Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Alibaba Cloud Provider
  4. API Docs
  5. sslcertificatesserviceinstance
  6. SslCertificatesServiceInstance
Viewing docs for Alibaba Cloud v3.106.0
published on Monday, Aug 24, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-alicloud

alicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstance

alicloud logo alicloud logo
Viewing docs for Alibaba Cloud v3.106.0
published on Monday, Aug 24, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-alicloud

    Provides a Certificate Management Service (Original SSL Certificate) Instance resource.

    For information about Certificate Management Service (Original SSL Certificate) Instance and how to use it, see What is Instance.

    NOTE: Available since v1.287.0.

    NOTE: This resource manages the certificate instance — the purchased subscription slot that a certificate can later be issued into — and the certificate application details recorded on it. It does not submit the certificate application and does not issue a certificate. A newly created instance stays in the inactive state. Submitting the application against this instance is done with alicloud.sslcertificatesservicecertificate.Apply; publishing the domain validation records it reports, and waiting for the certificate authority to issue the certificate, are separate steps again.

    NOTE: Creating this resource places a real prepaid subscription order through BssOpenApi::CreateInstance and is billed on creation. The available specifications and their prices differ per account; call DescribePricingModule with ProductCode and ProductType set to cas to list what your account can order. Destroying the resource refunds the order when the instance is still protected, then deletes it.

    Example Usage

    Basic Usage

    import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";

const config = new pulumi.Config();
const name = config.get("name") || "terraform-example";
const _default = new alicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstance("default", {
    productType: "cas",
    period: 12,
    pricingCycle: 2,
    instanceName: name,
    parameters: [
        {
            code: "fullSpec",
            value: "ws.dv.f",
        },
        {
            code: "fullDomainCount",
            value: "1",
        },
    ],
});

    import pulumi
import pulumi_alicloud as alicloud

config = pulumi.Config()
name = config.get("name")
if name is None:
    name = "terraform-example"
default = alicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstance("default",
    product_type="cas",
    period=12,
    pricing_cycle=2,
    instance_name=name,
    parameters=[
        {
            "code": "fullSpec",
            "value": "ws.dv.f",
        },
        {
            "code": "fullDomainCount",
            "value": "1",
        },
    ])

    package main

import (
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/sslcertificatesserviceinstance"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		name := "terraform-example"
		if param := cfg.Get("name"); param != "" {
			name = param
		}
		_, err := sslcertificatesserviceinstance.NewSslCertificatesServiceInstance(ctx, "default", &sslcertificatesserviceinstance.SslCertificatesServiceInstanceArgs{
			ProductType:  pulumi.String("cas"),
			Period:       pulumi.Int(12),
			PricingCycle: pulumi.Int(2),
			InstanceName: pulumi.String(name),
			Parameters: sslcertificatesserviceinstance.SslCertificatesServiceInstanceParameterArray{
				&sslcertificatesserviceinstance.SslCertificatesServiceInstanceParameterArgs{
					Code:  pulumi.String("fullSpec"),
					Value: pulumi.String("ws.dv.f"),
				},
				&sslcertificatesserviceinstance.SslCertificatesServiceInstanceParameterArgs{
					Code:  pulumi.String("fullDomainCount"),
					Value: pulumi.String("1"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var name = config.Get("name") ?? "terraform-example";
    var @default = new AliCloud.SslCertificatesServiceInstance.SslCertificatesServiceInstance("default", new()
    {
        ProductType = "cas",
        Period = 12,
        PricingCycle = 2,
        InstanceName = name,
        Parameters = new[]
        {
            new AliCloud.sslCertificatesServiceInstance.Inputs.SslCertificatesServiceInstanceParameterArgs
            {
                Code = "fullSpec",
                Value = "ws.dv.f",
            },
            new AliCloud.sslCertificatesServiceInstance.Inputs.SslCertificatesServiceInstanceParameterArgs
            {
                Code = "fullDomainCount",
                Value = "1",
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstance;
import com.pulumi.alicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstanceArgs;
import com.pulumi.alicloud.sslcertificatesserviceinstance.inputs.SslCertificatesServiceInstanceParameterArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var name = config.get("name").orElse("terraform-example");
        var default_ = new SslCertificatesServiceInstance("default", SslCertificatesServiceInstanceArgs.builder()
            .productType("cas")
            .period(12)
            .pricingCycle(2)
            .instanceName(name)
            .parameters(            
                SslCertificatesServiceInstanceParameterArgs.builder()
                    .code("fullSpec")
                    .value("ws.dv.f")
                    .build(),
                SslCertificatesServiceInstanceParameterArgs.builder()
                    .code("fullDomainCount")
                    .value("1")
                    .build())
            .build());

    }
}

    configuration:
  name:
    type: string
    default: terraform-example
resources:
  default:
    type: alicloud:sslcertificatesserviceinstance:SslCertificatesServiceInstance
    properties:
      productType: cas
      period: 12
      pricingCycle: 2
      instanceName: ${name}
      parameters:
        - code: fullSpec
          value: ws.dv.f
        - code: fullDomainCount
          value: '1'

    pulumi {
  required_providers {
    alicloud = {
      source = "pulumi/alicloud"
    }
  }
}

resource "alicloud_sslcertificatesserviceinstance_sslcertificatesserviceinstance" "default" {
  product_type  = "cas"
  period        = 12
  pricing_cycle = 2
  instance_name = var.name
  parameters {
    code  = "fullSpec"
    value = "ws.dv.f"
  }
  parameters {
    code  = "fullDomainCount"
    value = "1"
  }
}
variable "name" {
  type    = string
  default = "terraform-example"
}

    📚 Need more examples? VIEW MORE EXAMPLES

    Create SslCertificatesServiceInstance Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new SslCertificatesServiceInstance(name: string, args?: SslCertificatesServiceInstanceArgs, opts?: CustomResourceOptions);
    @overload
def SslCertificatesServiceInstance(resource_name: str,
                                   args: Optional[SslCertificatesServiceInstanceArgs] = None,
                                   opts: Optional[ResourceOptions] = None)

