Queries the details of a certificate.
Try it now
Test
RAM authorization
Request parameters
|
Parameter |
Type |
Required |
Description |
Example |
| ClientToken |
string |
No |
The client token that is used to ensure the idempotence of the request. Generate a parameter value from your client to ensure that the value is unique among different requests. ClientToken supports only ASCII characters. Note
If you do not specify this parameter, the system uses the RequestId of the API request as the ClientToken. The RequestId of each API request is different. |
eyJhbGciOiJIUzI1NiIsInR5cC..... |
| AgentCertificateId |
string |
No |
The ID of the certificate to query. Call the ListAtiCertificates operation to query the information about the target certificate and obtain the ID from the response. |
2074041094504542210 |
Response elements
|
Element |
Type |
Description |
Example |
|
object |
Schema of Response |
||
| RequestId |
string |
The request ID. |
29D0F8F8-5499-4F6C-9FDC-1EE13BF55925 |
| AgentId |
string |
The agent ID. After CNNIC real-name authentication, CNNIC assigns a unified agent ID. The agent ID serves as the unique identifier that binds the agent to the real-name authenticated registrant. |
csp01860716@5e0964fd-951c-4e45-b518-d09d4d2db8ca |
| AgentHost |
string |
The host address of the agent. |
www.example.com |
| SerialNumber |
string |
The sequence number that indicates the priority of the returned address. A smaller value indicates a higher priority. |
1 |
| Issuer |
string |
The issuer information of the certificate, identified in Distinguished Names (DN) format. |
DigiCert Inc |
| Algorithm |
string |
The encryption algorithm of the certificate. |
RSA-2048 |
| CertType |
string |
The certificate type. Valid values:
|
Server |
| Source |
string |
The source of the certificate. |
BYOC |
| NotBefore |
string |
The start time of the certificate validity period. |
2026-01-26 02:16:38 |
| NotAfter |
string |
The end time of the certificate validity period. |
2027-05-09 02:19:49 |
| Status |
string |
The validity status of the certificate. Valid values:
|
Valid |
| Subject |
string |
The subject (owner) of the certificate, identified in DN format. |
acs:eventbridge:cn-hangzhou:1825725063814405:eventstreaming/dsadsad123213-trigger1 |
| San |
string |
The Subject Alternative Name (SAN) of the certificate. |
"dNSName: example.com, dNSName: www.example.com", |
| TlsaFingerprint |
string |
The DNS TLSA record value that stores the public key fingerprint of the certificate. |
3 1 1 2ea103e8c5ba3466ff7f94cc28336b40ce7432e55a2fc37e86b65e55737c45662 |
| CreateTimestamp |
integer |
The time when the health check template was created (timestamp). |
1527690629357 |
| UpdateTimestamp |
integer |
The time when the certificate was last updated (timestamp). |
1527690629357 |
| CertPem |
string |
The certificate file in PEM (Privacy-Enhanced Mail) format. |
-----BEGIN CERTIFICATE----- MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFAD... (A long string of Base64-encoded data) ... -----END CERTIFICATE----- |
| AccessDeniedDetail |
object |
The details about the access denial. This field is returned only when RAM authentication fails. |
|
| AuthAction |
string |
The unauthorized operation that was attempted. |
CreateUser |
| AuthPrincipalDisplayName |
string |
The display name of the authorization principal. |
2015555733387XXXX |
| AuthPrincipalOwnerId |
string |
The owner ID of the authorization principal. |
10469733312XXX |
| AuthPrincipalType |
string |
The identity type. |
SubUser |
| EncodedDiagnosticMessage |
string |
The encrypted complete diagnostic message. |
AQEAAAAAaNIARXXXXUQwNjE0LUQzN0XXXXVEQy1BQzExLTMzXXXXNTkxRjk1Ng== |
| NoPermissionType |
string |
The reason for the authentication failure. Valid values:
|
ImplicitDeny |
| PolicyType |
string |
The policy type. |
DlpSend |
Examples
Success response
JSON format
{
"RequestId": "29D0F8F8-5499-4F6C-9FDC-1EE13BF55925",
"AgentId": "csp01860716@5e0964fd-951c-4e45-b518-d09d4d2db8ca",
"AgentHost": "www.example.com",
"SerialNumber": "1",
"Issuer": "DigiCert Inc",
"Algorithm": "RSA-2048",
"CertType": "Server",
"Source": "BYOC",
"NotBefore": "2026-01-26 02:16:38",
"NotAfter": "2027-05-09 02:19:49",
"Status": "Valid",
"Subject": "acs:eventbridge:cn-hangzhou:1825725063814405:eventstreaming/dsadsad123213-trigger1",
"San": "\"dNSName: example.com, dNSName: www.example.com\",",
"TlsaFingerprint": "3 1 1 2ea103e8c5ba3466ff7f94cc28336b40ce7432e55a2fc37e86b65e55737c45662",
"CreateTimestamp": 1527690629357,
"UpdateTimestamp": 1527690629357,
"CertPem": "-----BEGIN CERTIFICATE-----\nMIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFAD...\n（中间是一长串经过 Base64 编码的数据）\n...\n-----END CERTIFICATE-----",
"AccessDeniedDetail": {
"AuthAction": "CreateUser",
"AuthPrincipalDisplayName": "2015555733387XXXX",
"AuthPrincipalOwnerId": "10469733312XXX",
"AuthPrincipalType": "SubUser",
"EncodedDiagnosticMessage": "AQEAAAAAaNIARXXXXUQwNjE0LUQzN0XXXXVEQy1BQzExLTMzXXXXNTkxRjk1Ng==",
"NoPermissionType": "ImplicitDeny",
"PolicyType": "DlpSend"
}
}Error codes
See Error Codes for a complete list.
Release notes
See Release Notes for a complete list.