Alibaba Cloud v3.94.0 published on Tuesday, Feb 3, 2026 by Pulumi
Alibaba Cloud v3.94.0 published on Tuesday, Feb 3, 2026 by Pulumi
Provides a SSL Certificates Pca Certificate resource.
For information about SSL Certificates Pca Certificate and how to use it, see What is Pca Certificate.
NOTE: Available since v1.257.0.
Example Usage
Basic Usage
import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const _default = new alicloud.sslcertificatesservicepca.Certificate("default", {
organization: "a",
years: 1,
locality: "a",
organizationUnit: "a",
state: "a",
countryCode: "cn",
commonName: "cbc.certqa.cn",
algorithm: "RSA_2048",
});
import pulumi
import pulumi_alicloud as alicloud
default = alicloud.sslcertificatesservicepca.Certificate("default",
organization="a",
years=1,
locality="a",
organization_unit="a",
state="a",
country_code="cn",
common_name="cbc.certqa.cn",
algorithm="RSA_2048")
package main
import (
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/sslcertificatesservicepca"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := sslcertificatesservicepca.NewCertificate(ctx, "default", &sslcertificatesservicepca.CertificateArgs{
Organization: pulumi.String("a"),
Years: pulumi.Int(1),
Locality: pulumi.String("a"),
OrganizationUnit: pulumi.String("a"),
State: pulumi.String("a"),
CountryCode: pulumi.String("cn"),
CommonName: pulumi.String("cbc.certqa.cn"),
Algorithm: pulumi.String("RSA_2048"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
var @default = new AliCloud.SslCertificatesServicePca.Certificate("default", new()
{
Organization = "a",
Years = 1,
Locality = "a",
OrganizationUnit = "a",
State = "a",
CountryCode = "cn",
CommonName = "cbc.certqa.cn",
Algorithm = "RSA_2048",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.sslcertificatesservicepca.Certificate;
import com.pulumi.alicloud.sslcertificatesservicepca.CertificateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var default_ = new Certificate("default", CertificateArgs.builder()
.organization("a")
.years(1)
.locality("a")
.organizationUnit("a")
.state("a")
.countryCode("cn")
.commonName("cbc.certqa.cn")
.algorithm("RSA_2048")
.build());
}
}
resources:
default:
type: alicloud:sslcertificatesservicepca:Certificate
properties:
organization: a
years: '1'
locality: a
organizationUnit: a
state: a
countryCode: cn
commonName: cbc.certqa.cn
algorithm: RSA_2048
📚 Need more examples? VIEW MORE EXAMPLES
Create Certificate Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Certificate(name: string, args: CertificateArgs, opts?: CustomResourceOptions);@overload
def Certificate(resource_name: str,
args: CertificateArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Certificate(resource_name: str,
opts: Optional[ResourceOptions] = None,
locality: Optional[str] = None,
years: Optional[int] = None,
state: Optional[str] = None,
common_name: Optional[str] = None,
organization_unit: Optional[str] = None,
organization: Optional[str] = None,
country_code: Optional[str] = None,
extended_key_usages: Optional[Sequence[str]] = None,
enable_crl: Optional[bool] = None,
crl_day: Optional[int] = None,
algorithm: Optional[str] = None,
parent_identifier: Optional[str] = None,
path_len_constraint: Optional[int] = None,
resource_group_id: Optional[str] = None,
certificate_type: Optional[str] = None,
tags: Optional[Mapping[str, str]] = None,
alias_name: Optional[str] = None)func NewCertificate(ctx *Context, name string, args CertificateArgs, opts ...ResourceOption) (*Certificate, error)public Certificate(string name, CertificateArgs args, CustomResourceOptions? opts = null)
public Certificate(String name, CertificateArgs args)
public Certificate(String name, CertificateArgs args, CustomResourceOptions options)
type: alicloud:sslcertificatesservicepca:Certificate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var alicloudCertificateResource = new AliCloud.SslCertificatesServicePca.Certificate("alicloudCertificateResource", new()
{
Locality = "string",
Years = 0,
State = "string",
CommonName = "string",
OrganizationUnit = "string",
Organization = "string",
CountryCode = "string",
ExtendedKeyUsages = new[]
{
"string",
},
EnableCrl = false,
CrlDay = 0,
Algorithm = "string",
ParentIdentifier = "string",
PathLenConstraint = 0,
ResourceGroupId = "string",
CertificateType = "string",
Tags =
{
{ "string", "string" },
},
AliasName = "string",
});
example, err := sslcertificatesservicepca.NewCertificate(ctx, "alicloudCertificateResource", &sslcertificatesservicepca.CertificateArgs{
Locality: pulumi.String("string"),
Years: pulumi.Int(0),
State: pulumi.String("string"),
CommonName: pulumi.String("string"),
OrganizationUnit: pulumi.String("string"),
Organization: pulumi.String("string"),