@overload
def SslCertificatesServiceInstance(resource_name: str,
                                   opts: Optional[ResourceOptions] = None,
                                   auto_reissue: Optional[str] = None,
                                   company_id: Optional[str] = None,
                                   contact_id_lists: Optional[Sequence[int]] = None,
                                   country_code: Optional[str] = None,
                                   csr: Optional[str] = None,
                                   domain: Optional[str] = None,
                                   generate_csr_method: Optional[str] = None,
                                   instance_name: Optional[str] = None,
                                   key_algorithm: Optional[str] = None,
                                   parameters: Optional[Sequence[SslCertificatesServiceInstanceParameterArgs]] = None,
                                   period: Optional[int] = None,
                                   pricing_cycle: Optional[int] = None,
                                   product_type: Optional[str] = None,
                                   resource_group_id: Optional[str] = None,
                                   tags: Optional[Mapping[str, str]] = None,
                                   validation_method: Optional[str] = None)
    func NewSslCertificatesServiceInstance(ctx *Context, name string, args *SslCertificatesServiceInstanceArgs, opts ...ResourceOption) (*SslCertificatesServiceInstance, error)
    public SslCertificatesServiceInstance(string name, SslCertificatesServiceInstanceArgs? args = null, CustomResourceOptions? opts = null)
    public SslCertificatesServiceInstance(String name, SslCertificatesServiceInstanceArgs args)
public SslCertificatesServiceInstance(String name, SslCertificatesServiceInstanceArgs args, CustomResourceOptions options)

    type: alicloud:sslcertificatesserviceinstance:SslCertificatesServiceInstance
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "alicloud_sslcertificatesserviceinstance_ssl_certificates_service_instance" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args SslCertificatesServiceInstanceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SslCertificatesServiceInstanceArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SslCertificatesServiceInstanceArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SslCertificatesServiceInstanceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SslCertificatesServiceInstanceArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var sslCertificatesServiceInstanceResource = new AliCloud.SslCertificatesServiceInstance.SslCertificatesServiceInstance("sslCertificatesServiceInstanceResource", new()
{
    AutoReissue = "string",
    CompanyId = "string",
    ContactIdLists = new[]
    {
        0,
    },
    CountryCode = "string",
    Csr = "string",
    Domain = "string",
    GenerateCsrMethod = "string",
    InstanceName = "string",
    KeyAlgorithm = "string",
    Parameters = new[]
    {
        new AliCloud.sslCertificatesServiceInstance.Inputs.SslCertificatesServiceInstanceParameterArgs
        {
            Code = "string",
            Value = "string",
        },
    },
    Period = 0,
    PricingCycle = 0,
    ProductType = "string",
    ResourceGroupId = "string",
    Tags = 
    {
        { "string", "string" },
    },
    ValidationMethod = "string",
});

    example, err := sslcertificatesserviceinstance.NewSslCertificatesServiceInstance(ctx, "sslCertificatesServiceInstanceResource", &sslcertificatesserviceinstance.SslCertificatesServiceInstanceArgs{
	AutoReissue: pulumi.String("string"),
	CompanyId:   pulumi.String("string"),
	ContactIdLists: pulumi.IntArray{
		pulumi.Int(0),
	},
	CountryCode:       pulumi.String("string"),
	Csr:               pulumi.String("string"),
	Domain:            pulumi.String("string"),
	GenerateCsrMethod: pulumi.String("string"),
	InstanceName:      pulumi.String("string"),
	KeyAlgorithm:      pulumi.String("string"),
	Parameters: sslcertificatesserviceinstance.SslCertificatesServiceInstanceParameterArray{
		&sslcertificatesserviceinstance.SslCertificatesServiceInstanceParameterArgs{
			Code:  pulumi.String("string"),
			Value: pulumi.String("string"),
		},
	},
	Period:          pulumi.Int(0),
	PricingCycle:    pulumi.Int(0),
	ProductType:     pulumi.String("string"),
	ResourceGroupId: pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	ValidationMethod: pulumi.String("string"),
})

    resource "alicloud_sslcertificatesserviceinstance_ssl_certificates_service_instance" "sslCertificatesServiceInstanceResource" {
  lifecycle {
    create_before_destroy = true
  }
  auto_reissue        = "string"
  company_id          = "string"
  contact_id_lists    = [0]
  country_code        = "string"
  csr                 = "string"
  domain              = "string"
  generate_csr_method = "string"
  instance_name       = "string"
  key_algorithm       = "string"
  parameters {
    code  = "string"
    value = "string"
  }
  period            = 0
  pricing_cycle     = 0
  product_type      = "string"
  resource_group_id = "string"
  tags = {
    "string" = "string"
  }
  validation_method = "string"
}

    var sslCertificatesServiceInstanceResource = new SslCertificatesServiceInstance("sslCertificatesServiceInstanceResource", SslCertificatesServiceInstanceArgs.builder()
    .autoReissue("string")
    .companyId("string")
    .contactIdLists(0)
    .countryCode("string")
    .csr("string")
    .domain("string")
    .generateCsrMethod("string")
    .instanceName("string")
    .keyAlgorithm("string")
    .parameters(SslCertificatesServiceInstanceParameterArgs.builder()
        .code("string")
        .value("string")
        .build())
    .period(0)
    .pricingCycle(0)
    .productType("string")
    .resourceGroupId("string")
    .tags(Map.of("string", "string"))
    .validationMethod("string")
    .build());

    ssl_certificates_service_instance_resource = alicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstance("sslCertificatesServiceInstanceResource",
    auto_reissue="string",
    company_id="string",
    contact_id_lists=[0],
    country_code="string",
    csr="string",
    domain="string",
    generate_csr_method="string",
    instance_name="string",
    key_algorithm="string",
    parameters=[{
        "code": "string",
        "value": "string",
    }],
    period=0,
    pricing_cycle=0,
    product_type="string",
    resource_group_id="string",
    tags={
        "string": "string",
    },
    validation_method="string")

