---
updatedAt: 2026-06-26T19:18:58.000Z
agentTools:
  siteIndex: https://techdocs.akamai.com/llms.txt
  projectIndex: https://techdocs.akamai.com/terraform/llms.txt
---

# CA set

akamai_mtlstruststore_ca_set

Get details of a CA set with its version.

```json Query
data "akamai_mtlstruststore_ca_set" "my-ca-set" {
  id = "12345"
}

output "my-ca-set" {
  value = data.akamai_mtlstruststore_ca_set.my-ca-set
}
```
```json Standard output
my-ca-set = {
  account_id            = "A-CCT1234"
  allow_insecure_sha1   = true
  certificates          = [
    {
      certificate_pem     = <<-EOT
            -----BEGIN CERTIFICATE-----
            MIID <sample - removed for readability> .... Mweq
            -----END CERTIFICATE-----
        EOT
      created_by          = "jsmith"
      created_date        = "2023-11-01T18:55:37.140673Z"
      description         = "Testing a CA set"
      end_date            = "2028-12-06T15:08:21Z"
      fingerprint         = "abc12345def6ghi78jklm9no012pqr456stu6vwx7yz89ab012cd34efghijklm56n"
      issuer              = "CN=AkamaiCorpRoot-G1, O=Akamai Technologies Inc."
      serial_number       = "ab12c345def6gh7i8jklm9no012pqr4"
      signature_algorithm = "SHA256WITHRSA"
      start_date          = "2008-12-11T15:08:21Z"
      subject             = "CN=AkamaiCorpRoot-G1, O=Akamai Technologies Inc."
    },
  ]
  created_by            = "jsmith"
  created_date          = "2025-07-08T10:55:10.622323Z"
  deleted_by            = null
  deleted_date          = null
  description           = null
  id                    = "12345"
  name                  = "my-ca-set"
  production_version    = 1
  removal_date          = null
  staging_version       = 1
  status                = "NOT_DELETED"
  version               = 2
  version_created_by    = "jsmith"
  version_created_date  = "2025-07-08T11:00:30.220991Z"
  version_description   = "This CA set version is cloned from version 1."
  version_modified_by   = null
  version_modified_date = null
  version_removal_date  = null
  version_status        = "NOT_DELETED"
}
```

## Arguments

Pass a CA set's ID or name in the `data` block to get the CA set's details.

| Argument  | Required | Description                                                                                                                                                             |
| --------- | :------: | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `id`      |          | Your CA set's ID.                                                                                                                                                       |
| `name`    |          | Your CA set's name. It must match exactly. If there are multiple CA sets with the same name, you get an error. In this case, use the `id` argument to fetch the CA set. |
| `version` |          | The CA set's version number. If not provided, the latest version is returned by default. If the CA set doesn't have any versions, then no version details are returned. |

## Attributes

Returned to you are the details of a CA set with its version.

