---
schema_version: "1"
id: c0f9d904146b5f6eb0d512aa7bffc85ba552b34ab03e251bfd7050fb603d687f
title: PublicKeyCertificate
collection: legacydeveloper
version: current
locale: en-us
portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/api_meta/meta_publickeycertificate.md
canonical_url: https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/meta_publickeycertificate.htm
source_site: developer.salesforce.com
content_type: documentation
content_hash: 3d4eb8a2a2be211d4954a89cf4216a41ab859e534b3ba766c133795bf8440362
description: Represents the public key certificate. On this entity we store a public certificate or a JSON web key, which is used to validate the customer-provided JWT.
---
# PublicKeyCertificate

Represents the public key certificate. On this entity we store a public certificate or a JSON web key, which is used to validate the customer-provided JWT.

![Important](https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/images/icon_note_important.png)

#### Important

Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations.

## Parent Type

This type extends the [Metadata](https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/metadata.htm "The base class for all metadata types. You can’t edit this object. A component is an instance of a metadata type.") metadata type and inherits its fullName field.

## File Suffix and Directory Location

PublicKeyCertificate components have the suffix .PublicKeyCertificate and are stored in the PublicKeyCertificate folder.

## Version

PublicKeyCertificate components are available in API version 62 and later.

## Special Access Rules

There are no additional access requirements that are specific to this type.

## Fields

| Field Name | Description |
| --- | --- |
| description | 
Field Type

string

Description

A description of the public key certificate.



 |
| isActive | 

Field Type

boolean

Description

Indicates whether the public key certificate is active (true) or inactive (false). The default value is false.



 |
| jsonWebKey | 

Field Type

string

Description

Represents a public cryptographic key that can be used to verify the validity of a token.



 |
| masterLabel | 

Field Type

string

Description

Required. The label for the public key certificate.





 |

## Declarative Metadata Sample Definition

The following is an example of a PublicKeyCertificate component.

<?xml version="1.0" encoding="UTF-8"?>
<PublicKeyCertificate xmlns="http://soap.sforce.com/2006/04/metadata">
    <masterLabel\>pck1</masterLabel\>
    <isActive\>true</isActive\>
    <description\>This is my description for a test PublicKeyCertificate</description\>
    <jsonWebKey\>
{
  "kid":"123456",
  "alg":"RS256",
  "use":"sig",
  "kty":"RSA",
  "x5c":\["<Your public certificate>"\],
  "y":"y",
  "n":"<Base64-encoded modulus>",
  "e":"<Base64-encoded public exponent>",
  "crv":"crv",
  "d":"d",
  "k":"k"
}
    </jsonWebKey\>
</PublicKeyCertificate\>

The following is an example package.xml that references the previous definition.

<?xml version="1.0" encoding="UTF-8"?>
<!--
  ~ Copyright 2024 salesforce.com, inc.
  ~ All Rights Reserved
  ~ Company Confidential
  -->

<Package xmlns="http://soap.sforce.com/2006/04/metadata">
    <types>
        <members>\*</members>
        <name>PublicKeyCertificate</name>
    </types>
    <version>62.0</version>
</Package>

## Wildcard Support in the Manifest File

This metadata type supports the wildcard character \* (asterisk) in the package.xml manifest file. For information about using the manifest file, see [Deploying and Retrieving Metadata with the Zip File](https://developer.salesforce.com/docs/atlas.en-us.264.0.api_meta.meta/api_meta/file_based_zip_file.htm).