    const sslCertificatesServiceInstanceResource = new alicloud.sslcertificatesserviceinstance.SslCertificatesServiceInstance("sslCertificatesServiceInstanceResource", {
    autoReissue: "string",
    companyId: "string",
    contactIdLists: [0],
    countryCode: "string",
    csr: "string",
    domain: "string",
    generateCsrMethod: "string",
    instanceName: "string",
    keyAlgorithm: "string",
    parameters: [{
        code: "string",
        value: "string",
    }],
    period: 0,
    pricingCycle: 0,
    productType: "string",
    resourceGroupId: "string",
    tags: {
        string: "string",
    },
    validationMethod: "string",
});

    type: alicloud:sslcertificatesserviceinstance:SslCertificatesServiceInstance
properties:
    autoReissue: string
    companyId: string
    contactIdLists:
        - 0
    countryCode: string
    csr: string
    domain: string
    generateCsrMethod: string
    instanceName: string
    keyAlgorithm: string
    parameters:
        - code: string
          value: string
    period: 0
    pricingCycle: 0
    productType: string
    resourceGroupId: string
    tags:
        string: string
    validationMethod: string

    SslCertificatesServiceInstance Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The SslCertificatesServiceInstance resource accepts the following input properties:

    AutoReissue string

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    CompanyId string

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    ContactIdLists List<int>
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    CountryCode string
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    Csr string
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    Domain string

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    GenerateCsrMethod string
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    InstanceName string
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    KeyAlgorithm string
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    Parameters List<Pulumi.AliCloud.sslCertificatesServiceInstance.Inputs.SslCertificatesServiceInstanceParameter>

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    Period int

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    PricingCycle int

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    ProductType string

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    ResourceGroupId string
    The ID of the resource group.
    Tags Dictionary<string, string>
    The list of tags.
    ValidationMethod string
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    AutoReissue string

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    CompanyId string

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    ContactIdLists []int
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    CountryCode string
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    Csr string
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    Domain string

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    GenerateCsrMethod string
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    InstanceName string
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    KeyAlgorithm string
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    Parameters []SslCertificatesServiceInstanceParameterArgs

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    Period int

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    PricingCycle int

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    ProductType string

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    ResourceGroupId string
    The ID of the resource group.
    Tags map[string]string
    The list of tags.
    ValidationMethod string
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    auto_reissue string

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    company_id string

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    contact_id_lists list(number)
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    country_code string
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    csr string
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    domain string

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    generate_csr_method string
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    instance_name string
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    key_algorithm string
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    parameters list(object)

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    period number

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    pricing_cycle number

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    product_type string

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    resource_group_id string
    The ID of the resource group.
    tags map(string)
    The list of tags.
    validation_method string
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    autoReissue String

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    companyId String

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    contactIdLists List<Integer>
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    countryCode String
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    csr String
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    domain String

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    generateCsrMethod String
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    instanceName String
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    keyAlgorithm String
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    parameters List<SslCertificatesServiceInstanceParameter>

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    period Integer

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    pricingCycle Integer

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    productType String

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    resourceGroupId String
    The ID of the resource group.
    tags Map<String,String>
    The list of tags.
    validationMethod String
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    autoReissue string

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    companyId string

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    contactIdLists number[]
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    countryCode string
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    csr string
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    domain string

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    generateCsrMethod string
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    instanceName string
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    keyAlgorithm string
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    parameters SslCertificatesServiceInstanceParameter[]

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    period number

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    pricingCycle number

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    productType string

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    resourceGroupId string
    The ID of the resource group.
    tags {[key: string]: string}
    The list of tags.
    validationMethod string
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    auto_reissue str

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    company_id str

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    contact_id_lists Sequence[int]
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    country_code str
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    csr str
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    domain str

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    generate_csr_method str
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    instance_name str
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    key_algorithm str
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    parameters Sequence[SslCertificatesServiceInstanceParameterArgs]

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    period int

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    pricing_cycle int

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    product_type str

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    resource_group_id str
    The ID of the resource group.
    tags Mapping[str, str]
    The list of tags.
    validation_method str
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    autoReissue String

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    companyId String

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    contactIdLists List<Number>
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    countryCode String
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    csr String
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    domain String

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    generateCsrMethod String
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    instanceName String
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    keyAlgorithm String
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    parameters List<Property Map>

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    period Number

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    pricingCycle Number

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    productType String

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    resourceGroupId String
    The ID of the resource group.
    tags Map<String>
    The list of tags.
    validationMethod String
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the SslCertificatesServiceInstance resource produces the following output properties:

