# This is an automatically generated code sample.
# To make this code sample work in your Oracle Cloud tenancy,
# please replace the values for any parameters whose current values do not fit
# your use case (such as resource IDs, strings containing ‘EXAMPLE’ or ‘unique_id’, and
# boolean, number, and enum parameters with values not fitting your use case).

require 'oci'

# Create a default config using DEFAULT profile in default location
# Refer to https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/sdkconfig.htm#SDK_and_CLI_Configuration_File for more info
config = OCI::ConfigFileLoader.load_config

# Initialize service client with default config file
certificates_management_client =
  OCI::CertificatesManagement::CertificatesManagementClient.new(config: config)

# Send the request to service, some parameters are not required, see API doc for more info
create_certificate_authority_response =
  certificates_management_client.create_certificate_authority(
    OCI::CertificatesManagement::Models::CreateCertificateAuthorityDetails.new(
      name: 'EXAMPLE-name-Value',
      compartment_id: 'ocid1.test.oc1..<unique_ID>EXAMPLE-compartmentId-Value',
      certificate_authority_config:
        OCI::CertificatesManagement::Models::CreateSubordinateCaManagedInternallyIssuedByExternalCaConfigDetails
          .new(
          config_type:
            'SUBORDINATE_CA_MANAGED_INTERNALLY_ISSUED_BY_EXTERNAL_CA',
          issuer_certificate_authority_id:
            'ocid1.test.oc1..<unique_ID>EXAMPLE-issuerCertificateAuthorityId-Value',
          subject:
            OCI::CertificatesManagement::Models::CertificateSubject.new(
              common_name: 'EXAMPLE-commonName-Value',
              country: 'EXAMPLE-country-Value',
              domain_component: 'EXAMPLE-domainComponent-Value',
              distinguished_name_qualifier:
                'EXAMPLE-distinguishedNameQualifier-Value',
              generation_qualifier: 'EXAMPLE-generationQualifier-Value',
              given_name: 'EXAMPLE-givenName-Value',
              initials: 'EXAMPLE-initials-Value',
              locality_name: 'EXAMPLE-localityName-Value',
              organization: 'EXAMPLE-organization-Value',
              organizational_unit: 'EXAMPLE-organizationalUnit-Value',
              pseudonym: 'EXAMPLE-pseudonym-Value',
              serial_number: 'EXAMPLE-serialNumber-Value',
              state_or_province_name: 'EXAMPLE-stateOrProvinceName-Value',
              street: 'EXAMPLE-street-Value',
              surname: 'EXAMPLE-surname-Value',
              title: 'EXAMPLE-title-Value',
              user_id: 'ocid1.test.oc1..<unique_ID>EXAMPLE-userId-Value'
            ),
          version_name: 'EXAMPLE-versionName-Value',
          signing_algorithm: 'SHA384_WITH_RSA'
        ),
      description: 'EXAMPLE-description-Value',
      certificate_authority_rules: [
        OCI::CertificatesManagement::Models::CertificateAuthorityIssuanceRule
          .new(
          rule_type: 'CERTIFICATE_AUTHORITY_ISSUANCE_RULE',
          path_length_constraint: 774,
          name_constraint:
            OCI::CertificatesManagement::Models::NameConstraint.new(
              permitted_subtree: [
                OCI::CertificatesManagement::Models::NameConstraintSubtreeNode
                  .new(type: 'DIRECTORY_NAME', value: 'EXAMPLE-value-Value')
              ],
              excluded_subtree: [
                OCI::CertificatesManagement::Models::NameConstraintSubtreeNode
                  .new(type: 'DNS', value: 'EXAMPLE-value-Value')
              ]
            )
        )
      ],
      certificate_revocation_list_details:
        OCI::CertificatesManagement::Models::CertificateRevocationListDetails
          .new(
          object_storage_config:
            OCI::CertificatesManagement::Models::ObjectStorageBucketConfigDetails
              .new(
              object_storage_bucket_name:
                'EXAMPLE-objectStorageBucketName-Value',
              object_storage_object_name_format:
                'EXAMPLE-objectStorageObjectNameFormat-Value',
              object_storage_namespace: 'EXAMPLE-objectStorageNamespace-Value'
            ),
          custom_formatted_urls: %w[EXAMPLE--Value]
        ),
      kms_key_id: 'ocid1.test.oc1..<unique_ID>EXAMPLE-kmsKeyId-Value',
      external_key_description: 'EXAMPLE-externalKeyDescription-Value',
      freeform_tags: {
        'EXAMPLE_KEY_N5dSE' => 'EXAMPLE_VALUE_2YIlIYHD0ETI7IGglIGk'
      },
      defined_tags: {
        'EXAMPLE_KEY_dsR33' => { 'EXAMPLE_KEY_tNn5s' => 'EXAMPLE--Value' }
      }
    )
  )

# Get the data from response
puts "#{create_certificate_authority_response.data}"