ListInstances - Certificate Management Service - Alibaba Cloud Documentation Center

Retrieves a list of instances.

Operation description

Queries the status information of Private Certificate Authority (PCA) instances that you purchased through the SSL Certificate console by specifying the IDs of the private CA instances. For example, you can query the status of a CA instance, the number of digital certificates included, and the number of digital certificates issued.

Before invoking this operation, you must have purchased a private CA through the Certificate Management Service console. For more information, see Purchase a private CA.

QPS limit

The single-user QPS limit for this operation is 10 calls per second. If the limit is exceeded, the API invoke is throttled, which may affect your business. Invoke this operation as needed.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

yundun-cert:ListInstances

list

*All Resource

*

None

Request parameters

Parameter	Type	Required	Description	Example
Keyword	string	No	The keyword for fuzzy search. Matches domain names, instance names, or corresponding resource IDs.	test
Status	string	No	The instance status. Valid values: inactive: Pending use. pending: Under review. The latest certificate is being submitted for review. willExpire: The instance is about to expire. expired: The instance has expired. refund: Refunded. normal: Normal. closed: Shutdown and unavailable.	inactive
Brand	string	No	The CA brand. Valid values: WoSign, CFCA, DigiCert, GeoTrust, GlobalSign, vTrus, and Alibaba.	Digicert
CertificateType	string	No	The type of the certificate. Valid values: DV, OV, and EV.	DV
CertificateStatus	string	No	The status of the certificate. Valid values: issued: Issued. revoked: Revoked. willExpire: About to expire. expired: Expired. Valid values: expired : expired willExpire : about to expire issued : issued revoked : revoked	issued
InstanceType	string	No	The instance type. Valid values: BUY (official certificate) and TEST (test certificate).	BUY
ResourceGroupId	string	No	The resource group ID.	rg-ae******4wia
ShowSize	integer	No	The number of instances to display per page in a paging query. Settings the number of instances displayed per page. Default value: 10. Maximum value: 100.	10
CurrentPage	integer	No	The page number of the current page in a paging query. Settings the current page number. Default value: 1.	1
ServerDeployFlag	integer	No	Specifies whether to return only instances that meet server deployment conditions. Valid values: 1: is. 0: no.	1
AutoReissueFlag	integer	No	Specifies whether the instance is managed. Valid values: 1 (managed) and 0 (not managed).	1

