Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Alibaba Cloud Provider
  3. API Docs
  4. sslcertificatesservice
  5. PcaCertificate
Alibaba Cloud v3.85.0 published on Tuesday, Sep 9, 2025 by Pulumi
pulumi/pulumi-alicloud

alicloud.sslcertificatesservice.PcaCertificate

Explore with Pulumi AI

alicloud logo
Alibaba Cloud v3.85.0 published on Tuesday, Sep 9, 2025 by Pulumi
pulumi/pulumi-alicloud

    Provides a SSL Certificates Pca Certificate resource.

    For information about SSL Certificates Pca Certificate and how to use it, see What is Pca Certificate.

    NOTE: Available since v1.257.0.

    Example Usage

    Basic Usage

    import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";

const _default = new alicloud.sslcertificatesservice.PcaCertificate("default", {
    organization: "a",
    years: 1,
    locality: "a",
    organizationUnit: "a",
    state: "a",
    countryCode: "cn",
    commonName: "cbc.certqa.cn",
    algorithm: "RSA_2048",
});

    import pulumi
import pulumi_alicloud as alicloud

default = alicloud.sslcertificatesservice.PcaCertificate("default",
    organization="a",
    years=1,
    locality="a",
    organization_unit="a",
    state="a",
    country_code="cn",
    common_name="cbc.certqa.cn",
    algorithm="RSA_2048")

    package main

import (
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/sslcertificatesservice"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sslcertificatesservice.NewPcaCertificate(ctx, "default", &sslcertificatesservice.PcaCertificateArgs{
			Organization:     pulumi.String("a"),
			Years:            pulumi.Int(1),
			Locality:         pulumi.String("a"),
			OrganizationUnit: pulumi.String("a"),
			State:            pulumi.String("a"),
			CountryCode:      pulumi.String("cn"),
			CommonName:       pulumi.String("cbc.certqa.cn"),
			Algorithm:        pulumi.String("RSA_2048"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;

return await Deployment.RunAsync(() => 
{
    var @default = new AliCloud.SslCertificatesService.PcaCertificate("default", new()
    {
        Organization = "a",
        Years = 1,
        Locality = "a",
        OrganizationUnit = "a",
        State = "a",
        CountryCode = "cn",
        CommonName = "cbc.certqa.cn",
        Algorithm = "RSA_2048",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.sslcertificatesservice.PcaCertificate;
import com.pulumi.alicloud.sslcertificatesservice.PcaCertificateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var default_ = new PcaCertificate("default", PcaCertificateArgs.builder()
            .organization("a")
            .years(1)
            .locality("a")
            .organizationUnit("a")
            .state("a")
            .countryCode("cn")
            .commonName("cbc.certqa.cn")
            .algorithm("RSA_2048")
            .build());

    }
}

    resources:
  default:
    type: alicloud:sslcertificatesservice:PcaCertificate
    properties:
      organization: a
      years: '1'
      locality: a
      organizationUnit: a
      state: a
      countryCode: cn
      commonName: cbc.certqa.cn
      algorithm: RSA_2048

    Create PcaCertificate Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new PcaCertificate(name: string, args: PcaCertificateArgs, opts?: CustomResourceOptions);
    @overload
def PcaCertificate(resource_name: str,
                   args: PcaCertificateArgs,
                   opts: Optional[ResourceOptions] = None)

@overload
def PcaCertificate(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   common_name: Optional[str] = None,
                   locality: Optional[str] = None,
                   organization: Optional[str] = None,
                   organization_unit: Optional[str] = None,
                   state: Optional[str] = None,
                   years: Optional[int] = None,
                   algorithm: Optional[str] = None,
                   country_code: Optional[str] = None)
    func NewPcaCertificate(ctx *Context, name string, args PcaCertificateArgs, opts ...ResourceOption) (*PcaCertificate, error)
    public PcaCertificate(string name, PcaCertificateArgs args, CustomResourceOptions? opts = null)
    public PcaCertificate(String name, PcaCertificateArgs args)
public PcaCertificate(String name, PcaCertificateArgs args, CustomResourceOptions options)

    type: alicloud:sslcertificatesservice:PcaCertificate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args PcaCertificateArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args PcaCertificateArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args PcaCertificateArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args PcaCertificateArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args PcaCertificateArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var pcaCertificateResource = new AliCloud.SslCertificatesService.PcaCertificate("pcaCertificateResource", new()
{
    CommonName = "string",
    Locality = "string",
    Organization = "string",
    OrganizationUnit = "string",
    State = "string",
    Years = 0,
    Algorithm = "string",
    CountryCode = "string",
});

