**To retrieve the fields contained in an ACM certificate**

The following ``describe-certificate`` command retrieves all of the fields for the certificate with the specified ARN::

  aws acm describe-certificate --certificate-arn arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012
 
Output similar to the following is displayed::

  {
    "Certificate": {
      "CertificateArn": "arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012", 
      "CreatedAt": 1446835267.0, 
      "DomainName": "www.example.com", 
      "DomainValidationOptions": [
        {
          "DomainName": "www.example.com", 
          "ValidationDomain": "www.example.com", 
          "ValidationEmails": [
            "[email protected]", 
            "[email protected]", 
            "[email protected]", 
            "[email protected]", 
            "[email protected]", 
            "[email protected]", 
            "[email protected]", 
            "[email protected]"
          ]
        }, 
        {
          "DomainName": "www.example.net", 
          "ValidationDomain": "www.example.net", 
          "ValidationEmails": [
            "[email protected]", 
            "[email protected]", 
            "[email protected]", 
            "[email protected]", 
            "[email protected]", 
            "[email protected]", 
            "[email protected]", 
            "[email protected]"
          ]
        }
      ], 
      "InUseBy": [], 
      "IssuedAt": 1446835815.0, 
      "Issuer": "Amazon", 
      "KeyAlgorithm": "RSA-2048", 
      "NotAfter": 1478433600.0, 
      "NotBefore": 1446768000.0, 
      "Serial": "0f:ac:b0:a3:8d:ea:65:52:2d:7d:01:3a:39:36:db:d6", 
      "SignatureAlgorithm": "SHA256WITHRSA", 
      "Status": "ISSUED", 
      "Subject": "CN=www.example.com", 
      "SubjectAlternativeNames": [
        "www.example.com", 
        "www.example.net"
      ]
    }
  }