Response elements

Element	Type	Description	Example
	object
CurrentPage	integer	The page number of the current page in a paging query.	1
DisableReissueCount	integer	The number of instances for which managed renewal is not enabled.	80
EnableReissueCount	integer	The number of instances for which managed renewal is enabled.	100
InstanceList	array<object>	The list of instances.
	object	The instance.
AutoReissue	string	Indicates whether automatic managed renewal is enabled. Valid values: enable: Enabled. disable: Not enabled.	enable
Brand	string	The CA brand. Valid values: WoSign, CFCA, DigiCert, GeoTrust, GlobalSign, vTrus, and Alibaba.	DigiCert
CertIdentifier	string	The global certificate ID, in the format of certificate ID + "-" + site region ID. This ID is commonly used across Alibaba Cloud services. Valid values: For the China site: certificate ID + "-cn-hangzhou". For the China site (Chinese): certificate ID + "-ap-southeast-1". For example, if the certificate ID is 123, the CertIdentifier on the China site is "123-cn-hangzhou", and the CertIdentifier on the China site (Chinese) is "123-ap-southeast-1".	21795675-cn-hangzhou
CertificateDomain	string	The domain name of the latest issued certificate.	abc.com,www.abc.com
CertificateId	integer	The certificate ID.	18541349
CertificateName	string	The certificate name.	cert-13216408
CertificateNotAfter	integer	The end time of the latest certificate. The value is a UNIX timestamp in seconds. This value is empty if no certificate has been issued.	1801324800000
CertificateNotBefore	integer	The start time of the latest certificate. The value is a UNIX timestamp in seconds. This value is empty if no certificate has been issued.	1776988800000
CertificateRevokeTime	integer	The revocation time of the latest certificate. The value is a UNIX timestamp in seconds.	1801324800000
CertificateStatus	string	The status of the certificate. Valid values: issued: Issued. revoked: Revoked. willExpire: About to expire. expired: Expired.	issued
CertificateType	string	The type of the certificate. Valid values: DV, OV, and EV.	DV
Domain	string	The domain name attached to the certificate.	test.com
FullDomainCount	integer	The number of exact-match domain names.	1
InstanceEndTime	integer	The expiration time of the instance. The value is a UNIX timestamp in seconds. This value is empty if no certificate has been issued.	1801324800000
InstanceId	string	The instance ID.	cas_dv-cn-123
InstanceStartTime	integer	The start time of the instance. The value is a UNIX timestamp in seconds. This value is empty if no certificate has been issued.	1801324800000
InstanceType	string	The instance type. Valid values: BUY (official certificate) and TEST (test certificate).	BUY
KeyAlgorithm	string	The certificate algorithm. Default value: RSA_2048. Valid values: RSA_2048 RSA_3072 RSA_4096 ECC_256 SM2	RSA_2048
OrderEndTime	integer	The end time when the instance was purchased. The value is a UNIX timestamp in seconds. This value is used to determine the purchase duration of the instance.	1801324800000
OrderStartTime	integer	The start time when the instance was purchased. The value is a UNIX timestamp in seconds. This value is used to determine the refund time limit.	1801324800000
PendingResult	string	The result returned by the CA during the last certificate operation.	pending
ResourceGroupId	string	The resource group ID.	123
Spec	string	The purchased instance specification.	ss.dv.t
Status	string	The instance status. Valid values: inactive: Pending use. pending: Under review. The latest certificate commit is under review. willExpire: The instance is about to expire. expired: The instance has expired. refund: Refunded. normal: Normal. closed: Shutdown and unavailable.	inactive
UsingProductList	array	The deployment list of cloud services for the latest certificate.
	string	The deployment cloud service.	['DCDN', 'VOD', 'CDN', 'OSS']
VersionType	string	The version type. Valid values: basic (Basic Edition), standard (Standard Edition), professional (Professional Edition), and ultimate (Ultimate Edition). Valid values: standard : Standard Edition ultimate : Ultimate Edition basic : Basic Edition professional : Professional Edition	professional
WildcardDomainCount	integer	The number of wildcard domain names.	0
RequestId	string	The request ID.	12345678-1234-1234-1234-123456789ABC
ShowSize	integer	The number of records displayed per page.	20
TotalCount	integer	The total number of instances.	12

Examples

Success response

JSON format

{
  "CurrentPage": 1,
  "DisableReissueCount": 80,
  "EnableReissueCount": 100,
  "InstanceList": [
    {
      "AutoReissue": "enable",
      "Brand": "DigiCert",
      "CertIdentifier": "21795675-cn-hangzhou",
      "CertificateDomain": "abc.com,www.abc.com",
      "CertificateId": 18541349,
      "CertificateName": "cert-13216408",
      "CertificateNotAfter": 1801324800000,
      "CertificateNotBefore": 1776988800000,
      "CertificateRevokeTime": 1801324800000,
      "CertificateStatus": "issued",
      "CertificateType": "DV",
      "Domain": "test.com",
      "FullDomainCount": 1,
      "InstanceEndTime": 1801324800000,
      "InstanceId": "cas_dv-cn-123",
      "InstanceStartTime": 1801324800000,
      "InstanceType": "BUY",
      "KeyAlgorithm": "RSA_2048",
      "OrderEndTime": 1801324800000,
      "OrderStartTime": 1801324800000,
      "PendingResult": "pending",
      "ResourceGroupId": "123",
      "Spec": "ss.dv.t",
      "Status": "inactive",
      "UsingProductList": [
        "['DCDN', 'VOD', 'CDN', 'OSS']"
      ],
      "VersionType": "professional",
      "WildcardDomainCount": 0
    }
  ],
  "RequestId": "12345678-1234-1234-1234-123456789ABC",
  "ShowSize": 20,
  "TotalCount": 12
}

Error codes

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.