published on Monday, Aug 24, 2026 by Pulumi
published on Monday, Aug 24, 2026 by Pulumi
Provides a Certificate Management Service (Original SSL Certificate) Certificate Apply resource.
Submits the certificate application recorded on a certificate instance and exposes the domain ownership validation records that have to be published before the certificate authority can issue the certificate.
For information about Certificate Management Service (Original SSL Certificate) Certificate Apply and how to use it, see What is Certificate Apply.
NOTE: Available since v1.287.0.
NOTE: Creating this resource returns as soon as the application has been submitted; it does not wait for the certificate to be issued. Publish the records from
domainValidationListon your authoritative DNS, then usealicloud.sslcertificatesservicecertificate.Validationto wait for issuance.
NOTE: A certificate instance can have at most one application in progress at a time, which is why this resource is identified by the instance ID.
Example Usage
Basic Usage
import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const config = new pulumi.Config();
const name = config.get("name") || "terraform-example";
const _default = new alicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstance("default", {
productType: "cas",
period: 12,
pricingCycle: 2,
instanceName: name,
domain: "example.com",
validationMethod: "DNS",
parameters: [
{
code: "fullSpec",
value: "ws.dv.f",
},
{
code: "fullDomainCount",
value: "1",
},
],
});
const defaultApply = new alicloud.sslcertificatesservicecertificate.Apply("default", {
instanceId: _default.id,
domain: _default.domain,
validationMethod: _default.validationMethod,
});
export const domainValidationList = defaultApply.domainValidationLists;
import pulumi
import pulumi_alicloud as alicloud
config = pulumi.Config()
name = config.get("name")
if name is None:
name = "terraform-example"
default = alicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstance("default",
product_type="cas",
period=12,
pricing_cycle=2,
instance_name=name,
domain="example.com",
validation_method="DNS",
parameters=[
{
"code": "fullSpec",
"value": "ws.dv.f",
},
{
"code": "fullDomainCount",
"value": "1",
},
])
default_apply = alicloud.sslcertificatesservicecertificate.Apply("default",
instance_id=default.id,
domain=default.domain,
validation_method=default.validation_method)
pulumi.export("domainValidationList", default_apply.domain_validation_lists)
package main
import (
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/sslcertificatesservicecertificate"
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/sslcertificatesserviceinstance"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
cfg := config.New(ctx, "")
name := "terraform-example"
if param := cfg.Get("name"); param != "" {
name = param
}
_default, err := sslcertificatesserviceinstance.NewSslCertificatesServiceInstance(ctx, "default", &sslcertificatesserviceinstance.SslCertificatesServiceInstanceArgs{
ProductType: pulumi.String("cas"),
Period: pulumi.Int(12),
PricingCycle: pulumi.Int(2),
InstanceName: pulumi.String(name),
Domain: pulumi.String("example.com"),
ValidationMethod: pulumi.String("DNS"),
Parameters: sslcertificatesserviceinstance.SslCertificatesServiceInstanceParameterArray{
&sslcertificatesserviceinstance.SslCertificatesServiceInstanceParameterArgs{
Code: pulumi.String("fullSpec"),
Value: pulumi.String("ws.dv.f"),
},
&sslcertificatesserviceinstance.SslCertificatesServiceInstanceParameterArgs{
Code: pulumi.String("fullDomainCount"),
Value: pulumi.String("1"),
},
},
})
if err != nil {
return err
}
defaultApply, err := sslcertificatesservicecertificate.NewApply(ctx, "default", &sslcertificatesservicecertificate.ApplyArgs{
InstanceId: _default.ID().ToIDOutput().ToStringOutput(),
Domain: _default.Domain,
ValidationMethod: _default.ValidationMethod,
})
if err != nil {
return err
}
ctx.Export("domainValidationList", defaultApply.DomainValidationLists)
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
var config = new Config();
var name = config.Get("name") ?? "terraform-example";
var @default = new AliCloud.SslCertificatesServiceInstance.SslCertificatesServiceInstance("default", new()
{
ProductType = "cas",
Period = 12,
PricingCycle = 2,
InstanceName = name,
Domain = "example.com",
ValidationMethod = "DNS",
Parameters = new[]
{
new AliCloud.sslCertificatesServiceInstance.Inputs.SslCertificatesServiceInstanceParameterArgs
{
Code = "fullSpec",
Value = "ws.dv.f",
},
