Order.spec

CommonName is the common name as specified on the DER encoded CSR. If specified, this value must also be present in `dnsNames` or `ipAddresses`. This field must match the corresponding field on the DER encoded CSR.

DNSNames is a list of DNS names that should be included as part of the Order validation process. This field must match the corresponding field on the DER encoded CSR.

• x-kubernetes-list-type: "atomic"

Duration is the duration for the not after date for the requested certificate. This is set on order creation as per the ACME spec.

IPAddresses is a list of IP addresses that should be included as part of the Order validation process. This field must match the corresponding field on the DER encoded CSR.

• x-kubernetes-list-type: "atomic"

IssuerRef references a properly configured ACME-type Issuer which should be used to create this Order. If the Issuer does not exist, processing will be retried. If the Issuer is not an 'ACME' Issuer, an error will be returned and the Order will be marked as failed.

Profile allows requesting a certificate profile from the ACME server. Supported profiles are listed by the server's ACME directory URL.

Replaces is the ARI CertID (RFC 9773 §4.1) of the certificate that this Order is intended to replace. When set, cert-manager will include the "replaces" field on the newOrder request to the ACME server if and only if the server advertises ARI support in its directory. The CertID has the form "base64url(AKI).base64url(serial)" and is derived locally from the currently issued leaf certificate.

Certificate signing request bytes in DER encoding. This will be used when finalizing the order. This field must be set on the order.

• format: byte