    AverageWaitingTime string
    Average waiting time for issuing a certificate of this specification, in seconds.
    Brand string
    The certificate brand.
    CertificateType string
    The type of the certificate.
    City string
    The city of the address recorded on the instance.
    FullDomainCount int
    The number of single domain names included in the instance.
    Id string
    The provider-assigned unique ID for this managed resource.
    InstanceEndTime int
    Instance expiration time, a UNIX timestamp in seconds.
    InstanceStartTime int
    Instance start time, a UNIX timestamp in seconds.
    InstanceType string
    The instance type.
    OrderEndTime int
    Order end time, a UNIX timestamp in seconds.
    OrderStartTime int
    Order start time, a UNIX timestamp in seconds.
    Province string
    The province or region of the address recorded on the instance.
    Spec string
    The specification of the purchased instance.
    Status string
    The instance status.
    UpgradeStatus string
    The upgrade status of the instance.
    WildcardDomainCount int
    The number of wildcard domain names included in the instance.
    AverageWaitingTime string
    Average waiting time for issuing a certificate of this specification, in seconds.
    Brand string
    The certificate brand.
    CertificateType string
    The type of the certificate.
    City string
    The city of the address recorded on the instance.
    FullDomainCount int
    The number of single domain names included in the instance.
    Id string
    The provider-assigned unique ID for this managed resource.
    InstanceEndTime int
    Instance expiration time, a UNIX timestamp in seconds.
    InstanceStartTime int
    Instance start time, a UNIX timestamp in seconds.
    InstanceType string
    The instance type.
    OrderEndTime int
    Order end time, a UNIX timestamp in seconds.
    OrderStartTime int
    Order start time, a UNIX timestamp in seconds.
    Province string
    The province or region of the address recorded on the instance.
    Spec string
    The specification of the purchased instance.
    Status string
    The instance status.
    UpgradeStatus string
    The upgrade status of the instance.
    WildcardDomainCount int
    The number of wildcard domain names included in the instance.
    average_waiting_time string
    Average waiting time for issuing a certificate of this specification, in seconds.
    brand string
    The certificate brand.
    certificate_type string
    The type of the certificate.
    city string
    The city of the address recorded on the instance.
    full_domain_count number
    The number of single domain names included in the instance.
    id string
    The provider-assigned unique ID for this managed resource.
    instance_end_time number
    Instance expiration time, a UNIX timestamp in seconds.
    instance_start_time number
    Instance start time, a UNIX timestamp in seconds.
    instance_type string
    The instance type.
    order_end_time number
    Order end time, a UNIX timestamp in seconds.
    order_start_time number
    Order start time, a UNIX timestamp in seconds.
    province string
    The province or region of the address recorded on the instance.
    spec string
    The specification of the purchased instance.
    status string
    The instance status.
    upgrade_status string
    The upgrade status of the instance.
    wildcard_domain_count number
    The number of wildcard domain names included in the instance.
    averageWaitingTime String
    Average waiting time for issuing a certificate of this specification, in seconds.
    brand String
    The certificate brand.
    certificateType String
    The type of the certificate.
    city String
    The city of the address recorded on the instance.
    fullDomainCount Integer
    The number of single domain names included in the instance.
    id String
    The provider-assigned unique ID for this managed resource.
    instanceEndTime Integer
    Instance expiration time, a UNIX timestamp in seconds.
    instanceStartTime Integer
    Instance start time, a UNIX timestamp in seconds.
    instanceType String
    The instance type.
    orderEndTime Integer
    Order end time, a UNIX timestamp in seconds.
    orderStartTime Integer
    Order start time, a UNIX timestamp in seconds.
    province String
    The province or region of the address recorded on the instance.
    spec String
    The specification of the purchased instance.
    status String
    The instance status.
    upgradeStatus String
    The upgrade status of the instance.
    wildcardDomainCount Integer
    The number of wildcard domain names included in the instance.
    averageWaitingTime string
    Average waiting time for issuing a certificate of this specification, in seconds.
    brand string
    The certificate brand.
    certificateType string
    The type of the certificate.
    city string
    The city of the address recorded on the instance.
    fullDomainCount number
    The number of single domain names included in the instance.
    id string
    The provider-assigned unique ID for this managed resource.
    instanceEndTime number
    Instance expiration time, a UNIX timestamp in seconds.
    instanceStartTime number
    Instance start time, a UNIX timestamp in seconds.
    instanceType string
    The instance type.
    orderEndTime number
    Order end time, a UNIX timestamp in seconds.
    orderStartTime number
    Order start time, a UNIX timestamp in seconds.
    province string
    The province or region of the address recorded on the instance.
    spec string
    The specification of the purchased instance.
    status string
    The instance status.
    upgradeStatus string
    The upgrade status of the instance.
    wildcardDomainCount number
    The number of wildcard domain names included in the instance.
    average_waiting_time str
    Average waiting time for issuing a certificate of this specification, in seconds.
    brand str
    The certificate brand.
    certificate_type str
    The type of the certificate.
    city str
    The city of the address recorded on the instance.
    full_domain_count int
    The number of single domain names included in the instance.
    id str
    The provider-assigned unique ID for this managed resource.
    instance_end_time int
    Instance expiration time, a UNIX timestamp in seconds.
    instance_start_time int
    Instance start time, a UNIX timestamp in seconds.
    instance_type str
    The instance type.
    order_end_time int
    Order end time, a UNIX timestamp in seconds.
    order_start_time int
    Order start time, a UNIX timestamp in seconds.
    province str
    The province or region of the address recorded on the instance.
    spec str
    The specification of the purchased instance.
    status str
    The instance status.
    upgrade_status str
    The upgrade status of the instance.
    wildcard_domain_count int
    The number of wildcard domain names included in the instance.
    averageWaitingTime String
    Average waiting time for issuing a certificate of this specification, in seconds.
    brand String
    The certificate brand.
    certificateType String
    The type of the certificate.
    city String
    The city of the address recorded on the instance.
    fullDomainCount Number
    The number of single domain names included in the instance.
    id String
    The provider-assigned unique ID for this managed resource.
    instanceEndTime Number
    Instance expiration time, a UNIX timestamp in seconds.
    instanceStartTime Number
    Instance start time, a UNIX timestamp in seconds.
    instanceType String
    The instance type.
    orderEndTime Number
    Order end time, a UNIX timestamp in seconds.
    orderStartTime Number
    Order start time, a UNIX timestamp in seconds.
    province String
    The province or region of the address recorded on the instance.
    spec String
    The specification of the purchased instance.
    status String
    The instance status.
    upgradeStatus String
    The upgrade status of the instance.
    wildcardDomainCount Number
    The number of wildcard domain names included in the instance.

