All Products
Search

This Product

    Certificate Management Service:DescribeCACertificateList

    Document Center

    Certificate Management Service:DescribeCACertificateList

    Last Updated:Jun 10, 2026

    Mengkueri semua sertifikat root dan otoritas sertifikat (CA) bawahan.

    Deskripsi operasi

    You can call this operation to query the details of all your root and intermediate CA certificates by page. The details include the unique identifier, serial number, subject information, and content of each certificate.

    QPS limit

    The queries per second (QPS) limit for this operation is 10 for each user. If you exceed the limit, API calls are throttled. This may affect your business. We recommend that you call this operation a reasonable number of times.

    Coba sekarang

    Coba API ini di OpenAPI Explorer tanpa perlu penandatanganan manual. Panggilan yang berhasil akan secara otomatis menghasilkan contoh kode SDK sesuai dengan parameter Anda. Unduh kode tersebut dengan kredensial bawaan yang aman untuk penggunaan lokal.

    Test

    RAM authorization

    Tabel berikut menjelaskan otorisasi yang diperlukan untuk memanggil API ini. Anda dapat menentukannya dalam kebijakan Resource Access Management (RAM). Kolom pada tabel dijelaskan sebagai berikut:

    • Action: Aksi yang dapat digunakan dalam elemen Action pada pernyataan kebijakan izin RAM untuk memberikan izin guna melakukan operasi tersebut.

    • API: API yang dapat Anda panggil untuk melakukan aksi tersebut.

    • Access level: Tingkat akses yang telah ditentukan untuk setiap API. Nilai yang valid: create, list, get, update, dan delete.

    • Resource type: Jenis resource yang mendukung otorisasi untuk melakukan aksi tersebut. Ini menunjukkan apakah aksi tersebut mendukung izin tingkat resource. Resource yang ditentukan harus kompatibel dengan aksi tersebut. Jika tidak, kebijakan tersebut tidak akan berlaku.

      • Untuk API dengan izin tingkat resource, jenis resource yang diperlukan ditandai dengan tanda bintang (*). Tentukan Nama Sumber Daya Alibaba Cloud (ARN) yang sesuai dalam elemen Resource pada kebijakan.

      • Untuk API tanpa izin tingkat resource, ditampilkan sebagai All Resources. Gunakan tanda bintang (*) dalam elemen Resource pada kebijakan.

    • Condition key: Kunci kondisi yang didefinisikan oleh layanan. Kunci ini memungkinkan kontrol granular, berlaku baik hanya untuk aksi maupun untuk aksi yang terkait dengan resource tertentu. Selain kunci kondisi spesifik layanan, Alibaba Cloud menyediakan serangkaian common condition keys yang berlaku di semua layanan yang didukung RAM.

    • Dependent action: Aksi dependen yang diperlukan untuk menjalankan aksi tersebut. Untuk menyelesaikan aksi tersebut, pengguna RAM atau role RAM harus memiliki izin untuk melakukan semua aksi dependen.

    Action

    Access level

    Resource type

    Condition key

    Dependent action

    yundun-cert:DescribeCACertificateList

    list

    *全部资源

    *

    		 None None

    Parameter permintaan

    Parameter

    Type

    Required

    Description

    Example
    CurrentPage

    integer

    No

    Nomor halaman. Nilai default: 1.

    1
    ShowSize

    integer

    No

    Jumlah entri yang dikembalikan pada setiap halaman. Nilai default: 20.

    20
    Identifier

    string

    No

    Pengidentifikasi unik sertifikat CA.

    Catatan

    Panggil DescribeCACertificateList untuk mengkueri pengidentifikasi unik dari semua sertifikat CA.

    1ee47e24-c51b-67cc-aa6b-1f7561cf9d9a
    CertType

    string

    No

    Tipe CA. Nilai valid:

    • root: CA root.

    • subRoot: CA perantara.

    • externalCa: CA eksternal yang diimpor.

    subRoot
    CaStatus

    string

    No

    Status CA. Nilai valid:

    • issue: diaktifkan.

    • forbidden: dinonaktifkan.

    • revoke: dicabut.

    issue
    ValidStatus

    string

    No

    Status validitas CA. Nilai valid:

    • valid: Sertifikat CA valid.

    • notValid: Sertifikat CA telah kedaluwarsa.

    valid
    IssuerType

    string

    No

    Penerbit CA. Nilai valid:

    • local: sertifikat pribadi.

    • iTrusChina: CA tepercaya.

    • external: CA eksternal yang diimpor.

    local
    ResourceGroupId

    string

    No

    ID kelompok sumber daya. Anda dapat memperoleh ID ini dengan memanggil operasi ListResources.

    rg-ae******4wia

    Elemen respons

    Element

    Type

    Description

    Example

    object

    The object.

    CurrentPage

    integer

    The page number.

    1
    RequestId

    string

    The ID of the request.

    15C66C7B-671A-4297-9187-2C4477247A74
    TotalCount

    integer

    The total number of root and intermediate CA certificates.

    2
    PageCount

    integer

    The number of pages returned.

    1
    ShowSize

    integer

    The number of CA certificates on each page.

    20
    CertificateList

    array<object>

    The details of the CA certificates.

    object

    The certificate information.

    Years

    integer

    The validity period of the CA certificate in years.

    3
    Status

    string

    The status of the CA certificate. Valid values:

    • ISSUE: The certificate is issued.

