CA set

📘

Beta

Hello. Just a note to let you know the underlying API on which this data source is built is general release and has been vetted, but because this is a new feature for our Terraform provider, we've given it beta label.

This status just means we've paused for a bit to get your feedback to make sure this data source works like you need and expect.

Get details of a CA set with its version.

data "akamai_mtlstruststore_ca_set" "my-ca-set" {
  id = "12345"
}

output "my-ca-set" {
  value = data.akamai_mtlstruststore_ca_set.my-ca-set
}
my-ca-set = {
  account_id            = "A-CCT1234"
  allow_insecure_sha1   = true
  certificates          = [
    {
      certificate_pem     = <<-EOT
            -----BEGIN CERTIFICATE-----
            MIID <sample - removed for readability> .... Mweq
            -----END CERTIFICATE-----
        EOT
      created_by          = "jsmith"
      created_date        = "2023-11-01T18:55:37.140673Z"
      description         = "Testing a CA set"
      end_date            = "2028-12-06T15:08:21Z"
      fingerprint         = "abc12345def6ghi78jklm9no012pqr456stu6vwx7yz89ab012cd34efghijklm56n"
      issuer              = "CN=AkamaiCorpRoot-G1, O=Akamai Technologies Inc."
      serial_number       = "ab12c345def6gh7i8jklm9no012pqr4"
      signature_algorithm = "SHA256WITHRSA"
      start_date          = "2008-12-11T15:08:21Z"
      subject             = "CN=AkamaiCorpRoot-G1, O=Akamai Technologies Inc."
    },
  ]
  created_by            = "jsmith"
  created_date          = "2025-07-08T10:55:10.622323Z"
  deleted_by            = null
  deleted_date          = null
  description           = null
  id                    = "12345"
  name                  = "my-ca-set"
  production_version    = 1
  staging_version       = 1
  version               = 2
  version_created_by    = "jsmith"
  version_created_date  = "2025-07-08T11:00:30.220991Z"
  version_description   = "This CA set version is cloned from version 1."
  version_modified_by   = null
  version_modified_date = null
}

Arguments

Pass a CA set's ID or name in the data block to get the CA set's details.

ArgumentRequiredDescription
idYour CA set's ID.
nameYour CA set's name. It must match exactly. If there are multiple CA sets with the same name, you get an error. In this case, use the id argument to fetch the CA set.
versionThe CA set's version number. If not provided, the latest version is returned by default. If the CA set doesn't have any versions, then no version details are returned.

Attributes

Returned to you are the details of a CA set with its version.

AttributeDescription
account_idThe account's ID that the CA set belongs to.
idThe CA set's ID.
nameThe CA set's name.
allow_insecure_sha1When set to true, it allows certificates with a SHA-1 signature. When set to false, it allows the version's certificates only with a signature algorithm of SHA-256 or better.
descriptionAny additional comments added to the CA set when creating it.
created_byThe user who created the CA set.
created_dateThe timestamp indicating when the CA set was created.
deleted_byThe user who deleted the CA set.
deleted_dateThe timestamp indicating when the CA set was deleted.
versionThe CA set's version number.
version_created_byThe user who created the CA set version.
version_created_dateThe timestamp indicating when the CA set version was created.
version_modified_byThe user who modified the CA set version.
version_modified_dateThe timestamp indicating when the CA set version was modified.
version_descriptionAny additional comments added to the CA set version when creating or updating it.
staging_versionThe version number of the CA set that is active on the staging network.
production_versionThe version number of the CA set that is active on the production network.
certificatesCertificates that are valid, non-expired, root, or intermediate. Each certificate record includes:

  • certificate_pem. The certificate in PEM format, as found in a Base64 ASCII encoded file.

  • description. A human-readable description of the certificate.

  • created_by. The user who created the certificate.

  • created_date. The timestamp indicating when the certificate was created.

  • start_date. The timestamp indicating when the certificate started.

  • end_date. The timestamp indicating when the certificate expires.

  • fingerprint. The fingerprint of the certificate.

  • issuer. The certificate's issuer.

  • serial_number. The unique serial number of the certificate.

  • signature_algorithm. The signature algorithm of the certificate.

  • subject. The certificate's subject field.