    Look up Existing SslCertificatesServiceInstance Resource

    Get an existing SslCertificatesServiceInstance resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: SslCertificatesServiceInstanceState, opts?: CustomResourceOptions): SslCertificatesServiceInstance
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        auto_reissue: Optional[str] = None,
        average_waiting_time: Optional[str] = None,
        brand: Optional[str] = None,
        certificate_type: Optional[str] = None,
        city: Optional[str] = None,
        company_id: Optional[str] = None,
        contact_id_lists: Optional[Sequence[int]] = None,
        country_code: Optional[str] = None,
        csr: Optional[str] = None,
        domain: Optional[str] = None,
        full_domain_count: Optional[int] = None,
        generate_csr_method: Optional[str] = None,
        instance_end_time: Optional[int] = None,
        instance_name: Optional[str] = None,
        instance_start_time: Optional[int] = None,
        instance_type: Optional[str] = None,
        key_algorithm: Optional[str] = None,
        order_end_time: Optional[int] = None,
        order_start_time: Optional[int] = None,
        parameters: Optional[Sequence[SslCertificatesServiceInstanceParameterArgs]] = None,
        period: Optional[int] = None,
        pricing_cycle: Optional[int] = None,
        product_type: Optional[str] = None,
        province: Optional[str] = None,
        resource_group_id: Optional[str] = None,
        spec: Optional[str] = None,
        status: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        upgrade_status: Optional[str] = None,
        validation_method: Optional[str] = None,
        wildcard_domain_count: Optional[int] = None) -> SslCertificatesServiceInstance
    func GetSslCertificatesServiceInstance(ctx *Context, name string, id IDInput, state *SslCertificatesServiceInstanceState, opts ...ResourceOption) (*SslCertificatesServiceInstance, error)
    public static SslCertificatesServiceInstance Get(string name, Input<string> id, SslCertificatesServiceInstanceState? state, CustomResourceOptions? opts = null)
    public static SslCertificatesServiceInstance get(String name, Output<String> id, SslCertificatesServiceInstanceState state, CustomResourceOptions options)
    resources:  _:    type: alicloud:sslcertificatesserviceinstance:SslCertificatesServiceInstance    get:      id: ${id}
    import {
  to = alicloud_sslcertificatesserviceinstance_ssl_certificates_service_instance.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AutoReissue string

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    AverageWaitingTime string
    Average waiting time for issuing a certificate of this specification, in seconds.
    Brand string
    The certificate brand.
    CertificateType string
    The type of the certificate.
    City string
    The city of the address recorded on the instance.
    CompanyId string

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    ContactIdLists List<int>
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    CountryCode string
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    Csr string
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    Domain string

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    FullDomainCount int
    The number of single domain names included in the instance.
    GenerateCsrMethod string
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    InstanceEndTime int
    Instance expiration time, a UNIX timestamp in seconds.
    InstanceName string
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    InstanceStartTime int
    Instance start time, a UNIX timestamp in seconds.
    InstanceType string
    The instance type.
    KeyAlgorithm string
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    OrderEndTime int
    Order end time, a UNIX timestamp in seconds.
    OrderStartTime int
    Order start time, a UNIX timestamp in seconds.
    Parameters List<Pulumi.AliCloud.sslCertificatesServiceInstance.Inputs.SslCertificatesServiceInstanceParameter>

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    Period int

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    PricingCycle int

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    ProductType string

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    Province string
    The province or region of the address recorded on the instance.
    ResourceGroupId string
    The ID of the resource group.
    Spec string
    The specification of the purchased instance.
    Status string
    The instance status.
    Tags Dictionary<string, string>
    The list of tags.
    UpgradeStatus string
    The upgrade status of the instance.
    ValidationMethod string
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    WildcardDomainCount int
    The number of wildcard domain names included in the instance.
    AutoReissue string

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    AverageWaitingTime string
    Average waiting time for issuing a certificate of this specification, in seconds.
    Brand string
    The certificate brand.
    CertificateType string
    The type of the certificate.
    City string
    The city of the address recorded on the instance.
    CompanyId string

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    ContactIdLists []int
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    CountryCode string
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    Csr string
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    Domain string

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    FullDomainCount int
    The number of single domain names included in the instance.
    GenerateCsrMethod string
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    InstanceEndTime int
    Instance expiration time, a UNIX timestamp in seconds.
    InstanceName string
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    InstanceStartTime int
    Instance start time, a UNIX timestamp in seconds.
    InstanceType string
    The instance type.
    KeyAlgorithm string
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    OrderEndTime int
    Order end time, a UNIX timestamp in seconds.
    OrderStartTime int
    Order start time, a UNIX timestamp in seconds.
    Parameters []SslCertificatesServiceInstanceParameterArgs

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    Period int

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    PricingCycle int

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    ProductType string

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    Province string
    The province or region of the address recorded on the instance.
    ResourceGroupId string
    The ID of the resource group.
    Spec string
    The specification of the purchased instance.
    Status string
    The instance status.
    Tags map[string]string
    The list of tags.
    UpgradeStatus string
    The upgrade status of the instance.
    ValidationMethod string
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    WildcardDomainCount int
    The number of wildcard domain names included in the instance.
    auto_reissue string

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    average_waiting_time string
    Average waiting time for issuing a certificate of this specification, in seconds.
    brand string
    The certificate brand.
    certificate_type string
    The type of the certificate.
    city string
    The city of the address recorded on the instance.
    company_id string

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    contact_id_lists list(number)
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    country_code string
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    csr string
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    domain string

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    full_domain_count number
    The number of single domain names included in the instance.
    generate_csr_method string
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    instance_end_time number
    Instance expiration time, a UNIX timestamp in seconds.
    instance_name string
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    instance_start_time number
    Instance start time, a UNIX timestamp in seconds.
    instance_type string
    The instance type.
    key_algorithm string
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    order_end_time number
    Order end time, a UNIX timestamp in seconds.
    order_start_time number
    Order start time, a UNIX timestamp in seconds.
    parameters list(object)

