[Документация Yandex Cloud](../../../../../index.md) > [Yandex Certificate Manager](../../../../index.md) > Справочник API > gRPC (англ.) > [Certificate Manager Private CA API](../index.md) > [Policy](index.md) > Get

# Certificate Manager Private CA API, gRPC: PolicyService.Get

Returns the specified policy.

## gRPC request

**rpc Get ([GetPolicyRequest](#yandex.cloud.certificatemanager.v1.privateca.GetPolicyRequest)) returns ([Policy](#yandex.cloud.certificatemanager.v1.privateca.Policy))**

## GetPolicyRequest {#yandex.cloud.certificatemanager.v1.privateca.GetPolicyRequest}

```json
{
  "id": "string"
}
```

Request message for getting a policy.

#|
||Field | Description ||
|| id | **string**

Required field. ID of the policy to retrieve.

The maximum string length in characters is 50. ||
|#

## Policy {#yandex.cloud.certificatemanager.v1.privateca.Policy}

```json
{
  // Includes only one of the fields `key_usages_white_list`, `key_usages_black_list`
  "key_usages_white_list": {
    "key_usage": [
      "KeyUsageExtension"
    ]
  },
  "key_usages_black_list": {
    "key_usage": [
      "KeyUsageExtension"
    ]
  },
  // end of the list of possible fields
  // Includes only one of the fields `extended_key_usages_white_list`, `extended_key_usages_black_list`
  "extended_key_usages_white_list": {
    "extended_key_usage": [
      "ExtendedKeyUsageExtension"
    ]
  },
  "extended_key_usages_black_list": {
    "extended_key_usage": [
      "ExtendedKeyUsageExtension"
    ]
  },
  // end of the list of possible fields
  // Includes only one of the fields `extension_white_list`, `extension_black_list`
  "extension_white_list": {
    "extension_oid": [
      "string"
    ]
  },
  "extension_black_list": {
    "extension_oid": [
      "string"
    ]
  },
  // end of the list of possible fields
  "id": "string",
  "certificate_authority_id": "string",
  "name": "string",
  "subject_policy": {
    "country": "string",
    "organization": "string",
    "organizational_unit": "string",
    "distinguished_name_qualifier": "string",
    "state_or_province": "string",
    "common_name": "string",
    "email_address": "string",
    "serial_number": "string",
    "locality": "string",
    "title": "string",
    "surname": "string",
    "given_name": "string",
    "initials": "string",
    "generation_qualifier": "string"
  },
  "san_policy": {
    "other_name_oid": "string",
    "rfc_822_name": "string",
    "dns_name": "string",
    "directory_name": "string",
    "edi_party_name": {
      "name_assigner": "string",
      "party_name": "string"
    },
    "uniform_resource_identifier": "string",
    "ip_address": "string",
    "registered_id": "string"
  },
  "created_at": "google.protobuf.Timestamp",
  "updated_at": "google.protobuf.Timestamp"
}
```

A policy defines the rules and constraints for issuing certificates within a certificate authority.

#|
||Field | Description ||
|| key_usages_white_list | **[KeyUsagePolicy](#yandex.cloud.certificatemanager.v1.privateca.KeyUsagePolicy)**

Whitelist of allowed key usages.

Includes only one of the fields `key_usages_white_list`, `key_usages_black_list`.

Policy for key usages. ||
|| key_usages_black_list | **[KeyUsagePolicy](#yandex.cloud.certificatemanager.v1.privateca.KeyUsagePolicy)**

Blacklist of disallowed key usages.

Includes only one of the fields `key_usages_white_list`, `key_usages_black_list`.

Policy for key usages. ||
|| extended_key_usages_white_list | **[ExtendedKeyUsagePolicy](#yandex.cloud.certificatemanager.v1.privateca.ExtendedKeyUsagePolicy)**

Whitelist of allowed extended key usages.

Includes only one of the fields `extended_key_usages_white_list`, `extended_key_usages_black_list`.

Policy for extended key usages. ||
|| extended_key_usages_black_list | **[ExtendedKeyUsagePolicy](#yandex.cloud.certificatemanager.v1.privateca.ExtendedKeyUsagePolicy)**

Blacklist of disallowed extended key usages.

Includes only one of the fields `extended_key_usages_white_list`, `extended_key_usages_black_list`.

Policy for extended key usages. ||
|| extension_white_list | **[ExtensionPolicy](#yandex.cloud.certificatemanager.v1.privateca.ExtensionPolicy)**

Whitelist of allowed extensions.

Includes only one of the fields `extension_white_list`, `extension_black_list`.

Policy for certificate extensions. ||
|| extension_black_list | **[ExtensionPolicy](#yandex.cloud.certificatemanager.v1.privateca.ExtensionPolicy)**

Blacklist of disallowed extensions.

Includes only one of the fields `extension_white_list`, `extension_black_list`.