<table>
    <thead>
        <tr>
            <th>Attribute</th>
            <th>Description</th>
        </tr>
    </thead>
    <tbody>
        <tr>
            <td><code>account_id</code></td>
            <td>The account's ID that the CA set belongs to.</td>
        </tr>
        <tr>
            <td><code>id</code></td>
            <td>The CA set's ID.</td>
        </tr>
        <tr>
            <td><code>name</code></td>
            <td>The CA set's name.</td>
        </tr>
        <tr>
            <td><code>allow_insecure_sha1</code></td>
            <td>When set to <code>true</code>, it allows certificates with a SHA-1 signature. When set to <code>false</code>, it allows the version's certificates only with a signature algorithm of SHA-256 or better.</td>
        </tr>
        <tr>
            <td><code>description</code></td>
            <td>Any additional comments added to the CA set when creating it.</td>
        </tr>
        <tr>
            <td><code>created_by</code></td>
            <td>The user who created the CA set.</td>
        </tr>
        <tr>
            <td><code>created_date</code></td>
            <td>The timestamp indicating when the CA set was created.</td>
        </tr>
        <tr>
            <td><code>deleted_by</code></td>
            <td>The user who deleted the CA set.</td>
        </tr>
        <tr>
            <td><code>deleted_date</code></td>
            <td>The timestamp indicating when the CA set was deleted.</td>
        </tr>
        <tr>
            <td><code>version</code></td>
            <td>The CA set's version number.</td>
        </tr>
        <tr>
            <td><code>version_created_by</code></td>
            <td>The user who created the CA set version.</td>
        </tr>
        <tr>
            <td><code>version_created_date</code></td>
            <td>The timestamp indicating when the CA set version was created.</td>
        </tr>
        <tr>
            <td><code>version_modified_by</code></td>
            <td>The user who modified the CA set version.</td>
        </tr>
        <tr>
            <td><code>version_modified_date</code></td>
            <td>The timestamp indicating when the CA set version was modified.</td>
        </tr>
        <tr>
            <td><code>version_description</code></td>
            <td>Any additional comments added to the CA set version when creating or updating it.</td>
        </tr>
        <tr>
            <td><code>staging_version</code></td>
            <td>The version number of the CA set that is active on the staging network.</td>
        </tr>
        <tr>
            <td><code>production_version</code></td>
            <td>The version number of the CA set that is active on the production network.</td>
        </tr>
        <tr>
            <td><code>certificates</code></td>
            <td>Certificates that are valid, non-expired, root, or intermediate. Each certificate record includes:
                <ul>
                    <li><code>certificate_pem</code>. The certificate in PEM format, as found in a Base64 ASCII encoded file.</li>
                    <li><code>description</code>. A human-readable description of the certificate.</li>
                    <li><code>created_by</code>. The user who created the certificate.</li>
                    <li><code>created_date</code>. The timestamp indicating when the certificate was created.</li>
                    <li><code>start_date</code>. The timestamp indicating when the certificate started.</li>
                    <li><code>end_date</code>. The timestamp indicating when the certificate expires.</li>
                    <li><code>fingerprint</code>. The fingerprint of the certificate.</li>
                    <li><code>issuer</code>. The certificate's issuer.</li>
                    <li><code>serial_number</code>. The unique serial number of the certificate.</li>
                    <li><code>signature_algorithm</code>. The signature algorithm of the certificate.</li>
                    <li><code>subject</code>. The certificate's subject field.</li>
                </ul>
            </td>
        </tr>
        <tr>
          <td><code>removal_date</code></td>
          <td>The permanent deletion date for the CA set. The value is <code>null</code> for a set not scheduled for deletion.</td>
        </tr>
        <tr>
          <td><code>version_removal_date</code></td>
          <td>The permanent deletion date for the CA set version. The value is <code>null</code> for a version not scheduled for deletion.</td>
        </tr>
        <tr>
          <td><code>status</code></td>
          <td>The CA set's status, either <code>NOT_DELETED</code>, <code>DELETING</code>, or <code>DELETED</code>.</td>
        </tr>
        <tr>
          <td><code>version_status</code></td>
          <td>The CA set version's status, either <code>NOT_DELETED</code> or <code>DELETED</code>.</td>
        </tr>
    </tbody>
</table>

# Sibling pages

* [CA sets](https://techdocs.akamai.com/terraform/docs/mets-ds-ca-sets.md)
* [CA set activation](https://techdocs.akamai.com/terraform/docs/mets-ds-ca-set-activation.md)
* [CA set activations](https://techdocs.akamai.com/terraform/docs/mets-ds-ca-set-activations.md)
* [CA set activities](https://techdocs.akamai.com/terraform/docs/mets-ds-ca-set-activities.md)
* [CA set associations](https://techdocs.akamai.com/terraform/docs/mets-ds-ca-set-associations.md)
* [CA set certificates](https://techdocs.akamai.com/terraform/docs/mets-ds-ca-set-certificates.md)
* [CA set versions](https://techdocs.akamai.com/terraform/docs/mets-ds-ca-set-versions.md)