    example, err := sslcertificatesservice.NewPcaCertificate(ctx, "pcaCertificateResource", &sslcertificatesservice.PcaCertificateArgs{
	CommonName:       pulumi.String("string"),
	Locality:         pulumi.String("string"),
	Organization:     pulumi.String("string"),
	OrganizationUnit: pulumi.String("string"),
	State:            pulumi.String("string"),
	Years:            pulumi.Int(0),
	Algorithm:        pulumi.String("string"),
	CountryCode:      pulumi.String("string"),
})

    var pcaCertificateResource = new PcaCertificate("pcaCertificateResource", PcaCertificateArgs.builder()
    .commonName("string")
    .locality("string")
    .organization("string")
    .organizationUnit("string")
    .state("string")
    .years(0)
    .algorithm("string")
    .countryCode("string")
    .build());

    pca_certificate_resource = alicloud.sslcertificatesservice.PcaCertificate("pcaCertificateResource",
    common_name="string",
    locality="string",
    organization="string",
    organization_unit="string",
    state="string",
    years=0,
    algorithm="string",
    country_code="string")

    const pcaCertificateResource = new alicloud.sslcertificatesservice.PcaCertificate("pcaCertificateResource", {
    commonName: "string",
    locality: "string",
    organization: "string",
    organizationUnit: "string",
    state: "string",
    years: 0,
    algorithm: "string",
    countryCode: "string",
});

    type: alicloud:sslcertificatesservice:PcaCertificate
properties:
    algorithm: string
    commonName: string
    countryCode: string
    locality: string
    organization: string
    organizationUnit: string
    state: string
    years: 0

    PcaCertificate Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The PcaCertificate resource accepts the following input properties:

    CommonName string
    The common name or abbreviation of the organization. Support the use of Chinese, English characters.
    Locality string
    Name of the city where the organization is located. Support the use of Chinese, English characters.
    Organization string
    The name of the organization (corresponding to your enterprise or company) associated with the root CA certificate. Support the use of Chinese, English characters.
    OrganizationUnit string
    The name of the department or branch under the organization. Support the use of Chinese, English characters.
    State string
    The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters. Name of the province or state where the organization is located. Support the use of Chinese, English characters.
    Years int

    The validity period of the root CA certificate, in years.

    NOTE: It is recommended to set to 5 to 10 years.

    Algorithm string
    The key algorithm type of the root CA certificate. The key algorithm is expressed using the '_< key length>' format. Value:

    • RSA_1024: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_2048: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_4096: The corresponding signature algorithm is Sha256WithRSA.
    • ECC_256: The signature algorithm is Sha256WithECDSA.
    • ECC_384: The corresponding signature algorithm is Sha256WithECDSA.
    • ECC_512: The signature algorithm is Sha256WithECDSA.
    • SM2_256: The corresponding signature algorithm is SM3WithSM2. The encryption algorithm of the root CA certificate must be the same as the certificate algorithm of the private Root CA you purchased. Example: If the certificate algorithm selected when you purchase a private Root CA is RSA, the key algorithm of the root CA certificate must be RSA_1024, RSA_2048, or RSA_4096.
    CountryCode string
    The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example, CN represents China and US represents the United States.
    CommonName string
    The common name or abbreviation of the organization. Support the use of Chinese, English characters.
    Locality string
    Name of the city where the organization is located. Support the use of Chinese, English characters.
    Organization string
    The name of the organization (corresponding to your enterprise or company) associated with the root CA certificate. Support the use of Chinese, English characters.
    OrganizationUnit string
    The name of the department or branch under the organization. Support the use of Chinese, English characters.
    State string
    The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters. Name of the province or state where the organization is located. Support the use of Chinese, English characters.
    Years int

    The validity period of the root CA certificate, in years.

    NOTE: It is recommended to set to 5 to 10 years.

