Sign in

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1432172211.2 KB

Gets the public key certificate of the asymmetric key pair that exists within Amazon Web Services Payment Cryptography.

Unlike the private key of an asymmetric key, which never leaves Amazon Web Services Payment Cryptography unencrypted, callers with GetPublicKeyCertificate permission can download the public key certificate of the asymmetric key. You can share the public key certificate to allow others to encrypt messages and verify signatures outside of Amazon Web Services Payment Cryptography

Cross-account use: This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see Resource-based policies.

post/#X-Amz-Target=PaymentCryptographyControlPlane.GetPublicKeyCertificate

Headers

X-Amz-Target'PaymentCryptographyControlPlane.GetPublicKeyCertificate' required

Request body

KeyIdentifierstring required

The <code>KeyARN</code> of the asymmetric key pair.

Response

Success

KeyCertificatestring required

The public key component of the asymmetric key pair in a certificate PEM format (base64 encoded). It is signed by the root certificate authority (CA). The certificate is valid for 90 days from the time it is issued. The service returns a cached certificate if one exists with at least 30 days of remaining validity. Otherwise, a new 90-day certificate is issued.

KeyCertificateChainstring required

The root certificate authority (CA) that signed the public key certificate in PEM format (base64 encoded) of the asymmetric key pair.