CountryCode: pulumi.String("string"),
ExtendedKeyUsages: pulumi.StringArray{
pulumi.String("string"),
},
EnableCrl: pulumi.Bool(false),
CrlDay: pulumi.Int(0),
Algorithm: pulumi.String("string"),
ParentIdentifier: pulumi.String("string"),
PathLenConstraint: pulumi.Int(0),
ResourceGroupId: pulumi.String("string"),
CertificateType: pulumi.String("string"),
Tags: pulumi.StringMap{
"string": pulumi.String("string"),
},
AliasName: pulumi.String("string"),
})
var alicloudCertificateResource = new com.pulumi.alicloud.sslcertificatesservicepca.Certificate("alicloudCertificateResource", com.pulumi.alicloud.sslcertificatesservicepca.CertificateArgs.builder()
.locality("string")
.years(0)
.state("string")
.commonName("string")
.organizationUnit("string")
.organization("string")
.countryCode("string")
.extendedKeyUsages("string")
.enableCrl(false)
.crlDay(0)
.algorithm("string")
.parentIdentifier("string")
.pathLenConstraint(0)
.resourceGroupId("string")
.certificateType("string")
.tags(Map.of("string", "string"))
.aliasName("string")
.build());
alicloud_certificate_resource = alicloud.sslcertificatesservicepca.Certificate("alicloudCertificateResource",
locality="string",
years=0,
state="string",
common_name="string",
organization_unit="string",
organization="string",
country_code="string",
extended_key_usages=["string"],
enable_crl=False,
crl_day=0,
algorithm="string",
parent_identifier="string",
path_len_constraint=0,
resource_group_id="string",
certificate_type="string",
tags={
"string": "string",
},
alias_name="string")
const alicloudCertificateResource = new alicloud.sslcertificatesservicepca.Certificate("alicloudCertificateResource", {
locality: "string",
years: 0,
state: "string",
commonName: "string",
organizationUnit: "string",
organization: "string",
countryCode: "string",
extendedKeyUsages: ["string"],
enableCrl: false,
crlDay: 0,
algorithm: "string",
parentIdentifier: "string",
pathLenConstraint: 0,
resourceGroupId: "string",
certificateType: "string",
tags: {
string: "string",
},
aliasName: "string",
});
type: alicloud:sslcertificatesservicepca:Certificate
properties:
algorithm: string
aliasName: string
certificateType: string
commonName: string
countryCode: string
crlDay: 0
enableCrl: false
extendedKeyUsages:
- string
locality: string
organization: string
organizationUnit: string
parentIdentifier: string
pathLenConstraint: 0
resourceGroupId: string
state: string
tags:
string: string
years: 0
Certificate Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Certificate resource accepts the following input properties:
- Common
Name string - The common name or abbreviation of the organization. Support the use of Chinese, English characters.
- Locality string
- Name of the city where the organization is located. Support the use of Chinese, English characters.
- Organization string
- The name of the organization (corresponding to your enterprise or company) associated with the CA certificate. Support the use of Chinese, English characters.
- Organization
Unit string - The name of the department or branch under the organization. Support the use of Chinese, English characters.
- State string
- The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters.
- Years int
The validity period of the CA certificate, in years.
NOTE: It is recommended to set to
5to10years.- Algorithm string
The key algorithm type of the CA certificate. The key algorithm is in the _ format. Valid values:
RSA_1024: The corresponding signature algorithm is Sha256WithRSA.RSA_2048: The corresponding signature algorithm is Sha256WithRSA.RSA_4096: The corresponding signature algorithm is Sha256WithRSA.ECC_256: The signature algorithm is Sha256WithECDSA.ECC_384: The corresponding signature algorithm is Sha256WithECDSA.ECC_512: The signature algorithm is Sha256WithECDSA.SM2_256: The corresponding signature algorithm is SM3WithSM2.
NOTE: If
certificate_typeis set toSUB_ROOT,algorithmis required.- Alias
Name string - Certificate
Type string - The type of the CA certificate. Default value:
ROOT. Valid values:ROOT: A root CA certificate.SUB_ROOT: A subordinate CA certificate.
- Country
Code string - The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example,
CNrepresents China andUSrepresents the United States. - Crl
Day int - The validity period for the CRL, in days. Valid values:
1to365. Note:crl_daytakes effect only ifcertificate_typeis set toSUB_ROOT. - Enable
Crl bool - This setting turns the Certificate Revocation List (CRL) service on or off. Valid values:
- Extended
Key List<string>Usages - The extended key usages. Note:
extended_key_usagestakes effect only ifcertificate_typeis set toSUB_ROOT. - Parent
Identifier string The unique identifier of the root CA certificate.