    Algorithm string
    The key algorithm type of the root CA certificate. The key algorithm is expressed using the '_< key length>' format. Value:

    • RSA_1024: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_2048: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_4096: The corresponding signature algorithm is Sha256WithRSA.
    • ECC_256: The signature algorithm is Sha256WithECDSA.
    • ECC_384: The corresponding signature algorithm is Sha256WithECDSA.
    • ECC_512: The signature algorithm is Sha256WithECDSA.
    • SM2_256: The corresponding signature algorithm is SM3WithSM2. The encryption algorithm of the root CA certificate must be the same as the certificate algorithm of the private Root CA you purchased. Example: If the certificate algorithm selected when you purchase a private Root CA is RSA, the key algorithm of the root CA certificate must be RSA_1024, RSA_2048, or RSA_4096.
    CountryCode string
    The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example, CN represents China and US represents the United States.
    commonName String
    The common name or abbreviation of the organization. Support the use of Chinese, English characters.
    locality String
    Name of the city where the organization is located. Support the use of Chinese, English characters.
    organization String
    The name of the organization (corresponding to your enterprise or company) associated with the root CA certificate. Support the use of Chinese, English characters.
    organizationUnit String
    The name of the department or branch under the organization. Support the use of Chinese, English characters.
    state String
    The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters. Name of the province or state where the organization is located. Support the use of Chinese, English characters.
    years Integer

    The validity period of the root CA certificate, in years.

    NOTE: It is recommended to set to 5 to 10 years.

    algorithm String
    The key algorithm type of the root CA certificate. The key algorithm is expressed using the '_< key length>' format. Value:

    • RSA_1024: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_2048: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_4096: The corresponding signature algorithm is Sha256WithRSA.
    • ECC_256: The signature algorithm is Sha256WithECDSA.
    • ECC_384: The corresponding signature algorithm is Sha256WithECDSA.
    • ECC_512: The signature algorithm is Sha256WithECDSA.
    • SM2_256: The corresponding signature algorithm is SM3WithSM2. The encryption algorithm of the root CA certificate must be the same as the certificate algorithm of the private Root CA you purchased. Example: If the certificate algorithm selected when you purchase a private Root CA is RSA, the key algorithm of the root CA certificate must be RSA_1024, RSA_2048, or RSA_4096.
    countryCode String
    The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example, CN represents China and US represents the United States.
    commonName string
    The common name or abbreviation of the organization. Support the use of Chinese, English characters.
    locality string
    Name of the city where the organization is located. Support the use of Chinese, English characters.
    organization string
    The name of the organization (corresponding to your enterprise or company) associated with the root CA certificate. Support the use of Chinese, English characters.
    organizationUnit string
    The name of the department or branch under the organization. Support the use of Chinese, English characters.
    state string
    The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters. Name of the province or state where the organization is located. Support the use of Chinese, English characters.
    years number

    The validity period of the root CA certificate, in years.

    NOTE: It is recommended to set to 5 to 10 years.

    algorithm string
    The key algorithm type of the root CA certificate. The key algorithm is expressed using the '_< key length>' format. Value:

    • RSA_1024: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_2048: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_4096: The corresponding signature algorithm is Sha256WithRSA.
    • ECC_256: The signature algorithm is Sha256WithECDSA.
    • ECC_384: The corresponding signature algorithm is Sha256WithECDSA.
    • ECC_512: The signature algorithm is Sha256WithECDSA.
    • SM2_256: The corresponding signature algorithm is SM3WithSM2. The encryption algorithm of the root CA certificate must be the same as the certificate algorithm of the private Root CA you purchased. Example: If the certificate algorithm selected when you purchase a private Root CA is RSA, the key algorithm of the root CA certificate must be RSA_1024, RSA_2048, or RSA_4096.
    countryCode string
    The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example, CN represents China and US represents the United States.
    common_name str
    The common name or abbreviation of the organization. Support the use of Chinese, English characters.
    locality str
    Name of the city where the organization is located. Support the use of Chinese, English characters.
    organization str
    The name of the organization (corresponding to your enterprise or company) associated with the root CA certificate. Support the use of Chinese, English characters.
    organization_unit str
    The name of the department or branch under the organization. Support the use of Chinese, English characters.
    state str
    The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters. Name of the province or state where the organization is located. Support the use of Chinese, English characters.
    years int

    The validity period of the root CA certificate, in years.

