All Products
Search
Document Center

Edge Security Acceleration:ListCertificatesByRecord

Last Updated:Nov 07, 2025

Lists certificates that match specified records for a website. You can specify multiple records at a time.

Debugging

You can run this interface directly in OpenAPI Explorer, saving you the trouble of calculating signatures. After running successfully, OpenAPI Explorer can automatically generate SDK code samples.

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

  • Operation: the value that you can use in the Action element to specify the operation on a resource.
  • Access level: the access level of each operation. The levels are read, write, and list.
  • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
    • For mandatory resource types, indicate with a prefix of * .
    • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
  • Condition Key: the condition key that is defined by the cloud service.
  • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
OperationAccess levelResource typeCondition keyAssociated operation
esa:ListCertificatesByRecordlist
*Site
acs:esa:{#regionId}:{#accountId}:site/{#SiteId}
    none
none

Request parameters

ParameterTypeRequiredDescriptionExample
SiteIdlongYes

The website ID, which can be obtained by calling the ListSites operation.

1234567890123
RecordNamestringYes

The record name.

www.example.com
ValidOnlybooleanNo

Specifies whether to return only valid certificates. 0 indicates that all matched certificates are returned. 1 indicates that only valid certificates are returned.

1
DetailbooleanNo

Specifies whether to return the certificate details. 0 indicates that the certificate details are not returned. 1 indicates that the certificate details are returned.

1

Response parameters

ParameterTypeDescriptionExample
object

Schema of Response

RequestIdstring

The request ID.

65C66B7B-671A-8297-9187-2R5477247B76
TotalCountlong

The total number of records that you specified.

12
SiteIdlong

The website ID,

1234567890123
SiteNamestring

The website name.

example.com
Resultarray<object>

The queried certificates.

RecordItemobject

Details of the certificates.

RecordNamestring

The name of the record.

www.example.com
Countlong

The number of certificates that match the specified records.

3
Certificatesarray<object>

The certificates that match the specified records.

CertItemobject

The queried certificate.

CasIdstring

The certificate ID on Certificate Management Service.

30000137
Idstring

The ID of the certificate.

babab022c5e9b27bf9c64d7f4b1667f4
Namestring

The certificate name.

yourCertName
Regionstring

The region where the certificate is stored.

cn-hangzhou
Statusstring

The status of the certificate.

OK
Typestring

The type of the SSL certificate. Valid values:

free
CommonNamestring

The Common Name of the certificate.

www.example.com
NotBeforestring

The time when the certificate takes effect.

2023-02-28 06:17:11
NotAfterstring

The time when the certificate expires.

2024-02-28 06:17:11
Issuerstring

The certificate authority (CA) that issued the certificate.

GlobalSign nv-sa
IssuerCNstring

The Common Name of the certificate issuer.

GlobalSign Organization Validation CA - SHA256 - G3
SANstring

The Subject Alternative Name (SAN) of the certificate.

www.example.com,*.example.com
SigAlgstring

The signature algorithm of the certificate.

SHA256-RSA
PubAlgstring

The public key algorithm of the certificate.

RSA
CreateTimestring

The creation time.

2023-02-28 06:17:11
UpdateTimestring

The update time.

2023-02-28 06:17:11
SerialNumberstring

The serial number of the certificate.

baba39055622c008b90285a8838ed09a
FingerprintSha256string

The SHA-256 fingerprint of the certificate.

1dc5fc9af4eead2570c70d94b416130baeb6d4429b51fd3557379588456aca66
ApplylingCountlong

The number of certificates that are being requested.

1
Statusstring

Certificate configuration status. Possible values: none; configured; applying; failed.

none

Examples

Sample success responses

JSONformat

{
  "RequestId": "65C66B7B-671A-8297-9187-2R5477247B76",
  "TotalCount": 12,
  "SiteId": 1234567890123,
  "SiteName": "example.com ",
  "Result": [
    {
      "RecordName": "www.example.com ",
      "Count": 3,
      "Certificates": [
        {
          "CasId": 30000137,
          "Id": "babab022c5e9b27bf9c64d7f4b1667f4",
          "Name": "yourCertName",
          "Region": "cn-hangzhou",
          "Status": "OK",
          "Type": "free",
          "CommonName": "www.example.com ",
          "NotBefore": "2023-02-28 06:17:11",
          "NotAfter": "2024-02-28 06:17:11",
          "Issuer": "GlobalSign nv-sa",
          "IssuerCN": "GlobalSign Organization Validation CA - SHA256 - G3",
          "SAN": "www.example.com,*.example.com",
          "SigAlg": "SHA256-RSA",
          "PubAlg": "RSA",
          "CreateTime": "2023-02-28 06:17:11",
          "UpdateTime": "2023-02-28 06:17:11",
          "SerialNumber": "baba39055622c008b90285a8838ed09a",
          "FingerprintSha256": "1dc5fc9af4eead2570c70d94b416130baeb6d4429b51fd3557379588456aca66"
        }
      ],
      "ApplylingCount": 1,
      "Status": "none"
    }
  ]
}

Error codes

HTTP status codeError codeError messageDescription
400InvalidParameter.SiteIdFailed to query the website based on the SiteID you specified. Check parameter SiteId and try again.Failed to query the website based on the SiteID you specified. Check parameter SiteId and try again.
400MissingSiteIdRequired parameter SiteId missing. Specify SiteId and try again.Required parameter SiteId missing. Specify SiteId and try again.
400InternalExceptionFailed to call the service. Try again later or contact technical support.Failed to call the service. Try again later or contact technical support.
400MissingParameterRequired parameter RecordName missing. Specify RecordName and try again.Required parameter RecordName missing. Specify RecordName and try again.
403Unauthorized.InvalidTimeThe specified authentication time is invalid.The authentication time parameter you entered is invalid. Check the parameter value and try again.
403Unauthorized.InvalidTokenToken authentication failed.The token you entered is invalid. Please check and enter the correct token and try again.

For a list of error codes, visit the Service error codes.