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    period number

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    pricing_cycle number

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    product_type string

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    province string
    The province or region of the address recorded on the instance.
    resource_group_id string
    The ID of the resource group.
    spec string
    The specification of the purchased instance.
    status string
    The instance status.
    tags map(string)
    The list of tags.
    upgrade_status string
    The upgrade status of the instance.
    validation_method string
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    wildcard_domain_count number
    The number of wildcard domain names included in the instance.
    autoReissue String

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    averageWaitingTime String
    Average waiting time for issuing a certificate of this specification, in seconds.
    brand String
    The certificate brand.
    certificateType String
    The type of the certificate.
    city String
    The city of the address recorded on the instance.
    companyId String

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    contactIdLists List<Integer>
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    countryCode String
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    csr String
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    domain String

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    fullDomainCount Integer
    The number of single domain names included in the instance.
    generateCsrMethod String
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    instanceEndTime Integer
    Instance expiration time, a UNIX timestamp in seconds.
    instanceName String
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    instanceStartTime Integer
    Instance start time, a UNIX timestamp in seconds.
    instanceType String
    The instance type.
    keyAlgorithm String
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    orderEndTime Integer
    Order end time, a UNIX timestamp in seconds.
    orderStartTime Integer
    Order start time, a UNIX timestamp in seconds.
    parameters List<SslCertificatesServiceInstanceParameter>

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    period Integer

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    pricingCycle Integer

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    productType String

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    province String
    The province or region of the address recorded on the instance.
    resourceGroupId String
    The ID of the resource group.
    spec String
    The specification of the purchased instance.
    status String
    The instance status.
    tags Map<String,String>
    The list of tags.
    upgradeStatus String
    The upgrade status of the instance.
    validationMethod String
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    wildcardDomainCount Integer
    The number of wildcard domain names included in the instance.
    autoReissue string

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    averageWaitingTime string
    Average waiting time for issuing a certificate of this specification, in seconds.
    brand string
    The certificate brand.
    certificateType string
    The type of the certificate.
    city string
    The city of the address recorded on the instance.
    companyId string

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    contactIdLists number[]
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    countryCode string
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    csr string
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    domain string

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    fullDomainCount number
    The number of single domain names included in the instance.
    generateCsrMethod string
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    instanceEndTime number
    Instance expiration time, a UNIX timestamp in seconds.
    instanceName string
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    instanceStartTime number
    Instance start time, a UNIX timestamp in seconds.
    instanceType string
    The instance type.
    keyAlgorithm string
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    orderEndTime number
    Order end time, a UNIX timestamp in seconds.
    orderStartTime number
    Order start time, a UNIX timestamp in seconds.
    parameters SslCertificatesServiceInstanceParameter[]

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    period number

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    pricingCycle number

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    productType string

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    province string
    The province or region of the address recorded on the instance.
    resourceGroupId string
    The ID of the resource group.
    spec string
    The specification of the purchased instance.
    status string
    The instance status.
    tags {[key: string]: string}
    The list of tags.
    upgradeStatus string
    The upgrade status of the instance.
    validationMethod string
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    wildcardDomainCount number
    The number of wildcard domain names included in the instance.
    auto_reissue str

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    average_waiting_time str
    Average waiting time for issuing a certificate of this specification, in seconds.
    brand str
    The certificate brand.
    certificate_type str
    The type of the certificate.
    city str
    The city of the address recorded on the instance.
    company_id str

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    contact_id_lists Sequence[int]
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    country_code str
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    csr str
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    domain str

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    full_domain_count int
    The number of single domain names included in the instance.
    generate_csr_method str
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    instance_end_time int
    Instance expiration time, a UNIX timestamp in seconds.
    instance_name str
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    instance_start_time int
    Instance start time, a UNIX timestamp in seconds.
    instance_type str
    The instance type.
    key_algorithm str
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    order_end_time int
    Order end time, a UNIX timestamp in seconds.
    order_start_time int
    Order start time, a UNIX timestamp in seconds.
    parameters Sequence[SslCertificatesServiceInstanceParameterArgs]

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    period int

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    pricing_cycle int

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    product_type str

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    province str
    The province or region of the address recorded on the instance.
    resource_group_id str
    The ID of the resource group.
    spec str
    The specification of the purchased instance.
    status str
    The instance status.
    tags Mapping[str, str]
    The list of tags.
    upgrade_status str
    The upgrade status of the instance.
    validation_method str
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    wildcard_domain_count int
    The number of wildcard domain names included in the instance.
    autoReissue String

    Specifies whether to enable managed renewal. enable: Enabled disable: Disabled

    NOTE: When managed renewal is enabled, the certificate authority issues a new certificate for the instance instead of extending the existing one. The renewed certificate has a different certificate ID and certificate identifier, so any value read from this instance or referenced by downstream resources changes after a renewal. Make sure the resources that consume the certificate take their value from the certificate attributes rather than from a hardcoded ID.

    averageWaitingTime String
    Average waiting time for issuing a certificate of this specification, in seconds.
    brand String
    The certificate brand.
    certificateType String
    The type of the certificate.
    city String
    The city of the address recorded on the instance.
    companyId String

    The company information ID. Required for OV and EV certificates — without it the certificate application cannot be submitted for this instance.

    NOTE: The address recorded on the instance — city and province — comes from the company referenced by companyId, and from a server-side default when no company is referenced. Certificate authorities reject non-standard addresses, so the address is taken from the company record rather than accepted per instance; set it on alicloud.sslcertificatesservice.Company instead. Both attributes are read-only here.

    contactIdLists List<Number>
    The list of contact IDs. At least one contact ID is required, otherwise the certificate application cannot be submitted for this instance.
    countryCode String
    The code of the country or region where the certificate organization is located. For example, CN indicates China and US indicates the United States. This field is required when a Certificate Signing Request (CSR) is generated for a DV certificate. The default value is CN.
    csr String
    The CSR content. You can generate a CSR by using OpenSSL or Keytool. For more information, see How to create a CSR file.
    domain String

    The domain names to be bound to the certificate. Specific requirements are as follows:

    • You can specify a single domain name or a wildcard domain name (such as *.aliyundoc.com).
    • You can specify multiple domain names. Separate multiple domain names with commas (,). Whether free domain names are provided is determined based on the first domain name.

