Retrieve a DTS root CA certificate

Unique identifier for this DTS root CA certificate.

Indicates whether the DTS root CA certificate is active. Activating a certificate does not affect your ability to create or sign subordinate (intermediate CA or signer) certificates: you can build a complete certificate chain while the root CA is inactive. Instead, active certificates are included in the selection process MATTR VII uses when choosing the certificate chain to sign a trusted list (VICAL or RICAL), where MATTR VII prefers the most recently created active certificate at each level of the chain. Only one DTS root CA certificate can be active at a time.

DTS root CA certificate in PEM format.

SHA-256 hash of DTS root CA certificate content.

Indicates whether the private key for this DTS root CA certificate is managed by MATTR (true) or out of band by the customer as an external certificate (false).

When true, this DTS root CA certificate uses the 3-tier certificate model, requiring and using DTS intermediate CA certificates as part of its chain of trust for signing operations. When false, the 2-tier model is used and the DTS root CA signs signer certificates directly. For an explanation of the 2-tier and 3-tier models, refer to the DTS certificates overview.