certificate expires.

  • fingerprint. The fingerprint of the certificate.

  • issuer. The certificate's issuer.

  • serial_number. The unique serial number of the certificate.

  • signature_algorithm. The signature algorithm of the certificate.

  • subject. The certificate's subject field.
removal_dateThe permanent deletion date for the CA set. The value is null for a set not scheduled for deletion.
version_removal_dateThe permanent deletion date for the CA set version. The value is null for a version not scheduled for deletion.
statusThe CA set's status, either NOT_DELETED, DELETING, or DELETED.
version_statusThe CA set version's status, either NOT_DELETED or DELETED.