NOTE: If
certificate_typeis set toSUB_ROOT,parent_identifieris required.- Path
Len intConstraint - The certificate path length. Default value:
0. Note:path_len_constrainttakes effect only ifcertificate_typeis set toSUB_ROOT. - Resource
Group stringId - A resource property field representing the resource group.
- Dictionary<string, string>
- The tag of the resource.
- Common
Name string - The common name or abbreviation of the organization. Support the use of Chinese, English characters.
- Locality string
- Name of the city where the organization is located. Support the use of Chinese, English characters.
- Organization string
- The name of the organization (corresponding to your enterprise or company) associated with the CA certificate. Support the use of Chinese, English characters.
- Organization
Unit string - The name of the department or branch under the organization. Support the use of Chinese, English characters.
- State string
- The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters.
- Years int
The validity period of the CA certificate, in years.
NOTE: It is recommended to set to
5to10years.- Algorithm string
The key algorithm type of the CA certificate. The key algorithm is in the _ format. Valid values:
RSA_1024: The corresponding signature algorithm is Sha256WithRSA.RSA_2048: The corresponding signature algorithm is Sha256WithRSA.RSA_4096: The corresponding signature algorithm is Sha256WithRSA.ECC_256: The signature algorithm is Sha256WithECDSA.ECC_384: The corresponding signature algorithm is Sha256WithECDSA.ECC_512: The signature algorithm is Sha256WithECDSA.SM2_256: The corresponding signature algorithm is SM3WithSM2.
NOTE: If
certificate_typeis set toSUB_ROOT,algorithmis required.- Alias
Name string - Certificate
Type string - The type of the CA certificate. Default value:
ROOT. Valid values:ROOT: A root CA certificate.SUB_ROOT: A subordinate CA certificate.
- Country
Code string - The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example,
CNrepresents China andUSrepresents the United States. - Crl
Day int - The validity period for the CRL, in days. Valid values:
1to365. Note:crl_daytakes effect only ifcertificate_typeis set toSUB_ROOT. - Enable
Crl bool - This setting turns the Certificate Revocation List (CRL) service on or off. Valid values:
- Extended
Key []stringUsages - The extended key usages. Note:
extended_key_usagestakes effect only ifcertificate_typeis set toSUB_ROOT. - Parent
Identifier string The unique identifier of the root CA certificate.
NOTE: If
certificate_typeis set toSUB_ROOT,parent_identifieris required.- Path
Len intConstraint - The certificate path length. Default value:
0. Note:path_len_constrainttakes effect only ifcertificate_typeis set toSUB_ROOT. - Resource
Group stringId - A resource property field representing the resource group.
- map[string]string
- The tag of the resource.
- common
Name String - The common name or abbreviation of the organization. Support the use of Chinese, English characters.
- locality String
- Name of the city where the organization is located. Support the use of Chinese, English characters.
- organization String
- The name of the organization (corresponding to your enterprise or company) associated with the CA certificate. Support the use of Chinese, English characters.
- organization
Unit String - The name of the department or branch under the organization. Support the use of Chinese, English characters.
- state String
- The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters.
- years Integer
The validity period of the CA certificate, in years.
NOTE: It is recommended to set to
5to10years.- algorithm String
The key algorithm type of the CA certificate. The key algorithm is in the _ format. Valid values:
RSA_1024: The corresponding signature algorithm is Sha256WithRSA.RSA_2048: The corresponding signature algorithm is Sha256WithRSA.RSA_4096: The corresponding signature algorithm is Sha256WithRSA.ECC_256: The signature algorithm is Sha256WithECDSA.ECC_384: The corresponding signature algorithm is Sha256WithECDSA.ECC_512: The signature algorithm is Sha256WithECDSA.SM2_256: The corresponding signature algorithm is SM3WithSM2.
NOTE: If
certificate_typeis set toSUB_ROOT,algorithmis required.- alias
Name String - certificate
Type String - The type of the CA certificate. Default value:
ROOT. Valid values:ROOT: A root CA certificate.SUB_ROOT: A subordinate CA certificate.
- country
Code String - The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example,
CNrepresents China andUSrepresents the United States. - crl
Day Integer - The validity period for the CRL, in days. Valid values:
1to365. Note:crl_daytakes effect only ifcertificate_typeis set toSUB_ROOT. - enable
Crl Boolean - This setting turns the Certificate Revocation List (CRL) service on or off. Valid values:
- extended
Key List<String>Usages - The extended key usages. Note:
extended_key_usagestakes effect only ifcertificate_typeis set toSUB_ROOT. - parent
Identifier String The unique identifier of the root CA certificate.
