The creation date of the key.

This field reflects the creation date of the key, in seconds since the Unix epoch.

The deletion date of the key.

This field reflects the deletion date of the key, in seconds since the Unix epoch, or -1 if the key has not been deleted.

Whether the key is enabled.

This field reflects whether the key is currently enabled.

The expiration date of the key.

This field reflects the expiration date of the key, in seconds since the Unix epoch, or -1 if the key does not expire.

A key can only be used for the Decrypt, Verify, and UnwrapKey operations after its expiry date.

The operation that the key may be used for.

This field reflects a comma-separated list of operations that they key may be used for. Possible values are:

• encrypt
• decrypt
• sign
• verify
• wrapKey
• unwrapKey

The key's type.

This field reflects the key's type. Each key type has two variants, a software-based one and an HSM-based one. Possible values for this field are shown in the first two columns of the following table:

The name of the key.

This field reflects the name of the key.

The 'not before' date of the key.

This field reflects the "not before" date of the key, in seconds since the Unix epoch, or -1 if the key doesn't have an explicit "not before" date.

A key can only be used for the Decrypt, Verify, and UnwrapKey operations prior to its "not before" date.

The key's public key.

This field reflects the public key of the key, in PEM format.

The purge date of the key.

This field reflects the purge (i.e., permanent deletion) date of the key, in seconds since the Unix epoch, or -1 if the key has not been deleted.

The number of days the key will be recoverable if it gets deleted.

This field reflects the number of days that the key will be recoverable for if it gets deleted.

Note that this field's value is based on the retention policy of the currently-selected Vault; it will not change after the key has actually been deleted.

The key's ability to be recovered and/or purged if it gets deleted.

This field reflects the key's ability to be recovered and/or purged (i.e., permanently deleted) if it gets deleted. Possible values are as follows; please refer to this part of the Azure Key Vault documentation for more information about each one:

• CustomizedRecoverable
• CustomizedRecoverable+ProtectedSubscription
• CustomizedRecoverable+Purgeable
• Purgeable
• Recoverable
• Recoverable+ProtectedSubscription
• Recoverable+Purgeable

The update date of the key.

This field reflects the update date of the key, in seconds since the Unix epoch.

The version Id of the key.

This field reflects the version Id of the key.