    NOTE: When you bind multiple domain names to a certificate, this parameter is required. This parameter and csr cannot both be empty.

    NOTE: Which of domain and csr is authoritative depends on generateCsrMethod:

    generateCsrMethodWhich value wins
    onlineThe system generates the CSR and domain is used as you set it. Leave csr unset; the generated value is read back into state.
    uploadThe domain is taken from the CN field of the CSR you upload, so leave domain unset and let it be read back from the certificate. Setting it to a value that disagrees with the CSR is rejected by the API.
    fullDomainCount Number
    The number of single domain names included in the instance.
    generateCsrMethod String
    The method used to generate the Certificate Signing Request (CSR). Default value: online. online: The system generates the CSR. In this case, the Csr parameter is ignored. upload: You upload the CSR. In this case, the Csr parameter is required.
    instanceEndTime Number
    Instance expiration time, a UNIX timestamp in seconds.
    instanceName String
    The name of the instance. When a certificate is issued, this value is used as the default name of the certificate.
    instanceStartTime Number
    Instance start time, a UNIX timestamp in seconds.
    instanceType String
    The instance type.
    keyAlgorithm String
    The certificate algorithm. Default value: RSA_2048.

    • RSA_2048
    • RSA_3072
    • RSA_4096
    • ECC_256
    • SM2
    orderEndTime Number
    Order end time, a UNIX timestamp in seconds.
    orderStartTime Number
    Order start time, a UNIX timestamp in seconds.
    parameters List<Property Map>

    The list of modules. See parameter below.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    period Number

    The subscription period. Unit: months. For products billed on a yearly basis, enter an integer multiple of 12.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    pricingCycle Number

    The unit of the subscription period.

    • PricingCycle=1: The unit of the subscription period is year.
    • PricingCycle=2: The unit of the subscription period is month.
    • PricingCycle=3: The unit of the subscription period is day.

    Default value: PricingCycle=2

    This parameter applies only to specific product types (ProductType is ddos_originpre_public_cn, ddosDip, ddoscoo, ddos_originpre_public_intl, ddosDip_intl, or ddoscoo_intl).

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    productType String

    The product type. Valid values: cas (China site) and casIntl (international site). Defaults to casIntl for international accounts and cas otherwise.

    NOTE: This parameter is immutable. Changing it after creation has no effect.

    province String
    The province or region of the address recorded on the instance.
    resourceGroupId String
    The ID of the resource group.
    spec String
    The specification of the purchased instance.
    status String
    The instance status.
    tags Map<String>
    The list of tags.
    upgradeStatus String
    The upgrade status of the instance.
    validationMethod String
    The verification method for the certificate application. DNS: DNS verification, using TXT or CNAME records. HTTP: File verification.
    wildcardDomainCount Number
    The number of wildcard domain names included in the instance.

    Supporting Types

    SslCertificatesServiceInstanceParameter, SslCertificatesServiceInstanceParameterArgs

    Code string
    The module code. Common values are fullSpec (certificate brand and grade for a single-domain certificate), wildcardSpec (the same for a wildcard certificate), fullDomainCount (number of single domain names) and wildcardDomainCount (number of wildcard domain names).
    Value string

    The value of the module identified by code. For the domain-count modules this is an integer from 1 to 150. For fullSpec and wildcardSpec this is a specification code such as ws.dv.f.

    Specification codes accepted by fullSpec follow a brand.grade.type pattern, for example:

    ValueBrandGrade
    ws.dv.fWoSignDV
    rap.dv.fRapidDV
    vt.dv.f / vt.ov.fvTrusDV / OV
    cf.ov.f / cf.ev.fCFCAOV / EV
    gs.dv.f / gs.ov.fGlobalSignDV / OV
    geo.dv.f / geo.ov.f / geo.ev.fGeoTrustDV / OV / EV
    ss.ov.f / ss.ev.fDigiCertOV / EV

    NOTE: The list above is a snapshot and is not exhaustive. Specifications, prices and availability differ per account and change over time. Call DescribePricingModule with ProductCode and ProductType set to cas to get the values your account can actually order.

    Code string
    The module code. Common values are fullSpec (certificate brand and grade for a single-domain certificate), wildcardSpec (the same for a wildcard certificate), fullDomainCount (number of single domain names) and wildcardDomainCount (number of wildcard domain names).
    Value string

    The value of the module identified by code. For the domain-count modules this is an integer from 1 to 150. For fullSpec and wildcardSpec this is a specification code such as ws.dv.f.

    Specification codes accepted by fullSpec follow a brand.grade.type pattern, for example:

    ValueBrandGrade
    ws.dv.fWoSignDV
    rap.dv.fRapidDV
    vt.dv.f / vt.ov.fvTrusDV / OV
    cf.ov.f / cf.ev.fCFCAOV / EV
    gs.dv.f / gs.ov.fGlobalSignDV / OV
    geo.dv.f / geo.ov.f / geo.ev.fGeoTrustDV / OV / EV
    ss.ov.f / ss.ev.fDigiCertOV / EV

    NOTE: The list above is a snapshot and is not exhaustive. Specifications, prices and availability differ per account and change over time. Call DescribePricingModule with ProductCode and ProductType set to cas to get the values your account can actually order.

    code string
    The module code. Common values are fullSpec (certificate brand and grade for a single-domain certificate), wildcardSpec (the same for a wildcard certificate), fullDomainCount (number of single domain names) and wildcardDomainCount (number of wildcard domain names).
    value string

    The value of the module identified by code. For the domain-count modules this is an integer from 1 to 150. For fullSpec and wildcardSpec this is a specification code such as ws.dv.f.