    • REVOKE: The certificate is revoked.

    ISSUE
    SerialNumber

    string

    The serial number of the CA certificate.

    70e3b2566d92805173767869727fb92e****
    CertificateType

    string

    The type of the CA certificate. Valid values:

    • ROOT: root CA certificate.

    • SUB_ROOT: intermediate CA certificate.

    SUB_ROOT
    Algorithm

    string

    The encryption algorithm of the CA certificate. Valid values:

    • RSA: RSA algorithm.

    • ECC: ECC algorithm.

    • SM2: SM2 algorithm.

    RSA
    State

    string

    The name of the province or state where the organization associated with the CA certificate is located.

    Zhejiang
    Organization

    string

    The name of the organization associated with the CA certificate.

    阿里云计算有限公司
    ParentIdentifier

    string

    The unique identifier of the root CA certificate that issued the CA certificate.

    Catatan

    This parameter is returned only when CertificateType is SUB_ROOT, which indicates an intermediate CA certificate.

    1a83bcbb89e562885e40aa0108f5****
    Locality

    string

    The name of the city where the organization associated with the CA certificate is located.

    Hangzhou
    Identifier

    string

    The unique identifier of the CA certificate.

    160ae6bb538d538c70c01f81dcf2****
    Sans

    string

    This parameter is deprecated.

    1
    KeySize

    integer

    The key length of the CA certificate.

    2048
    X509Certificate

    string

    The content of the CA certificate.

    -----BEGIN CERTIFICATE----- …… -----END CERTIFICATE-----
    SubjectDN

    string

    The distinguished name (DN) of the CA certificate. The DN indicates the user of the certificate and contains the following information:

    • C: The country code where the organization is located.

    • O: The name of the organization.

    • OU: The department of the organization.

    • L: The city where the organization is located.

    • CN: The common name or abbreviation of the organization.

    C=CN,O=阿里云计算有限公司,OU=Security,L=Hangzhou,ST=Zhejiang,CN=Aliyun
    SignAlgorithm

    string

    The signature algorithm of the CA certificate.

    SHA256WITHRSA
    OrganizationUnit

    string

    The name of the department of the organization associated with the CA certificate.

    Security
    AfterDate

    integer

    The expiration date of the CA certificate. This value is a UNIX timestamp. Unit: milliseconds.

    1665819958000
    Sha2

    string

    The SHA-256 fingerprint of the CA certificate.

    14dcc8afc7578e1fcec36d658f7e20de18f6957bbac42b373a66bc9de4e9****
    CommonName

    string

    The common name or abbreviation of the organization associated with the CA certificate.

    Aliyun
    Md5

    string

    The MD5 fingerprint of the CA certificate.

    160ae6bb538d538c70c01f81dcf2****
    CountryCode

    string

    The country code of the country where the organization associated with the CA certificate is located.

    For more information about country codes, see the Country codes section in Manage company information.

    CN
    BeforeDate

    integer

    The issuance date of the CA certificate. This value is a UNIX timestamp. Unit: milliseconds.

    1634283958000
    Alias

    string

    The alias of the instance.

    Aliyun_CA
    Trial

    integer

    Indicates whether the instance is a trial instance. Valid values:

    • 0: no.

    • 1: yes.

    0
    Gift

    integer

    Indicates whether the instance is a free instance. Valid values:

    • 0: no.

    • 1: yes.

    1
    ResourceGroupId

    string

    The ID of the resource group to which the certificate belongs.

    rg-acfmzjwrhehpavi

    Contoh

    Respons sukses

    JSONformat

    {
  "CurrentPage": 1,
  "RequestId": "15C66C7B-671A-4297-9187-2C4477247A74",
  "TotalCount": 2,
  "PageCount": 1,
  "ShowSize": 20,
  "CertificateList": [
    {
      "Years": 3,
      "Status": "ISSUE",
      "SerialNumber": "70e3b2566d92805173767869727fb92e****",
      "CertificateType": "SUB_ROOT",
      "Algorithm": "RSA",
      "State": "Zhejiang",
      "Organization": "阿里云计算有限公司",
      "ParentIdentifier": "1a83bcbb89e562885e40aa0108f5****",
      "Locality": "Hangzhou",
      "Identifier": "160ae6bb538d538c70c01f81dcf2****",
      "Sans": "1",
      "KeySize": 2048,
      "X509Certificate": "-----BEGIN CERTIFICATE----- …… -----END CERTIFICATE-----",
      "SubjectDN": "C=CN,O=阿里云计算有限公司,OU=Security,L=Hangzhou,ST=Zhejiang,CN=Aliyun",
      "SignAlgorithm": "SHA256WITHRSA",
      "OrganizationUnit": "Security",
      "AfterDate": 1665819958000,
      "Sha2": "14dcc8afc7578e1fcec36d658f7e20de18f6957bbac42b373a66bc9de4e9****",
      "CommonName": "Aliyun",
      "Md5": "160ae6bb538d538c70c01f81dcf2****",
      "CountryCode": "CN",
      "BeforeDate": 1634283958000,
      "Alias": "Aliyun_CA",
      "Trial": 0,
      "Gift": 1,
      "ResourceGroupId": "rg-acfmzjwrhehpavi"
    }
  ]
}

    Kode kesalahan

    Lihat Error Codes untuk daftar lengkap.

    Catatan rilis

    Lihat Release Notes untuk daftar lengkap.