NOTE: If
certificate_typeis set toSUB_ROOT,parent_identifieris required.- path
Len IntegerConstraint - The certificate path length. Default value:
0. Note:path_len_constrainttakes effect only ifcertificate_typeis set toSUB_ROOT. - resource
Group StringId - A resource property field representing the resource group.
- Map<String,String>
- The tag of the resource.
- common
Name string - The common name or abbreviation of the organization. Support the use of Chinese, English characters.
- locality string
- Name of the city where the organization is located. Support the use of Chinese, English characters.
- organization string
- The name of the organization (corresponding to your enterprise or company) associated with the CA certificate. Support the use of Chinese, English characters.
- organization
Unit string - The name of the department or branch under the organization. Support the use of Chinese, English characters.
- state string
- The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters.
- years number
The validity period of the CA certificate, in years.
NOTE: It is recommended to set to
5to10years.- algorithm string
The key algorithm type of the CA certificate. The key algorithm is in the _ format. Valid values:
RSA_1024: The corresponding signature algorithm is Sha256WithRSA.RSA_2048: The corresponding signature algorithm is Sha256WithRSA.RSA_4096: The corresponding signature algorithm is Sha256WithRSA.ECC_256: The signature algorithm is Sha256WithECDSA.ECC_384: The corresponding signature algorithm is Sha256WithECDSA.ECC_512: The signature algorithm is Sha256WithECDSA.SM2_256: The corresponding signature algorithm is SM3WithSM2.
NOTE: If
certificate_typeis set toSUB_ROOT,algorithmis required.- alias
Name string - certificate
Type string - The type of the CA certificate. Default value:
ROOT. Valid values:ROOT: A root CA certificate.SUB_ROOT: A subordinate CA certificate.
- country
Code string - The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example,
CNrepresents China andUSrepresents the United States. - crl
Day number - The validity period for the CRL, in days. Valid values:
1to365. Note:crl_daytakes effect only ifcertificate_typeis set toSUB_ROOT. - enable
Crl boolean - This setting turns the Certificate Revocation List (CRL) service on or off. Valid values:
- extended
Key string[]Usages - The extended key usages. Note:
extended_key_usagestakes effect only ifcertificate_typeis set toSUB_ROOT. - parent
Identifier string The unique identifier of the root CA certificate.
NOTE: If
certificate_typeis set toSUB_ROOT,parent_identifieris required.- path
Len numberConstraint - The certificate path length. Default value:
0. Note:path_len_constrainttakes effect only ifcertificate_typeis set toSUB_ROOT. - resource
Group stringId - A resource property field representing the resource group.
- {[key: string]: string}
- The tag of the resource.
- common_
name str - The common name or abbreviation of the organization. Support the use of Chinese, English characters.
- locality str
- Name of the city where the organization is located. Support the use of Chinese, English characters.
- organization str
- The name of the organization (corresponding to your enterprise or company) associated with the CA certificate. Support the use of Chinese, English characters.
- organization_
unit str - The name of the department or branch under the organization. Support the use of Chinese, English characters.
- state str
- The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters.
- years int
The validity period of the CA certificate, in years.
NOTE: It is recommended to set to
5to10years.- algorithm str
The key algorithm type of the CA certificate. The key algorithm is in the _ format. Valid values:
RSA_1024: The corresponding signature algorithm is Sha256WithRSA.RSA_2048: The corresponding signature algorithm is Sha256WithRSA.RSA_4096: The corresponding signature algorithm is Sha256WithRSA.ECC_256: The signature algorithm is Sha256WithECDSA.ECC_384: The corresponding signature algorithm is Sha256WithECDSA.ECC_512: The signature algorithm is Sha256WithECDSA.SM2_256: The corresponding signature algorithm is SM3WithSM2.
NOTE: If
certificate_typeis set toSUB_ROOT,algorithmis required.- alias_
name str - certificate_
type str - The type of the CA certificate. Default value:
ROOT. Valid values:ROOT: A root CA certificate.SUB_ROOT: A subordinate CA certificate.
- country_
code str - The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example,
CNrepresents China andUSrepresents the United States. - crl_
day int - The validity period for the CRL, in days. Valid values:
1to365. Note:crl_daytakes effect only ifcertificate_typeis set toSUB_ROOT. - enable_
crl bool - This setting turns the Certificate Revocation List (CRL) service on or off. Valid values:
- extended_
key_ Sequence[str]usages - The extended key usages. Note:
extended_key_usagestakes effect only ifcertificate_typeis set toSUB_ROOT. - parent_
identifier str The unique identifier of the root CA certificate.