    NOTE: It is recommended to set to 5 to 10 years.

    algorithm str
    The key algorithm type of the root CA certificate. The key algorithm is expressed using the '_< key length>' format. Value:

    • RSA_1024: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_2048: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_4096: The corresponding signature algorithm is Sha256WithRSA.
    • ECC_256: The signature algorithm is Sha256WithECDSA.
    • ECC_384: The corresponding signature algorithm is Sha256WithECDSA.
    • ECC_512: The signature algorithm is Sha256WithECDSA.
    • SM2_256: The corresponding signature algorithm is SM3WithSM2. The encryption algorithm of the root CA certificate must be the same as the certificate algorithm of the private Root CA you purchased. Example: If the certificate algorithm selected when you purchase a private Root CA is RSA, the key algorithm of the root CA certificate must be RSA_1024, RSA_2048, or RSA_4096.
    country_code str
    The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example, CN represents China and US represents the United States.
    commonName String
    The common name or abbreviation of the organization. Support the use of Chinese, English characters.
    locality String
    Name of the city where the organization is located. Support the use of Chinese, English characters.
    organization String
    The name of the organization (corresponding to your enterprise or company) associated with the root CA certificate. Support the use of Chinese, English characters.
    organizationUnit String
    The name of the department or branch under the organization. Support the use of Chinese, English characters.
    state String
    The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters. Name of the province or state where the organization is located. Support the use of Chinese, English characters.
    years Number

    The validity period of the root CA certificate, in years.

    NOTE: It is recommended to set to 5 to 10 years.

    algorithm String
    The key algorithm type of the root CA certificate. The key algorithm is expressed using the '_< key length>' format. Value:

    • RSA_1024: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_2048: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_4096: The corresponding signature algorithm is Sha256WithRSA.
    • ECC_256: The signature algorithm is Sha256WithECDSA.
    • ECC_384: The corresponding signature algorithm is Sha256WithECDSA.
    • ECC_512: The signature algorithm is Sha256WithECDSA.
    • SM2_256: The corresponding signature algorithm is SM3WithSM2. The encryption algorithm of the root CA certificate must be the same as the certificate algorithm of the private Root CA you purchased. Example: If the certificate algorithm selected when you purchase a private Root CA is RSA, the key algorithm of the root CA certificate must be RSA_1024, RSA_2048, or RSA_4096.
    countryCode String
    The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example, CN represents China and US represents the United States.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the PcaCertificate resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Status string
    The status of the CA certificate.
    Id string
    The provider-assigned unique ID for this managed resource.
    Status string
    The status of the CA certificate.
    id String
    The provider-assigned unique ID for this managed resource.
    status String
    The status of the CA certificate.
    id string
    The provider-assigned unique ID for this managed resource.
    status string
    The status of the CA certificate.
    id str
    The provider-assigned unique ID for this managed resource.
    status str
    The status of the CA certificate.
    id String
    The provider-assigned unique ID for this managed resource.
    status String
    The status of the CA certificate.

    Look up Existing PcaCertificate Resource

    Get an existing PcaCertificate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: PcaCertificateState, opts?: CustomResourceOptions): PcaCertificate
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        algorithm: Optional[str] = None,
        common_name: Optional[str] = None,
        country_code: Optional[str] = None,
        locality: Optional[str] = None,
        organization: Optional[str] = None,
        organization_unit: Optional[str] = None,
        state: Optional[str] = None,
        status: Optional[str] = None,
        years: Optional[int] = None) -> PcaCertificate
    func GetPcaCertificate(ctx *Context, name string, id IDInput, state *PcaCertificateState, opts ...ResourceOption) (*PcaCertificate, error)
    public static PcaCertificate Get(string name, Input<string> id, PcaCertificateState? state, CustomResourceOptions? opts = null)
    public static PcaCertificate get(String name, Output<String> id, PcaCertificateState state, CustomResourceOptions options)
    resources:  _:    type: alicloud:sslcertificatesservice:PcaCertificate    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Algorithm string
    The key algorithm type of the root CA certificate. The key algorithm is expressed using the '_< key length>' format. Value:

    • RSA_1024: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_2048: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_4096: The corresponding signature algorithm is Sha256WithRSA.
    • ECC_256: The signature algorithm is Sha256WithECDSA.
    • ECC_384: The corresponding signature algorithm is Sha256WithECDSA.
    • ECC_512: The signature algorithm is Sha256WithECDSA.
    • SM2_256: The corresponding signature algorithm is SM3WithSM2. The encryption algorithm of the root CA certificate must be the same as the certificate algorithm of the private Root CA you purchased. Example: If the certificate algorithm selected when you purchase a private Root CA is RSA, the key algorithm of the root CA certificate must be RSA_1024, RSA_2048, or RSA_4096.
    CommonName string
    The common name or abbreviation of the organization. Support the use of Chinese, English characters.
    CountryCode string
    The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example, CN represents China and US represents the United States.
    Locality string
    Name of the city where the organization is located. Support the use of Chinese, English characters.
    Organization string
    The name of the organization (corresponding to your enterprise or company) associated with the root CA certificate. Support the use of Chinese, English characters.
    OrganizationUnit string
    The name of the department or branch under the organization. Support the use of Chinese, English characters.
    State string
    The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters. Name of the province or state where the organization is located. Support the use of Chinese, English characters.
    Status string
    The status of the CA certificate.
    Years int

    The validity period of the root CA certificate, in years.

