---
schema_version: "1"
id: f4bb01fc73d0c4a1fb8e4bf75b81286f455b12a3d76a4a7af6a4ec4306702cf8
title: PublicKeyCertificateSet
collection: legacydeveloper
version: current
locale: en-us
portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/api_meta/meta_publickeycertificateset.md
canonical_url: https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/meta_publickeycertificateset.htm
source_site: developer.salesforce.com
content_type: documentation
content_hash: 32c4e3fc2430533c4519373f83ac56ae7c6f75b8dc33ef2c3aa732a6a3803307
description: Represents a set of public certificate keys. On this entity we store a public certificates or JSON web keys.
---
# PublicKeyCertificateSet

Represents a set of public certificate keys. On this entity we store a public certificates or JSON web keys.

![Important](https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/images/icon_note_important.png)

#### Important

Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations.

## Parent Type

This type extends the [Metadata](https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/metadata.htm "The base class for all metadata types. You can’t edit this object. A component is an instance of a metadata type.") metadata type and inherits its fullName field.

## File Suffix and Directory Location

PublicKeyCertificateSet components have the suffix .PublicKeyCertificateSet and are stored in the PublicKeyCertificateSet folder.

## Version

PublicKeyCertificateSet components are available in API version 62 and later.

## Special Access Rules

There are no additional access requirements that are specific to this type.

## Fields

| Field Name | Description |
| --- | --- |
| description | 
Field Type

string

Description

A description of the public key certificate set.



 |
| jwksEndPoint | 

Field Type

string

Description

The URL of the HTTPS Server that returns the JWKS.



 |
| jwtIssuer | 

Field Type

string

Description

The user, organization, or service that issued the JSON web token. This value is case-sensitive.



 |
| masterLabel | 

Field Type

string

Description

Required. The label for the public key certificate set.





 |
| publicKeyCertificateSetKeys | 

Field Type

[PublicKeyCertificateSetKey\[\]](#PublicKeyCertificateSetKey)

Description

A set of public certificate keys associated with the public key certificate set.



 |
| type | 

Field Type

PublicKeyCertificateSetType (enumeration of type string)

Description

Required. Determines how the server's public key set is retrieved. The keys are represented in JWK format.

Values are:

- JWKS\- Used to specify a certificate via the child Type PublicKeyCertificateSetKey.
- JWKS\_URL\- Used to specify a certificate via the jwksEndPoint field on this Type.





 |

## PublicKeyCertificateSetKeys

Represents a set of public certificate keys associated with the public key certificate set.

| Field Name | Description |
| --- | --- |
| publicKeyCertificate | 
Field Type

string

Description

Required.

The PublicKeyCertificate we want to reference.



 |

## Declarative Metadata Sample Definition

The following is an example of a PublicKeyCertificateSet component.

<?xml version="1.0" encoding="UTF-8"?>
<PublicKeyCertificateSet xmlns="http://soap.sforce.com/2006/04/metadata">
    <masterLabel\>pcks1</masterLabel\>
    <description\>This is my description for a PublicKeyCertificateSet</description\>
    <type\>JWKS</type\>
    <jwtIssuer\>example.com</jwtIssuer\>
    <publicKeyCertificateSetKeys\>
            <publicKeyCertificate\>pck1</publicKeyCertificate\>
    </publicKeyCertificateSetKeys\>
</PublicKeyCertificateSet\>

The following is an example package.xml that references the previous definition.

<?xml version="1.0" encoding="UTF-8"?>
<Package xmlns="http://soap.sforce.com/2006/04/metadata">
    <types>
        <members>\*</members>
        <name>PublicKeyCertificate</name>
    </types>
    <types>
        <members>\*</members>
        <name>PublicKeyCertificateSet</name>
    </types>
    <version>62.0</version>
</Package>

## Wildcard Support in the Manifest File

This metadata type supports the wildcard character \* (asterisk) in the package.xml manifest file. For information about using the manifest file, see [Deploying and Retrieving Metadata with the Zip File](https://developer.salesforce.com/docs/atlas.en-us.264.0.api_meta.meta/api_meta/file_based_zip_file.htm).