new AliCloud.sslCertificatesServiceInstance.Inputs.SslCertificatesServiceInstanceParameterArgs
{
Code = "fullDomainCount",
Value = "1",
},
},
});
var defaultApply = new AliCloud.SslCertificatesServiceCertificate.Apply("default", new()
{
InstanceId = @default.Id,
Domain = @default.Domain,
ValidationMethod = @default.ValidationMethod,
});
return new Dictionary<string, object?>
{
["domainValidationList"] = defaultApply.DomainValidationLists,
};
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstance;
import com.pulumi.alicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstanceArgs;
import com.pulumi.alicloud.sslcertificatesserviceinstance.inputs.SslCertificatesServiceInstanceParameterArgs;
import com.pulumi.alicloud.sslcertificatesservicecertificate.Apply;
import com.pulumi.alicloud.sslcertificatesservicecertificate.ApplyArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var config = ctx.config();
final var name = config.get("name").orElse("terraform-example");
var default_ = new SslCertificatesServiceInstance("default", SslCertificatesServiceInstanceArgs.builder()
.productType("cas")
.period(12)
.pricingCycle(2)
.instanceName(name)
.domain("example.com")
.validationMethod("DNS")
.parameters(
SslCertificatesServiceInstanceParameterArgs.builder()
.code("fullSpec")
.value("ws.dv.f")
.build(),
SslCertificatesServiceInstanceParameterArgs.builder()
.code("fullDomainCount")
.value("1")
.build())
.build());
var defaultApply = new Apply("defaultApply", ApplyArgs.builder()
.instanceId(default_.id())
.domain(default_.domain())
.validationMethod(default_.validationMethod())
.build());
ctx.export("domainValidationList", defaultApply.domainValidationLists());
}
}
configuration:
name:
type: string
default: terraform-example
resources:
default:
type: alicloud:sslcertificatesserviceinstance:SslCertificatesServiceInstance
properties:
productType: cas
period: 12
pricingCycle: 2
instanceName: ${name}
domain: example.com
validationMethod: DNS
parameters:
- code: fullSpec
value: ws.dv.f
- code: fullDomainCount
value: '1'
defaultApply:
type: alicloud:sslcertificatesservicecertificate:Apply
name: default
properties:
instanceId: ${default.id}
domain: ${default.domain}
validationMethod: ${default.validationMethod}
outputs:
domainValidationList: ${defaultApply.domainValidationLists}
pulumi {
required_providers {
alicloud = {
source = "pulumi/alicloud"
}
}
}
resource "alicloud_sslcertificatesserviceinstance_sslcertificatesserviceinstance" "default" {
product_type = "cas"
period = 12
pricing_cycle = 2
instance_name = var.name
domain = "example.com"
validation_method = "DNS"
parameters {
code = "fullSpec"
value = "ws.dv.f"
}
parameters {
code = "fullDomainCount"
value = "1"
}
}
resource "alicloud_sslcertificatesservicecertificate_apply" "default" {
instance_id = alicloud_sslcertificatesserviceinstance_sslcertificatesserviceinstance.default.id
domain = alicloud_sslcertificatesserviceinstance_sslcertificatesserviceinstance.default.domain
validation_method = alicloud_sslcertificatesserviceinstance_sslcertificatesserviceinstance.default.validation_method
}
variable "name" {
type = string
default = "terraform-example"
}
output "domainValidationList" {
value = alicloud_sslcertificatesservicecertificate_apply.default.domain_validation_lists
}
📚 Need more examples? VIEW MORE EXAMPLES
Create Apply Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Apply(name: string, args: ApplyArgs, opts?: CustomResourceOptions);@overload
def Apply(resource_name: str,
args: ApplyArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Apply(resource_name: str,
opts: Optional[ResourceOptions] = None,
instance_id: Optional[str] = None,
csr: Optional[str] = None,
domain: Optional[str] = None,
generate_csr_method: Optional[str] = None,
key_algorithm: Optional[str] = None,
validation_method: Optional[str] = None)func NewApply(ctx *Context, name string, args ApplyArgs, opts ...ResourceOption) (*Apply, error)public Apply(string name, ApplyArgs args, CustomResourceOptions? opts = null)type: alicloud:sslcertificatesservicecertificate:Apply
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "alicloud_sslcertificatesservicecertificate_apply" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args ApplyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ApplyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ApplyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ApplyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ApplyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var applyResource = new AliCloud.SslCertificatesServiceCertificate.Apply("applyResource", new()