    NOTE: It is recommended to set to 5 to 10 years.

    Algorithm string
    The key algorithm type of the root CA certificate. The key algorithm is expressed using the '_< key length>' format. Value:

    • RSA_1024: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_2048: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_4096: The corresponding signature algorithm is Sha256WithRSA.
    • ECC_256: The signature algorithm is Sha256WithECDSA.
    • ECC_384: The corresponding signature algorithm is Sha256WithECDSA.
    • ECC_512: The signature algorithm is Sha256WithECDSA.
    • SM2_256: The corresponding signature algorithm is SM3WithSM2. The encryption algorithm of the root CA certificate must be the same as the certificate algorithm of the private Root CA you purchased. Example: If the certificate algorithm selected when you purchase a private Root CA is RSA, the key algorithm of the root CA certificate must be RSA_1024, RSA_2048, or RSA_4096.
    CommonName string
    The common name or abbreviation of the organization. Support the use of Chinese, English characters.
    CountryCode string
    The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example, CN represents China and US represents the United States.
    Locality string
    Name of the city where the organization is located. Support the use of Chinese, English characters.
    Organization string
    The name of the organization (corresponding to your enterprise or company) associated with the root CA certificate. Support the use of Chinese, English characters.
    OrganizationUnit string
    The name of the department or branch under the organization. Support the use of Chinese, English characters.
    State string
    The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters. Name of the province or state where the organization is located. Support the use of Chinese, English characters.
    Status string
    The status of the CA certificate.
    Years int

    The validity period of the root CA certificate, in years.

    NOTE: It is recommended to set to 5 to 10 years.

    algorithm String
    The key algorithm type of the root CA certificate. The key algorithm is expressed using the '_< key length>' format. Value:

    • RSA_1024: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_2048: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_4096: The corresponding signature algorithm is Sha256WithRSA.
    • ECC_256: The signature algorithm is Sha256WithECDSA.
    • ECC_384: The corresponding signature algorithm is Sha256WithECDSA.
    • ECC_512: The signature algorithm is Sha256WithECDSA.
    • SM2_256: The corresponding signature algorithm is SM3WithSM2. The encryption algorithm of the root CA certificate must be the same as the certificate algorithm of the private Root CA you purchased. Example: If the certificate algorithm selected when you purchase a private Root CA is RSA, the key algorithm of the root CA certificate must be RSA_1024, RSA_2048, or RSA_4096.
    commonName String
    The common name or abbreviation of the organization. Support the use of Chinese, English characters.
    countryCode String
    The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example, CN represents China and US represents the United States.
    locality String
    Name of the city where the organization is located. Support the use of Chinese, English characters.
    organization String
    The name of the organization (corresponding to your enterprise or company) associated with the root CA certificate. Support the use of Chinese, English characters.
    organizationUnit String
    The name of the department or branch under the organization. Support the use of Chinese, English characters.
    state String
    The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters. Name of the province or state where the organization is located. Support the use of Chinese, English characters.
    status String
    The status of the CA certificate.
    years Integer

    The validity period of the root CA certificate, in years.

    NOTE: It is recommended to set to 5 to 10 years.

    algorithm string
    The key algorithm type of the root CA certificate. The key algorithm is expressed using the '_< key length>' format. Value:

