class Aws::Lightsail::Types::LoadBalancerTlsCertificate

Describes a load balancer SSL/TLS certificate.

TLS is just an updated, more secure version of Secure Socket Layer (SSL).

@!attribute [rw] name

The name of the SSL/TLS certificate (e.g., `my-certificate`).
@return [String]

@!attribute [rw] arn

The Amazon Resource Name (ARN) of the SSL/TLS certificate.
@return [String]

@!attribute [rw] support_code

The support code. Include this code in your email to support when
you have questions about your Lightsail load balancer or SSL/TLS
certificate. This code enables our support team to look up your
Lightsail information more easily.
@return [String]

@!attribute [rw] created_at

The time when you created your SSL/TLS certificate.
@return [Time]

@!attribute [rw] location

The AWS Region and Availability Zone where you created your
certificate.
@return [Types::ResourceLocation]

@!attribute [rw] resource_type

The resource type (e.g., `LoadBalancerTlsCertificate`).

* <b> <code>Instance</code> </b> - A Lightsail instance (a virtual
  private server)

* <b> <code>StaticIp</code> </b> - A static IP address

* <b> <code>KeyPair</code> </b> - The key pair used to connect to a
  Lightsail instance

* <b> <code>InstanceSnapshot</code> </b> - A Lightsail instance
  snapshot

* <b> <code>Domain</code> </b> - A DNS zone

* <b> <code>PeeredVpc</code> </b> - A peered VPC

* <b> <code>LoadBalancer</code> </b> - A Lightsail load balancer

* <b> <code>LoadBalancerTlsCertificate</code> </b> - An SSL/TLS
  certificate associated with a Lightsail load balancer

* <b> <code>Disk</code> </b> - A Lightsail block storage disk

* <b> <code>DiskSnapshot</code> </b> - A block storage disk snapshot
@return [String]

@!attribute [rw] tags

The tag keys and optional values for the resource. For more
information about tags in Lightsail, see the [Amazon Lightsail
Developer Guide][1].

[1]: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-tags
@return [Array<Types::Tag>]

@!attribute [rw] load_balancer_name

The load balancer name where your SSL/TLS certificate is attached.
@return [String]

@!attribute [rw] is_attached

When `true`, the SSL/TLS certificate is attached to the Lightsail
load balancer.
@return [Boolean]

@!attribute [rw] status

The validation status of the SSL/TLS certificate. Valid values are
below.
@return [String]

@!attribute [rw] domain_name

The domain name for your SSL/TLS certificate.
@return [String]

@!attribute [rw] domain_validation_records

An array of LoadBalancerTlsCertificateDomainValidationRecord objects
describing the records.
@return [Array<Types::LoadBalancerTlsCertificateDomainValidationRecord>]

@!attribute [rw] failure_reason

The validation failure reason, if any, of the certificate.

The following failure reasons are possible:

* <b> <code>NO_AVAILABLE_CONTACTS</code> </b> - This failure applies
  to email validation, which is not available for Lightsail
  certificates.

* <b> <code>ADDITIONAL_VERIFICATION_REQUIRED</code> </b> - Lightsail
  requires additional information to process this certificate
  request. This can happen as a fraud-protection measure, such as
  when the domain ranks within the Alexa top 1000 websites. To
  provide the required information, use the [AWS Support Center][1]
  to contact AWS Support.

  <note markdown="1"> You cannot request a certificate for Amazon-owned domain names
  such as those ending in amazonaws.com, cloudfront.net, or
  elasticbeanstalk.com.

   </note>

* <b> <code>DOMAIN_NOT_ALLOWED</code> </b> - One or more of the
  domain names in the certificate request was reported as an unsafe
  domain by [VirusTotal][2]. To correct the problem, search for your
  domain name on the [VirusTotal][2] website. If your domain is
  reported as suspicious, see [Google Help for Hacked Websites][3]
  to learn what you can do.

  If you believe that the result is a false positive, notify the
  organization that is reporting the domain. VirusTotal is an
  aggregate of several antivirus and URL scanners and cannot remove
  your domain from a block list itself. After you correct the
  problem and the VirusTotal registry has been updated, request a
  new certificate.

  If you see this error and your domain is not included in the
  VirusTotal list, visit the [AWS Support Center][1] and create a
  case.

* <b> <code>INVALID_PUBLIC_DOMAIN</code> </b> - One or more of the
  domain names in the certificate request is not valid. Typically,
  this is because a domain name in the request is not a valid
  top-level domain. Try to request a certificate again, correcting
  any spelling errors or typos that were in the failed request, and
  ensure that all domain names in the request are for valid
  top-level domains. For example, you cannot request a certificate
  for `example.invalidpublicdomain` because `invalidpublicdomain` is
  not a valid top-level domain.

* <b> <code>OTHER</code> </b> - Typically, this failure occurs when
  there is a typographical error in one or more of the domain names
  in the certificate request. Try to request a certificate again,
  correcting any spelling errors or typos that were in the failed
  request.

[1]: https://console.aws.amazon.com/support/home
[2]: https://www.virustotal.com/gui/home/url
[3]: https://developers.google.com/web/fundamentals/security/hacked
@return [String]

@!attribute [rw] issued_at

The time when the SSL/TLS certificate was issued.
@return [Time]

@!attribute [rw] issuer

The issuer of the certificate.
@return [String]

@!attribute [rw] key_algorithm

The algorithm used to generate the key pair (the public and private
key).
@return [String]

@!attribute [rw] not_after

The timestamp when the SSL/TLS certificate expires.
@return [Time]

@!attribute [rw] not_before

The timestamp when the SSL/TLS certificate is first valid.
@return [Time]

@!attribute [rw] renewal_summary

An object that describes the status of the certificate renewal
managed by Lightsail.
@return [Types::LoadBalancerTlsCertificateRenewalSummary]

@!attribute [rw] revocation_reason

The reason the certificate was revoked. This value is present only
when the certificate status is `REVOKED`.
@return [String]

@!attribute [rw] revoked_at

The timestamp when the certificate was revoked. This value is
present only when the certificate status is `REVOKED`.
@return [Time]

@!attribute [rw] serial

The serial number of the certificate.
@return [String]

@!attribute [rw] signature_algorithm

The algorithm that was used to sign the certificate.
@return [String]

@!attribute [rw] subject

The name of the entity that is associated with the public key
contained in the certificate.
@return [String]

@!attribute [rw] subject_alternative_names

An array of strings that specify the alternate domains (e.g.,
`example2.com`) and subdomains (e.g., `blog.example.com`) for the
certificate.
@return [Array<String>]

@see docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/LoadBalancerTlsCertificate AWS API Documentation

Constants

SENSITIVE