{
InstanceId = "string",
Csr = "string",
Domain = "string",
GenerateCsrMethod = "string",
KeyAlgorithm = "string",
ValidationMethod = "string",
});
example, err := sslcertificatesservicecertificate.NewApply(ctx, "applyResource", &sslcertificatesservicecertificate.ApplyArgs{
InstanceId: pulumi.String("string"),
Csr: pulumi.String("string"),
Domain: pulumi.String("string"),
GenerateCsrMethod: pulumi.String("string"),
KeyAlgorithm: pulumi.String("string"),
ValidationMethod: pulumi.String("string"),
})
resource "alicloud_sslcertificatesservicecertificate_apply" "applyResource" {
lifecycle {
create_before_destroy = true
}
instance_id = "string"
csr = "string"
domain = "string"
generate_csr_method = "string"
key_algorithm = "string"
validation_method = "string"
}
var applyResource = new Apply("applyResource", ApplyArgs.builder()
.instanceId("string")
.csr("string")
.domain("string")
.generateCsrMethod("string")
.keyAlgorithm("string")
.validationMethod("string")
.build());
apply_resource = alicloud.sslcertificatesservicecertificate.Apply("applyResource",
instance_id="string",
csr="string",
domain="string",
generate_csr_method="string",
key_algorithm="string",
validation_method="string")
const applyResource = new alicloud.sslcertificatesservicecertificate.Apply("applyResource", {
instanceId: "string",
csr: "string",
domain: "string",
generateCsrMethod: "string",
keyAlgorithm: "string",
validationMethod: "string",
});
type: alicloud:sslcertificatesservicecertificate:Apply
properties:
csr: string
domain: string
generateCsrMethod: string
instanceId: string
keyAlgorithm: string
validationMethod: string
Apply Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Apply resource accepts the following input properties:
- Instance
Id string - The ID of the certificate instance to submit the application on.
- Csr string
- The content of the certificate signing request.
- Domain string
- The domain names the certificate is requested for, separated by commas.
- Generate
Csr stringMethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- Key
Algorithm string - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - Validation
Method string - The domain ownership validation method. Valid values:
DNSandHTTP.
- Instance
Id string - The ID of the certificate instance to submit the application on.
- Csr string
- The content of the certificate signing request.
- Domain string
- The domain names the certificate is requested for, separated by commas.
- Generate
Csr stringMethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- Key
Algorithm string - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - Validation
Method string - The domain ownership validation method. Valid values:
DNSandHTTP.
- instance_
id string - The ID of the certificate instance to submit the application on.
- csr string
- The content of the certificate signing request.
- domain string
- The domain names the certificate is requested for, separated by commas.
- generate_
csr_ stringmethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- key_
algorithm string - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - validation_
method string - The domain ownership validation method. Valid values:
DNSandHTTP.
- instance
Id String - The ID of the certificate instance to submit the application on.
- csr String
- The content of the certificate signing request.
- domain String
- The domain names the certificate is requested for, separated by commas.
- generate
Csr StringMethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- key
Algorithm String - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - validation
Method String - The domain ownership validation method. Valid values:
DNSandHTTP.
- instance
Id string - The ID of the certificate instance to submit the application on.
- csr string
- The content of the certificate signing request.
- domain string
- The domain names the certificate is requested for, separated by commas.
- generate
Csr stringMethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- key
Algorithm string - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - validation
Method string - The domain ownership validation method. Valid values:
DNSandHTTP.
- instance_
id str - The ID of the certificate instance to submit the application on.
- csr str
- The content of the certificate signing request.
- domain str
- The domain names the certificate is requested for, separated by commas.