NOTE: If
certificate_typeis set toSUB_ROOT,parent_identifieris required.- path_
len_ intconstraint - The certificate path length. Default value:
0. Note:path_len_constrainttakes effect only ifcertificate_typeis set toSUB_ROOT. - resource_
group_ strid - A resource property field representing the resource group.
- Mapping[str, str]
- The tag of the resource.
- common
Name String - The common name or abbreviation of the organization. Support the use of Chinese, English characters.
- locality String
- Name of the city where the organization is located. Support the use of Chinese, English characters.
- organization String
- The name of the organization (corresponding to your enterprise or company) associated with the CA certificate. Support the use of Chinese, English characters.
- organization
Unit String - The name of the department or branch under the organization. Support the use of Chinese, English characters.
- state String
- The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters.
- years Number
The validity period of the CA certificate, in years.
NOTE: It is recommended to set to
5to10years.- algorithm String
The key algorithm type of the CA certificate. The key algorithm is in the _ format. Valid values:
RSA_1024: The corresponding signature algorithm is Sha256WithRSA.RSA_2048: The corresponding signature algorithm is Sha256WithRSA.RSA_4096: The corresponding signature algorithm is Sha256WithRSA.ECC_256: The signature algorithm is Sha256WithECDSA.ECC_384: The corresponding signature algorithm is Sha256WithECDSA.ECC_512: The signature algorithm is Sha256WithECDSA.SM2_256: The corresponding signature algorithm is SM3WithSM2.
NOTE: If
certificate_typeis set toSUB_ROOT,algorithmis required.- alias
Name String - certificate
Type String - The type of the CA certificate. Default value:
ROOT. Valid values:ROOT: A root CA certificate.SUB_ROOT: A subordinate CA certificate.
- country
Code String - The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example,
CNrepresents China andUSrepresents the United States. - crl
Day Number - The validity period for the CRL, in days. Valid values:
1to365. Note:crl_daytakes effect only ifcertificate_typeis set toSUB_ROOT. - enable
Crl Boolean - This setting turns the Certificate Revocation List (CRL) service on or off. Valid values:
- extended
Key List<String>Usages - The extended key usages. Note:
extended_key_usagestakes effect only ifcertificate_typeis set toSUB_ROOT. - parent
Identifier String The unique identifier of the root CA certificate.
NOTE: If
certificate_typeis set toSUB_ROOT,parent_identifieris required.- path
Len NumberConstraint - The certificate path length. Default value:
0. Note:path_len_constrainttakes effect only ifcertificate_typeis set toSUB_ROOT. - resource
Group StringId - A resource property field representing the resource group.
- Map<String>
- The tag of the resource.
Outputs
All input properties are implicitly available as output properties. Additionally, the Certificate resource produces the following output properties:
Look up Existing Certificate Resource
Get an existing Certificate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: CertificateState, opts?: CustomResourceOptions): Certificate@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
algorithm: Optional[str] = None,
alias_name: Optional[str] = None,
certificate_type: Optional[str] = None,
common_name: Optional[str] = None,
country_code: Optional[str] = None,
crl_day: Optional[int] = None,
enable_crl: Optional[bool] = None,
extended_key_usages: Optional[Sequence[str]] = None,
locality: Optional[str] = None,
organization: Optional[str] = None,
organization_unit: Optional[str] = None,
parent_identifier: Optional[str] = None,
path_len_constraint: Optional[int] = None,
resource_group_id: Optional[str] = None,
state: Optional[str] = None,
status: Optional[str] = None,
tags: Optional[Mapping[str, str]] = None,
years: Optional[int] = None) -> Certificatefunc GetCertificate(ctx *Context, name string, id IDInput, state *CertificateState, opts ...ResourceOption) (*Certificate, error)public static Certificate Get(string name, Input<string> id, CertificateState? state, CustomResourceOptions? opts = null)public static Certificate get(String name, Output<String> id, CertificateState state, CustomResourceOptions options)resources: _: type: alicloud:sslcertificatesservicepca:Certificate get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Algorithm string
The key algorithm type of the CA certificate. The key algorithm is in the _ format. Valid values:
RSA_1024: The corresponding signature algorithm is Sha256WithRSA.RSA_2048: The corresponding signature algorithm is Sha256WithRSA.RSA_4096: The corresponding signature algorithm is Sha256WithRSA.ECC_256: The signature algorithm is Sha256WithECDSA.ECC_384: The corresponding signature algorithm is Sha256WithECDSA.ECC_512: The signature algorithm is Sha256WithECDSA.SM2_256: The corresponding signature algorithm is SM3WithSM2.
