---
type: resource-type
title: ACMPCACertificate
description: aws resource type AWS::ACMPCA::Certificate
name: ACMPCACertificate
lexicon: aws
resource_type: AWS::ACMPCA::Certificate
---
`AWS::ACMPCA::Certificate`, a resource type of the aws lexicon.

## Properties

- `CertificateAuthorityArn` (`string`, required): The Amazon Resource Name (ARN) for the private CA issues the certificate.
- `CertificateSigningRequest` (`string`, required): The certificate signing request (CSR) for the certificate.
- `SigningAlgorithm` (`string`, required): The name of the algorithm that will be used to sign the certificate to be issued. This parameter should not be confused with the ``SigningAlgorithm`` parameter used to sign a CSR in the ``CreateCertificateAuthority`` action. The specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key.
- `Validity` (`ACMPCACertificate_Validity`, required): The period of time during which the certificate will be valid.
- `ApiPassthrough` (`ACMPCACertificate_ApiPassthrough`, optional): Specifies X.509 certificate information to be included in the issued certificate. An ``APIPassthrough`` or ``APICSRPassthrough`` template variant must be selected, or else this parameter is ignored.
- `Arn` (`string`, optional)
- `Certificate` (`string`, optional)
- `TemplateArn` (`string`, optional): Specifies a custom configuration template to use when issuing a certificate. If this parameter is not provided, PCAshort defaults to the ``EndEntityCertificate/V1`` template. For more information about PCAshort templates, see [Using Templates](https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html).
- `ValidityNotBefore` (`ACMPCACertificate_Validity`, optional): Information describing the start of the validity period of the certificate. This parameter sets the “Not Before" date for the certificate. By default, when issuing a certificate, PCAshort sets the "Not Before" date to the issuance time minus 60 minutes. This compensates for clock inconsistencies across computer systems. The ``ValidityNotBefore`` parameter can be used to customize the “Not Before” value. Unlike the ``Validity`` parameter, the ``ValidityNotBefore`` parameter is optional. The ``ValidityNotBefore`` value is expressed as an explicit date and time, using the ``Validity`` type value ``ABSOLUTE``.

## Attributes

- `Arn`
- `Certificate`