All Products
Search
Document Center

Web Application Firewall:DescribeResourceInstanceCerts

Last Updated:Oct 14, 2025

Queries the certificates of a cloud product instance. This operation is available only in multi-account scenarios and returns the certificates of both the delegated administrator and the member that owns the instance. For example, if user A is a delegated administrator with cert1 and the instance lb-xx-1 belongs to member B who has cert2, a query for the instance lb-xx-1 returns both cert1 and cert2.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request parameters

Parameter

Type

Required

Description

Example

ResourceInstanceId

string

No

The ID of the cloud resource.

lb-bp1*****jqnnqk5uj2p

PageNumber

integer

No

The page number. Default value: 1.

1

PageSize

integer

No

The number of entries per page. Default value: 10.

10

RegionId

string

No

The region of the Web Application Firewall (WAF) instance. Valid values:

  • cn-hangzhou: the Chinese mainland.

  • ap-southeast-1: outside the Chinese mainland.

cn-hangzhou

InstanceId

string

Yes

The ID of the WAF instance.

Note

Call the DescribeInstance operation to query the ID of the WAF instance.

waf_v2_public_cn-*

ResourceManagerResourceGroupId

string

No

The ID of the resource group.

rg-acfm***q

Response elements

Element

Type

Description

Example

object

RequestId

string

The ID of the request.

D7861F61-***-6B19160D5EB0

TotalCount

integer

The total number of entries returned.

1

Certs

array<object>

The details of the certificates.

object

The details of the certificates.

Domain

string

The domain name associated with the certificate.

waf.aliyundemo.com

CertName

string

The name of the certificate.

waf-cert-name

CertIdentifier

string

The global ID of the certificate. The ID is generated by appending -cn-hangzhou to the certificate ID. For example, if the certificate ID is 123, the value of CertIdentifier is 123-cn-hangzhou.

123-cn-hangzhou

CommonName

string

The common name (CN).

www.aliyundemo.com

IsChainCompleted

boolean

Indicates whether the certificate chain is complete.

true

AfterDate

integer

The time when the certificate expires. This is a UNIX timestamp. Unit: milliseconds.

1708415521211

BeforeDate

integer

The time when the certificate was issued. This is a UNIX timestamp. Unit: milliseconds.

1708415521211

Examples

Success response

JSON format

{
  "RequestId": "D7861F61-***-6B19160D5EB0",
  "TotalCount": 1,
  "Certs": [
    {
      "Domain": "waf.aliyundemo.com",
      "CertName": "waf-cert-name",
      "CertIdentifier": "123-cn-hangzhou",
      "CommonName": "www.aliyundemo.com",
      "IsChainCompleted": true,
      "AfterDate": 1708415521211,
      "BeforeDate": 1708415521211
    }
  ]
}

Error codes

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.