NOTE: If
certificate_typeis set toSUB_ROOT,algorithmis required.- Alias
Name string - Certificate
Type string - The type of the CA certificate. Default value:
ROOT. Valid values:ROOT: A root CA certificate.SUB_ROOT: A subordinate CA certificate.
- Common
Name string - The common name or abbreviation of the organization. Support the use of Chinese, English characters.
- Country
Code string - The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example,
CNrepresents China andUSrepresents the United States. - Crl
Day int - The validity period for the CRL, in days. Valid values:
1to365. Note:crl_daytakes effect only ifcertificate_typeis set toSUB_ROOT. - Enable
Crl bool - This setting turns the Certificate Revocation List (CRL) service on or off. Valid values:
- Extended
Key List<string>Usages - The extended key usages. Note:
extended_key_usagestakes effect only ifcertificate_typeis set toSUB_ROOT. - Locality string
- Name of the city where the organization is located. Support the use of Chinese, English characters.
- Organization string
- The name of the organization (corresponding to your enterprise or company) associated with the CA certificate. Support the use of Chinese, English characters.
- Organization
Unit string - The name of the department or branch under the organization. Support the use of Chinese, English characters.
- Parent
Identifier string The unique identifier of the root CA certificate.
NOTE: If
certificate_typeis set toSUB_ROOT,parent_identifieris required.- Path
Len intConstraint - The certificate path length. Default value:
0. Note:path_len_constrainttakes effect only ifcertificate_typeis set toSUB_ROOT. - Resource
Group stringId - A resource property field representing the resource group.
- State string
- The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters.
- Status string
- The status of the CA certificate.
- Dictionary<string, string>
- The tag of the resource.
- Years int
The validity period of the CA certificate, in years.
NOTE: It is recommended to set to
5to10years.
- Algorithm string
The key algorithm type of the CA certificate. The key algorithm is in the _ format. Valid values:
RSA_1024: The corresponding signature algorithm is Sha256WithRSA.RSA_2048: The corresponding signature algorithm is Sha256WithRSA.RSA_4096: The corresponding signature algorithm is Sha256WithRSA.ECC_256: The signature algorithm is Sha256WithECDSA.ECC_384: The corresponding signature algorithm is Sha256WithECDSA.ECC_512: The signature algorithm is Sha256WithECDSA.SM2_256: The corresponding signature algorithm is SM3WithSM2.
NOTE: If
certificate_typeis set toSUB_ROOT,algorithmis required.- Alias
Name string - Certificate
Type string - The type of the CA certificate. Default value:
ROOT. Valid values:ROOT: A root CA certificate.SUB_ROOT: A subordinate CA certificate.
- Common
Name string - The common name or abbreviation of the organization. Support the use of Chinese, English characters.
- Country
Code string - The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example,
CNrepresents China andUSrepresents the United States. - Crl
Day int - The validity period for the CRL, in days. Valid values:
1to365. Note:crl_daytakes effect only ifcertificate_typeis set toSUB_ROOT. - Enable
Crl bool - This setting turns the Certificate Revocation List (CRL) service on or off. Valid values:
- Extended
Key []stringUsages - The extended key usages. Note:
extended_key_usagestakes effect only ifcertificate_typeis set toSUB_ROOT. - Locality string
- Name of the city where the organization is located. Support the use of Chinese, English characters.
- Organization string
- The name of the organization (corresponding to your enterprise or company) associated with the CA certificate. Support the use of Chinese, English characters.
- Organization
Unit string - The name of the department or branch under the organization. Support the use of Chinese, English characters.
- Parent
Identifier string The unique identifier of the root CA certificate.
NOTE: If
certificate_typeis set toSUB_ROOT,parent_identifieris required.- Path
Len intConstraint - The certificate path length. Default value:
0. Note:path_len_constrainttakes effect only ifcertificate_typeis set toSUB_ROOT. - Resource
Group stringId - A resource property field representing the resource group.
- State string
- The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters.
- Status string
- The status of the CA certificate.
- map[string]string
- The tag of the resource.
- Years int
The validity period of the CA certificate, in years.
NOTE: It is recommended to set to
5to10years.
- algorithm String
The key algorithm type of the CA certificate. The key algorithm is in the _ format. Valid values:
RSA_1024: The corresponding signature algorithm is Sha256WithRSA.RSA_2048: The corresponding signature algorithm is Sha256WithRSA.RSA_4096: The corresponding signature algorithm is Sha256WithRSA.ECC_256: The signature algorithm is Sha256WithECDSA.ECC_384: The corresponding signature algorithm is Sha256WithECDSA.ECC_512: The signature algorithm is Sha256WithECDSA.SM2_256: The corresponding signature algorithm is SM3WithSM2.