    Specification codes accepted by fullSpec follow a brand.grade.type pattern, for example:

    ValueBrandGrade
    ws.dv.fWoSignDV
    rap.dv.fRapidDV
    vt.dv.f / vt.ov.fvTrusDV / OV
    cf.ov.f / cf.ev.fCFCAOV / EV
    gs.dv.f / gs.ov.fGlobalSignDV / OV
    geo.dv.f / geo.ov.f / geo.ev.fGeoTrustDV / OV / EV
    ss.ov.f / ss.ev.fDigiCertOV / EV

    NOTE: The list above is a snapshot and is not exhaustive. Specifications, prices and availability differ per account and change over time. Call DescribePricingModule with ProductCode and ProductType set to cas to get the values your account can actually order.

    code String
    The module code. Common values are fullSpec (certificate brand and grade for a single-domain certificate), wildcardSpec (the same for a wildcard certificate), fullDomainCount (number of single domain names) and wildcardDomainCount (number of wildcard domain names).
    value String

    The value of the module identified by code. For the domain-count modules this is an integer from 1 to 150. For fullSpec and wildcardSpec this is a specification code such as ws.dv.f.

    Specification codes accepted by fullSpec follow a brand.grade.type pattern, for example:

    ValueBrandGrade
    ws.dv.fWoSignDV
    rap.dv.fRapidDV
    vt.dv.f / vt.ov.fvTrusDV / OV
    cf.ov.f / cf.ev.fCFCAOV / EV
    gs.dv.f / gs.ov.fGlobalSignDV / OV
    geo.dv.f / geo.ov.f / geo.ev.fGeoTrustDV / OV / EV
    ss.ov.f / ss.ev.fDigiCertOV / EV

    NOTE: The list above is a snapshot and is not exhaustive. Specifications, prices and availability differ per account and change over time. Call DescribePricingModule with ProductCode and ProductType set to cas to get the values your account can actually order.

    code string
    The module code. Common values are fullSpec (certificate brand and grade for a single-domain certificate), wildcardSpec (the same for a wildcard certificate), fullDomainCount (number of single domain names) and wildcardDomainCount (number of wildcard domain names).
    value string

    The value of the module identified by code. For the domain-count modules this is an integer from 1 to 150. For fullSpec and wildcardSpec this is a specification code such as ws.dv.f.

    Specification codes accepted by fullSpec follow a brand.grade.type pattern, for example:

    ValueBrandGrade
    ws.dv.fWoSignDV
    rap.dv.fRapidDV
    vt.dv.f / vt.ov.fvTrusDV / OV
    cf.ov.f / cf.ev.fCFCAOV / EV
    gs.dv.f / gs.ov.fGlobalSignDV / OV
    geo.dv.f / geo.ov.f / geo.ev.fGeoTrustDV / OV / EV
    ss.ov.f / ss.ev.fDigiCertOV / EV

    NOTE: The list above is a snapshot and is not exhaustive. Specifications, prices and availability differ per account and change over time. Call DescribePricingModule with ProductCode and ProductType set to cas to get the values your account can actually order.

    code str
    The module code. Common values are fullSpec (certificate brand and grade for a single-domain certificate), wildcardSpec (the same for a wildcard certificate), fullDomainCount (number of single domain names) and wildcardDomainCount (number of wildcard domain names).
    value str

    The value of the module identified by code. For the domain-count modules this is an integer from 1 to 150. For fullSpec and wildcardSpec this is a specification code such as ws.dv.f.

    Specification codes accepted by fullSpec follow a brand.grade.type pattern, for example:

    ValueBrandGrade
    ws.dv.fWoSignDV
    rap.dv.fRapidDV
    vt.dv.f / vt.ov.fvTrusDV / OV
    cf.ov.f / cf.ev.fCFCAOV / EV
    gs.dv.f / gs.ov.fGlobalSignDV / OV
    geo.dv.f / geo.ov.f / geo.ev.fGeoTrustDV / OV / EV
    ss.ov.f / ss.ev.fDigiCertOV / EV

    NOTE: The list above is a snapshot and is not exhaustive. Specifications, prices and availability differ per account and change over time. Call DescribePricingModule with ProductCode and ProductType set to cas to get the values your account can actually order.

    code String
    The module code. Common values are fullSpec (certificate brand and grade for a single-domain certificate), wildcardSpec (the same for a wildcard certificate), fullDomainCount (number of single domain names) and wildcardDomainCount (number of wildcard domain names).
    value String

    The value of the module identified by code. For the domain-count modules this is an integer from 1 to 150. For fullSpec and wildcardSpec this is a specification code such as ws.dv.f.

    Specification codes accepted by fullSpec follow a brand.grade.type pattern, for example:

    ValueBrandGrade
    ws.dv.fWoSignDV
    rap.dv.fRapidDV
    vt.dv.f / vt.ov.fvTrusDV / OV
    cf.ov.f / cf.ev.fCFCAOV / EV
    gs.dv.f / gs.ov.fGlobalSignDV / OV
    geo.dv.f / geo.ov.f / geo.ev.fGeoTrustDV / OV / EV
    ss.ov.f / ss.ev.fDigiCertOV / EV

    NOTE: The list above is a snapshot and is not exhaustive. Specifications, prices and availability differ per account and change over time. Call DescribePricingModule with ProductCode and ProductType set to cas to get the values your account can actually order.

    Import

    Certificate Management Service (Original SSL Certificate) Instance can be imported using the id, e.g.

    $ pulumi import alicloud:sslcertificatesserviceinstance/sslCertificatesServiceInstance:SslCertificatesServiceInstance example <instance_id>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Alibaba Cloud pulumi/pulumi-alicloud
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the alicloud Terraform Provider.
    alicloud logo alicloud logo
    Viewing docs for Alibaba Cloud v3.106.0
    published on Monday, Aug 24, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-alicloud

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial