What is Key Vault certificate? · Ultra Transcenders glossary

X.509 certificate stored as a Key Vault object; Key Vault manages it alongside its associated key and secret and can renew it automatically.

In the Ultra Transcenders books

Each book explains Key Vault certificate in context, with comparison tables and the common traps.

Certificate
Key Vault object holding an X.509 certificate, whose associated key and secret are managed alongside it.
Access policies
Older permission model for Key Vault, now superseded by the Azure RBAC model.
Index field attributes
Settings applied to each field in an Azure AI Search index: searchable for full text, retrievable to return it, filterable for exact-match $filter, sortable, facetable for counts, and key for the unique document ID.
Secret
Object in Key Vault storing an arbitrary string value, for instance a password, API key or connection string.

Certificate lifetime actions
Settings in a Key Vault certificate policy, triggered a number of days before expiry or at a percentage of lifetime, that either renew automatically or email the contacts; renewal works through these, not through key rotation policies.