NOTE: If
certificate_typeis set toSUB_ROOT,algorithmis required.- alias
Name String - certificate
Type String - The type of the CA certificate. Default value:
ROOT. Valid values:ROOT: A root CA certificate.SUB_ROOT: A subordinate CA certificate.
- common
Name String - The common name or abbreviation of the organization. Support the use of Chinese, English characters.
- country
Code String - The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example,
CNrepresents China andUSrepresents the United States. - crl
Day Integer - The validity period for the CRL, in days. Valid values:
1to365. Note:crl_daytakes effect only ifcertificate_typeis set toSUB_ROOT. - enable
Crl Boolean - This setting turns the Certificate Revocation List (CRL) service on or off. Valid values:
- extended
Key List<String>Usages - The extended key usages. Note:
extended_key_usagestakes effect only ifcertificate_typeis set toSUB_ROOT. - locality String
- Name of the city where the organization is located. Support the use of Chinese, English characters.
- organization String
- The name of the organization (corresponding to your enterprise or company) associated with the CA certificate. Support the use of Chinese, English characters.
- organization
Unit String - The name of the department or branch under the organization. Support the use of Chinese, English characters.
- parent
Identifier String The unique identifier of the root CA certificate.
NOTE: If
certificate_typeis set toSUB_ROOT,parent_identifieris required.- path
Len IntegerConstraint - The certificate path length. Default value:
0. Note:path_len_constrainttakes effect only ifcertificate_typeis set toSUB_ROOT. - resource
Group StringId - A resource property field representing the resource group.
- state String
- The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters.
- status String
- The status of the CA certificate.
- Map<String,String>
- The tag of the resource.
- years Integer
The validity period of the CA certificate, in years.
NOTE: It is recommended to set to
5to10years.
- algorithm string
The key algorithm type of the CA certificate. The key algorithm is in the _ format. Valid values:
RSA_1024: The corresponding signature algorithm is Sha256WithRSA.RSA_2048: The corresponding signature algorithm is Sha256WithRSA.RSA_4096: The corresponding signature algorithm is Sha256WithRSA.ECC_256: The signature algorithm is Sha256WithECDSA.ECC_384: The corresponding signature algorithm is Sha256WithECDSA.ECC_512: The signature algorithm is Sha256WithECDSA.SM2_256: The corresponding signature algorithm is SM3WithSM2.
NOTE: If
certificate_typeis set toSUB_ROOT,algorithmis required.- alias
Name string - certificate
Type string - The type of the CA certificate. Default value:
ROOT. Valid values:ROOT: A root CA certificate.SUB_ROOT: A subordinate CA certificate.
- common
Name string - The common name or abbreviation of the organization. Support the use of Chinese, English characters.
- country
Code string - The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example,
CNrepresents China andUSrepresents the United States. - crl
Day number - The validity period for the CRL, in days. Valid values:
1to365. Note:crl_daytakes effect only ifcertificate_typeis set toSUB_ROOT. - enable
Crl boolean - This setting turns the Certificate Revocation List (CRL) service on or off. Valid values:
- extended
Key string[]Usages - The extended key usages. Note:
extended_key_usagestakes effect only ifcertificate_typeis set toSUB_ROOT. - locality string
- Name of the city where the organization is located. Support the use of Chinese, English characters.
- organization string
- The name of the organization (corresponding to your enterprise or company) associated with the CA certificate. Support the use of Chinese, English characters.
- organization
Unit string - The name of the department or branch under the organization. Support the use of Chinese, English characters.
- parent
Identifier string The unique identifier of the root CA certificate.
NOTE: If
certificate_typeis set toSUB_ROOT,parent_identifieris required.- path
Len numberConstraint - The certificate path length. Default value:
0. Note:path_len_constrainttakes effect only ifcertificate_typeis set toSUB_ROOT. - resource
Group stringId - A resource property field representing the resource group.
- state string
- The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters.
- status string
- The status of the CA certificate.
- {[key: string]: string}
- The tag of the resource.
- years number
The validity period of the CA certificate, in years.
NOTE: It is recommended to set to
5to10years.
- algorithm str
The key algorithm type of the CA certificate. The key algorithm is in the _ format. Valid values:
RSA_1024: The corresponding signature algorithm is Sha256WithRSA.RSA_2048: The corresponding signature algorithm is Sha256WithRSA.RSA_4096: The corresponding signature algorithm is Sha256WithRSA.ECC_256: The signature algorithm is Sha256WithECDSA.ECC_384: The corresponding signature algorithm is Sha256WithECDSA.ECC_512: The signature algorithm is Sha256WithECDSA.SM2_256: The corresponding signature algorithm is SM3WithSM2.
