---
schema_version: "1"
id: c2ee69d48f9c72021018d5c8a82cd2f923af796e6d342f078dbe0f0416330f17
title: InboundCertificate
collection: legacydeveloper
version: current
locale: en-us
portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/api_meta/meta_inboundcertificate.md
canonical_url: https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/meta_inboundcertificate.htm
source_site: developer.salesforce.com
content_type: documentation
content_hash: f95eabaa23947bf79e43a26e7a9e73aa5061d5fdf5eb80cd57f66b5ad03791fe
description: Represents a mutual authentication certificate that is imported to your Salesforce org.
---
# InboundCertificate

Represents a mutual authentication certificate that is imported to your Salesforce org.

![Important](https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/images/icon_note_important.png)

#### Important

Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations.

## File Suffix and Directory Location

InboundCertificate components have the suffix .inboundCertificate and are stored in the inboundCertificates folder.

## Special Access Rules

InboundCertificate is available when the MutualAuthentication permission is enabled in your org.

## Version

InboundCertificate components are available in API version 49.0 and later.

## Fields

This metadata type contains the following fields:

| Field Name | Field Type | Description |
| --- | --- | --- |
| expirationDate | date | Required. The date on which the certificate expires. |
| issuer | string | Required. The certificate’s issuer. |
| masterLabel | string | Required. A friendly name that you create for the certificate. Limited to 64 characters. |
| serialId | string | Required. The serial number for the certificate. |

## Declarative Metadata Sample Definition

The following is an example of an InboundCertificate component.

<InboundCertificate xmlns="http://soap.sforce.com/2006/04/metadata">
    <expirationDate\>2021-02-04</expirationDate\>
    <issuer>C=USA,ST=CA,L=San Francisco,O=Salesforce.com,OU=00Dxx0000006Jm7,CN=newTestCert</issuer\>
    <masterLabel\>TestMutualAuthCert2</masterLabel\>
    <serialId\>29161320252531323757470546071624</serialId\>
</InboundCertificate\>

The following is an example package.xml that references the previous definition.

<?xml version="1.0" encoding="UTF-8"?>
<Package xmlns="http://soap.sforce.com/2006/04/metadata">
    <types>
        <members>\*</members>
        <name>InboundCertificate</name>
    </types>
    <version>49.0</version>
</Package>

## Usage

To prevent simple impersonation from compromising security, you can require clients and servers to prove their identity to each other with a mutual authentication certificate.