- generate_
csr_ strmethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- key_
algorithm str - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - validation_
method str - The domain ownership validation method. Valid values:
DNSandHTTP.
- instance
Id String - The ID of the certificate instance to submit the application on.
- csr String
- The content of the certificate signing request.
- domain String
- The domain names the certificate is requested for, separated by commas.
- generate
Csr StringMethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- key
Algorithm String - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - validation
Method String - The domain ownership validation method. Valid values:
DNSandHTTP.
Outputs
All input properties are implicitly available as output properties. Additionally, the Apply resource produces the following output properties:
- Cert
Identifier string - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- Certificate
Id int - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- Certificate
Status string - The status of the certificate this application produces.
- Domain
Validation List<Pulumi.Lists Ali Cloud.ssl Certificates Service Certificate. Outputs. Apply Domain Validation List> - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- Id string
- The provider-assigned unique ID for this managed resource.
- Pending
Result string - The reason the application is pending, if the review has not passed.
- Cert
Identifier string - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- Certificate
Id int - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- Certificate
Status string - The status of the certificate this application produces.
- Domain
Validation []ApplyLists Domain Validation List - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- Id string
- The provider-assigned unique ID for this managed resource.
- Pending
Result string - The reason the application is pending, if the review has not passed.
- cert_
identifier string - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate_
id number - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate_
status string - The status of the certificate this application produces.
- domain_
validation_ list(object)lists - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- id string
- The provider-assigned unique ID for this managed resource.
- pending_
result string - The reason the application is pending, if the review has not passed.
- cert
Identifier String - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate
Id Integer - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate
Status String - The status of the certificate this application produces.
- domain
Validation List<ApplyLists Domain Validation List> - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- id String
- The provider-assigned unique ID for this managed resource.
- pending
Result String - The reason the application is pending, if the review has not passed.
- cert
Identifier string - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate
Id number - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate
Status string - The status of the certificate this application produces.
- domain
Validation ApplyLists Domain Validation List[] - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- id string
- The provider-assigned unique ID for this managed resource.
- pending
Result string - The reason the application is pending, if the review has not passed.
- cert_
identifier str - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate_
id int - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate_
status str - The status of the certificate this application produces.
- domain_
validation_ Sequence[Applylists Domain Validation List] - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- id str
- The provider-assigned unique ID for this managed resource.
- pending_
result str - The reason the application is pending, if the review has not passed.
- cert
Identifier String - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate
Id Number - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate
Status String - The status of the certificate this application produces.
- domain
Validation List<Property Map>Lists - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- id String
- The provider-assigned unique ID for this managed resource.
- pending
Result String - The reason the application is pending, if the review has not passed.
Look up Existing Apply Resource
Get an existing Apply resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ApplyState, opts?: CustomResourceOptions): Apply@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
cert_identifier: Optional[str] = None,
certificate_id: Optional[int] = None,
certificate_status: Optional[str] = None,
csr: Optional[str] = None,
domain: Optional[str] = None,
domain_validation_lists: Optional[Sequence[ApplyDomainValidationListArgs]] = None,
generate_csr_method: Optional[str] = None,
instance_id: Optional[str] = None,
key_algorithm: Optional[str] = None,
pending_result: Optional[str] = None,
validation_method: Optional[str] = None) -> Applyfunc GetApply(ctx *Context, name string, id IDInput, state *ApplyState, opts ...ResourceOption) (*Apply, error)public static Apply Get(string name, Input<string> id, ApplyState? state, CustomResourceOptions? opts = null)public static Apply get(String name, Output<String> id, ApplyState state, CustomResourceOptions options)resources: _: type: alicloud:sslcertificatesservicecertificate:Apply get: id: ${id}import {
to = alicloud_sslcertificatesservicecertificate_apply.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Cert
Identifier string - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- Certificate
Id int - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- Certificate
Status string - The status of the certificate this application produces.
- Csr string
- The content of the certificate signing request.
- Domain string
- The domain names the certificate is requested for, separated by commas.
- Domain
Validation List<Pulumi.Lists Ali Cloud.ssl Certificates Service Certificate. Inputs. Apply Domain Validation List> - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- Generate
Csr stringMethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- Instance
Id string - The ID of the certificate instance to submit the application on.