NOTE: If
certificate_typeis set toSUB_ROOT,algorithmis required.- alias_
name str - certificate_
type str - The type of the CA certificate. Default value:
ROOT. Valid values:ROOT: A root CA certificate.SUB_ROOT: A subordinate CA certificate.
- common_
name str - The common name or abbreviation of the organization. Support the use of Chinese, English characters.
- country_
code str - The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example,
CNrepresents China andUSrepresents the United States. - crl_
day int - The validity period for the CRL, in days. Valid values:
1to365. Note:crl_daytakes effect only ifcertificate_typeis set toSUB_ROOT. - enable_
crl bool - This setting turns the Certificate Revocation List (CRL) service on or off. Valid values:
- extended_
key_ Sequence[str]usages - The extended key usages. Note:
extended_key_usagestakes effect only ifcertificate_typeis set toSUB_ROOT. - locality str
- Name of the city where the organization is located. Support the use of Chinese, English characters.
- organization str
- The name of the organization (corresponding to your enterprise or company) associated with the CA certificate. Support the use of Chinese, English characters.
- organization_
unit str - The name of the department or branch under the organization. Support the use of Chinese, English characters.
- parent_
identifier str The unique identifier of the root CA certificate.
NOTE: If
certificate_typeis set toSUB_ROOT,parent_identifieris required.- path_
len_ intconstraint - The certificate path length. Default value:
0. Note:path_len_constrainttakes effect only ifcertificate_typeis set toSUB_ROOT. - resource_
group_ strid - A resource property field representing the resource group.
- state str
- The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters.
- status str
- The status of the CA certificate.
- Mapping[str, str]
- The tag of the resource.
- years int
The validity period of the CA certificate, in years.
NOTE: It is recommended to set to
5to10years.
- algorithm String
The key algorithm type of the CA certificate. The key algorithm is in the _ format. Valid values:
RSA_1024: The corresponding signature algorithm is Sha256WithRSA.RSA_2048: The corresponding signature algorithm is Sha256WithRSA.RSA_4096: The corresponding signature algorithm is Sha256WithRSA.ECC_256: The signature algorithm is Sha256WithECDSA.ECC_384: The corresponding signature algorithm is Sha256WithECDSA.ECC_512: The signature algorithm is Sha256WithECDSA.SM2_256: The corresponding signature algorithm is SM3WithSM2.
NOTE: If
certificate_typeis set toSUB_ROOT,algorithmis required.- alias
Name String - certificate
Type String - The type of the CA certificate. Default value:
ROOT. Valid values:ROOT: A root CA certificate.SUB_ROOT: A subordinate CA certificate.
- common
Name String - The common name or abbreviation of the organization. Support the use of Chinese, English characters.
- country
Code String - The code of the country or region in which the organization is located, using a two-digit capital abbreviation. For example,
CNrepresents China andUSrepresents the United States. - crl
Day Number - The validity period for the CRL, in days. Valid values:
1to365. Note:crl_daytakes effect only ifcertificate_typeis set toSUB_ROOT. - enable
Crl Boolean - This setting turns the Certificate Revocation List (CRL) service on or off. Valid values:
- extended
Key List<String>Usages - The extended key usages. Note:
extended_key_usagestakes effect only ifcertificate_typeis set toSUB_ROOT. - locality String
- Name of the city where the organization is located. Support the use of Chinese, English characters.
- organization String
- The name of the organization (corresponding to your enterprise or company) associated with the CA certificate. Support the use of Chinese, English characters.
- organization
Unit String - The name of the department or branch under the organization. Support the use of Chinese, English characters.
- parent
Identifier String The unique identifier of the root CA certificate.
NOTE: If
certificate_typeis set toSUB_ROOT,parent_identifieris required.- path
Len NumberConstraint - The certificate path length. Default value:
0. Note:path_len_constrainttakes effect only ifcertificate_typeis set toSUB_ROOT. - resource
Group StringId - A resource property field representing the resource group.
- state String
- The name of the province, municipality, or autonomous region in which the organization is located. Support the use of Chinese, English characters.
- status String
- The status of the CA certificate.
- Map<String>
- The tag of the resource.
- years Number
The validity period of the CA certificate, in years.
NOTE: It is recommended to set to
5to10years.
Import
SSL Certificates Pca Certificate can be imported using the id, e.g.
$ pulumi import alicloud:sslcertificatesservicepca/certificate:Certificate example <id>
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Alibaba Cloud pulumi/pulumi-alicloud
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
alicloudTerraform Provider.
Alibaba Cloud v3.94.0 published on Tuesday, Feb 3, 2026 by Pulumi