Policy for certificate extensions. ||
|| id | **string**

ID of the policy. ||
|| certificate_authority_id | **string**

ID of the certificate authority the policy belongs to. ||
|| name | **string**

Name of the policy. ||
|| subject_policy | **[SubjectPolicy](#yandex.cloud.certificatemanager.v1.privateca.SubjectPolicy)**

Policy for the subject field of the certificate. ||
|| san_policy | **[SubjectAlternativeNamePolicy](#yandex.cloud.certificatemanager.v1.privateca.SubjectAlternativeNamePolicy)**

Policy for the Subject Alternative Name (SAN) extension of the certificate. ||
|| created_at | **[google.protobuf.Timestamp](https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#timestamp)**

Timestamp when the policy was created. ||
|| updated_at | **[google.protobuf.Timestamp](https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#timestamp)**

Timestamp when the policy was last updated. ||
|#

## KeyUsagePolicy {#yandex.cloud.certificatemanager.v1.privateca.KeyUsagePolicy}

Policy for key usages in a certificate.

#|
||Field | Description ||
|| key_usage[] | enum **KeyUsageExtension**

List of key usages that are allowed or disallowed.

- `DIGITAL_SIGNATURE`
- `CONTENT_COMMITMENT`
- `KEY_ENCIPHERMENT`
- `DATA_ENCIPHERMENT`
- `KEY_AGREEMENT`
- `KEY_CERT_SIGN`
- `CRL_SIGN`
- `ENCIPHER_ONLY`
- `DECIPHER_ONLY` ||
|#

## ExtendedKeyUsagePolicy {#yandex.cloud.certificatemanager.v1.privateca.ExtendedKeyUsagePolicy}

Policy for extended key usages in a certificate.

#|
||Field | Description ||
|| extended_key_usage[] | enum **ExtendedKeyUsageExtension**

List of extended key usages that are allowed or disallowed.

- `SERVER_AUTH`
- `CLIENT_AUTH`
- `CODE_SIGNING`
- `EMAIL_PROTECTION`
- `TIME_STAMPING`
- `OCSP_SIGNING`
- `IPSEC_IKE`
- `MS_CODE_IND`
- `MS_CODE_COM`
- `MS_CTL_SIGN`
- `MS_EFS` ||
|#

## ExtensionPolicy {#yandex.cloud.certificatemanager.v1.privateca.ExtensionPolicy}

Policy for certificate extensions.

#|
||Field | Description ||
|| extension_oid[] | **string**

List of extension OIDs that are allowed or disallowed. ||
|#

## SubjectPolicy {#yandex.cloud.certificatemanager.v1.privateca.SubjectPolicy}

Policy for the subject field of a certificate. Each string field could be a regexp

#|
||Field | Description ||
|| country | **string**

Allowed country name in the subject field.

The maximum string length in characters is 1000. ||
|| organization | **string**

Allowed organization name in the subject field.

The maximum string length in characters is 1000. ||
|| organizational_unit | **string**

Allowed organizational unit name in the subject field.

The maximum string length in characters is 1000. ||
|| distinguished_name_qualifier | **string**

Allowed distinguished name qualifier in the subject field.

The maximum string length in characters is 10000. ||
|| state_or_province | **string**

Allowed state or province name in the subject field.

The maximum string length in characters is 1000. ||
|| common_name | **string**

Allowed common name in the subject field.

The maximum string length in characters is 10000. ||
|| email_address | **string**

Allowed email address in the subject field.

The maximum string length in characters is 1000. ||
|| serial_number | **string**

Allowed serial number in the subject field.

The maximum string length in characters is 100. ||
|| locality | **string**

Allowed locality name in the subject field.

The maximum string length in characters is 1000. ||
|| title | **string**

Allowed title in the subject field.

The maximum string length in characters is 1000. ||
|| surname | **string**

Allowed surname in the subject field.

The maximum string length in characters is 1000. ||
|| given_name | **string**

Allowed given name in the subject field.

The maximum string length in characters is 1000. ||
|| initials | **string**

Allowed initials in the subject field.

The maximum string length in characters is 1000. ||
|| generation_qualifier | **string**

Allowed generation qualifier in the subject field.

The maximum string length in characters is 1000. ||
|#

## SubjectAlternativeNamePolicy {#yandex.cloud.certificatemanager.v1.privateca.SubjectAlternativeNamePolicy}

Policy for the Subject Alternative Name (SAN) field of a certificate. Each string field could be a regexp

#|
||Field | Description ||
|| other_name_oid | **string**

Allowed OIDs of the other name in the SAN field. ||
|| rfc_822_name | **string**

Allowed RFC 822 names (email addresses) in the SAN field.

The maximum string length in characters is 1000. ||
|| dns_name | **string**

Allowed DNS names in the SAN field.

The maximum string length in characters is 1000. ||
|| directory_name | **string**

Allowed directory names in the SAN field.

The maximum string length in characters is 1000. ||
|| edi_party_name | **[EdiPartyName](#yandex.cloud.certificatemanager.v1.privateca.EdiPartyName)**

Allowed EDI party names in the SAN field. ||
|| uniform_resource_identifier | **string**

Allowed URIs in the SAN field.

The maximum string length in characters is 1000. ||
|| ip_address | **string**

Allowed IP addresses in the SAN field.

The maximum string length in characters is 1000. ||
|| registered_id | **string**

Allowed registered IDs in the SAN field.

The maximum string length in characters is 1000. ||
|#

## EdiPartyName {#yandex.cloud.certificatemanager.v1.privateca.EdiPartyName}

#|
||Field | Description ||
|| name_assigner | **string**

Specifies the entity or authority that assigned the partyName

The maximum string length in characters is 1000. ||
|| party_name | **string**

The actual identifier of the EDI party

The maximum string length in characters is 1000. ||
|#