- Key
Algorithm string - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - Pending
Result string - The reason the application is pending, if the review has not passed.
- Validation
Method string - The domain ownership validation method. Valid values:
DNSandHTTP.
- Cert
Identifier string - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- Certificate
Id int - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- Certificate
Status string - The status of the certificate this application produces.
- Csr string
- The content of the certificate signing request.
- Domain string
- The domain names the certificate is requested for, separated by commas.
- Domain
Validation []ApplyLists Domain Validation List Args - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- Generate
Csr stringMethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- Instance
Id string - The ID of the certificate instance to submit the application on.
- Key
Algorithm string - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - Pending
Result string - The reason the application is pending, if the review has not passed.
- Validation
Method string - The domain ownership validation method. Valid values:
DNSandHTTP.
- cert_
identifier string - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate_
id number - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate_
status string - The status of the certificate this application produces.
- csr string
- The content of the certificate signing request.
- domain string
- The domain names the certificate is requested for, separated by commas.
- domain_
validation_ list(object)lists - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- generate_
csr_ stringmethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- instance_
id string - The ID of the certificate instance to submit the application on.
- key_
algorithm string - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - pending_
result string - The reason the application is pending, if the review has not passed.
- validation_
method string - The domain ownership validation method. Valid values:
DNSandHTTP.
- cert
Identifier String - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate
Id Integer - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate
Status String - The status of the certificate this application produces.
- csr String
- The content of the certificate signing request.
- domain String
- The domain names the certificate is requested for, separated by commas.
- domain
Validation List<ApplyLists Domain Validation List> - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- generate
Csr StringMethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- instance
Id String - The ID of the certificate instance to submit the application on.
- key
Algorithm String - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - pending
Result String - The reason the application is pending, if the review has not passed.
- validation
Method String - The domain ownership validation method. Valid values:
DNSandHTTP.
- cert
Identifier string - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate
Id number - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate
Status string - The status of the certificate this application produces.
- csr string
- The content of the certificate signing request.
- domain string
- The domain names the certificate is requested for, separated by commas.
- domain
Validation ApplyLists Domain Validation List[] - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- generate
Csr stringMethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- instance
Id string - The ID of the certificate instance to submit the application on.
- key
Algorithm string - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - pending
Result string - The reason the application is pending, if the review has not passed.
- validation
Method string - The domain ownership validation method. Valid values:
DNSandHTTP.
- cert_
identifier str - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate_
id int - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate_
status str - The status of the certificate this application produces.
- csr str
- The content of the certificate signing request.
- domain str
- The domain names the certificate is requested for, separated by commas.
- domain_
validation_ Sequence[Applylists Domain Validation List Args] - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- generate_
csr_ strmethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- instance_
id str - The ID of the certificate instance to submit the application on.
- key_
algorithm str - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - pending_
result str - The reason the application is pending, if the review has not passed.
- validation_
method str - The domain ownership validation method. Valid values:
DNSandHTTP.
- cert
Identifier String - The global certificate identifier of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate
Id Number - The ID of the certificate produced by this application. Populated only after the certificate has been issued.
- certificate
Status String - The status of the certificate this application produces.
- csr String
- The content of the certificate signing request.
- domain String
- The domain names the certificate is requested for, separated by commas.
- domain
Validation List<Property Map>Lists - The domain ownership validation records that have to be published before the certificate authority can validate the domains. It contains the following attributes:
- generate
Csr StringMethod How the certificate signing request is produced. Valid values:
onlineandupload.NOTE: The five application settings above are stored on the certificate instance and are written there by the instance resource.
ApplyCertificateaccepts none of them — it submits whatever the instance holds at that moment. They are accepted here so that changing one of them replaces this resource and resubmits the application, since a different configuration means a different certificate is being requested. Reference the corresponding attribute ofalicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstancerather than hardcoding a value; a configured value that disagrees with the instance is rejected when the resource is created.- instance
Id String - The ID of the certificate instance to submit the application on.