    • RSA_1024: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_2048: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_4096: The corresponding signature algorithm is Sha256WithRSA.
    • ECC_256: The signature algorithm is Sha256WithECDSA.
    • ECC_384: The corresponding signature algorithm is Sha256WithECDSA.
    • ECC_512: The signature algorithm is Sha256WithECDSA.
    • SM2_256: The corresponding signature algorithm is SM3WithSM2. The encryption algorithm of the root CA certificate must be the same as the certificate algorithm of the private Root CA you purchased. Example: If the certificate algorithm selected when you purchase a private Root CA is RSA, the key algorithm of the root CA certificate must be RSA_1024, RSA_2048, or RSA_4096.
    commonName string
    The common name or abbreviation of the organization. Support the use of Chinese, English characters.
    countryCode string
    The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example, CN represents China and US represents the United States.
    locality string
    Name of the city where the organization is located. Support the use of Chinese, English characters.
    organization string
    The name of the organization (corresponding to your enterprise or company) associated with the root CA certificate. Support the use of Chinese, English characters.
    organizationUnit string
    The name of the department or branch under the organization. Support the use of Chinese, English characters.
    state string
    The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters. Name of the province or state where the organization is located. Support the use of Chinese, English characters.
    status string
    The status of the CA certificate.
    years number

    The validity period of the root CA certificate, in years.

    NOTE: It is recommended to set to 5 to 10 years.

    algorithm str
    The key algorithm type of the root CA certificate. The key algorithm is expressed using the '_< key length>' format. Value:

    • RSA_1024: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_2048: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_4096: The corresponding signature algorithm is Sha256WithRSA.
    • ECC_256: The signature algorithm is Sha256WithECDSA.
    • ECC_384: The corresponding signature algorithm is Sha256WithECDSA.
    • ECC_512: The signature algorithm is Sha256WithECDSA.
    • SM2_256: The corresponding signature algorithm is SM3WithSM2. The encryption algorithm of the root CA certificate must be the same as the certificate algorithm of the private Root CA you purchased. Example: If the certificate algorithm selected when you purchase a private Root CA is RSA, the key algorithm of the root CA certificate must be RSA_1024, RSA_2048, or RSA_4096.
    common_name str
    The common name or abbreviation of the organization. Support the use of Chinese, English characters.
    country_code str
    The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example, CN represents China and US represents the United States.
    locality str
    Name of the city where the organization is located. Support the use of Chinese, English characters.
    organization str
    The name of the organization (corresponding to your enterprise or company) associated with the root CA certificate. Support the use of Chinese, English characters.
    organization_unit str
    The name of the department or branch under the organization. Support the use of Chinese, English characters.
    state str
    The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters. Name of the province or state where the organization is located. Support the use of Chinese, English characters.
    status str
    The status of the CA certificate.
    years int

    The validity period of the root CA certificate, in years.

    NOTE: It is recommended to set to 5 to 10 years.

    algorithm String
    The key algorithm type of the root CA certificate. The key algorithm is expressed using the '_< key length>' format. Value:

    • RSA_1024: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_2048: The corresponding signature algorithm is Sha256WithRSA.
    • RSA_4096: The corresponding signature algorithm is Sha256WithRSA.
    • ECC_256: The signature algorithm is Sha256WithECDSA.
    • ECC_384: The corresponding signature algorithm is Sha256WithECDSA.
    • ECC_512: The signature algorithm is Sha256WithECDSA.
    • SM2_256: The corresponding signature algorithm is SM3WithSM2. The encryption algorithm of the root CA certificate must be the same as the certificate algorithm of the private Root CA you purchased. Example: If the certificate algorithm selected when you purchase a private Root CA is RSA, the key algorithm of the root CA certificate must be RSA_1024, RSA_2048, or RSA_4096.
    commonName String
    The common name or abbreviation of the organization. Support the use of Chinese, English characters.
    countryCode String
    The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example, CN represents China and US represents the United States.
    locality String
    Name of the city where the organization is located. Support the use of Chinese, English characters.
    organization String
    The name of the organization (corresponding to your enterprise or company) associated with the root CA certificate. Support the use of Chinese, English characters.
    organizationUnit String
    The name of the department or branch under the organization. Support the use of Chinese, English characters.
    state String
    The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters. Name of the province or state where the organization is located. Support the use of Chinese, English characters.
    status String
    The status of the CA certificate.
    years Number

    The validity period of the root CA certificate, in years.

    NOTE: It is recommended to set to 5 to 10 years.

    Import

    SSL Certificates Pca Certificate can be imported using the id, e.g.

    $ pulumi import alicloud:sslcertificatesservice/pcaCertificate:PcaCertificate example <id>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Alibaba Cloud pulumi/pulumi-alicloud
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the alicloud Terraform Provider.
    alicloud logo
    Alibaba Cloud v3.85.0 published on Tuesday, Sep 9, 2025 by Pulumi
    pulumi/pulumi-alicloud