- key
Algorithm String - The key algorithm the certificate is issued with, such as
RSA_2048,RSA_4096,ECC_256orSM2. - pending
Result String - The reason the application is pending, if the review has not passed.
- validation
Method String - The domain ownership validation method. Valid values:
DNSandHTTP.
Supporting Types
ApplyDomainValidationList, ApplyDomainValidationListArgs
- Cname string
- The record value used when the domain is validated through a CNAME record.
- Cname
Key string - The host record used when the domain is validated through a CNAME record.
- Domain string
- The domain names the certificate is requested for, separated by commas.
- Root
Domain string - The root domain of the domain name to be validated. Use this value to locate the DNS zone when adding the validation record.
- Validation
Key string - The host record of the validation record.
- Validation
Type string - The type of the validation record. Valid values:
TXT,CNAMEandFILE. - Validation
Value string - The value of the validation record.
- Cname string
- The record value used when the domain is validated through a CNAME record.
- Cname
Key string - The host record used when the domain is validated through a CNAME record.
- Domain string
- The domain names the certificate is requested for, separated by commas.
- Root
Domain string - The root domain of the domain name to be validated. Use this value to locate the DNS zone when adding the validation record.
- Validation
Key string - The host record of the validation record.
- Validation
Type string - The type of the validation record. Valid values:
TXT,CNAMEandFILE. - Validation
Value string - The value of the validation record.
- cname string
- The record value used when the domain is validated through a CNAME record.
- cname_
key string - The host record used when the domain is validated through a CNAME record.
- domain string
- The domain names the certificate is requested for, separated by commas.
- root_
domain string - The root domain of the domain name to be validated. Use this value to locate the DNS zone when adding the validation record.
- validation_
key string - The host record of the validation record.
- validation_
type string - The type of the validation record. Valid values:
TXT,CNAMEandFILE. - validation_
value string - The value of the validation record.
- cname String
- The record value used when the domain is validated through a CNAME record.
- cname
Key String - The host record used when the domain is validated through a CNAME record.
- domain String
- The domain names the certificate is requested for, separated by commas.
- root
Domain String - The root domain of the domain name to be validated. Use this value to locate the DNS zone when adding the validation record.
- validation
Key String - The host record of the validation record.
- validation
Type String - The type of the validation record. Valid values:
TXT,CNAMEandFILE. - validation
Value String - The value of the validation record.
- cname string
- The record value used when the domain is validated through a CNAME record.
- cname
Key string - The host record used when the domain is validated through a CNAME record.
- domain string
- The domain names the certificate is requested for, separated by commas.
- root
Domain string - The root domain of the domain name to be validated. Use this value to locate the DNS zone when adding the validation record.
- validation
Key string - The host record of the validation record.
- validation
Type string - The type of the validation record. Valid values:
TXT,CNAMEandFILE. - validation
Value string - The value of the validation record.
- cname str
- The record value used when the domain is validated through a CNAME record.
- cname_
key str - The host record used when the domain is validated through a CNAME record.
- domain str
- The domain names the certificate is requested for, separated by commas.
- root_
domain str - The root domain of the domain name to be validated. Use this value to locate the DNS zone when adding the validation record.
- validation_
key str - The host record of the validation record.
- validation_
type str - The type of the validation record. Valid values:
TXT,CNAMEandFILE. - validation_
value str - The value of the validation record.
- cname String
- The record value used when the domain is validated through a CNAME record.
- cname
Key String - The host record used when the domain is validated through a CNAME record.
- domain String
- The domain names the certificate is requested for, separated by commas.
- root
Domain String - The root domain of the domain name to be validated. Use this value to locate the DNS zone when adding the validation record.
- validation
Key String - The host record of the validation record.
- validation
Type String - The type of the validation record. Valid values:
TXT,CNAMEandFILE. - validation
Value String - The value of the validation record.
Import
Certificate Management Service (Original SSL Certificate) Certificate Apply can be imported using the id, e.g.
$ pulumi import alicloud:sslcertificatesservicecertificate/apply:Apply example <instance_id>
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Alibaba Cloud pulumi/pulumi-alicloud
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
alicloudTerraform Provider.
published on Monday, Aug 24, 2026 by Pulumi