Todos os produtos
Search
Central de documentação

Resource Orchestration Service:ALIYUN::ESA::ClientCertificate

Última atualização: Jun 27, 2026

Cria um certificado de cliente para um site.

Sintaxe

{
  "Type": "ALIYUN::ESA::ClientCertificate",
  "Properties": {
    "SiteId": Integer,
    "ValidityDays": Integer,
    "CSR": String,
    "PkeyType": String
  }
}

Propriedades

Nome da propriedade

Tipo

Obrigatória

Atualização permitida

Descrição

Restrições

SiteId

Integer

Sim

Não

ID do site.

Nenhuma

ValidityDays

Integer

Sim

Não

Período de validade do certificado.

Unidade: dias.

CSR

String

Não

Não

Conteúdo da solicitação de assinatura de certificado (CSR).

Nenhuma

PkeyType

String

Não

Não

Tipo de algoritmo de chave privada.

Nenhuma

Valores de retorno

Fn::GetAtt

  • SAN: nome alternativo da entidade do certificado.

  • SiteId: ID do site.

  • SiteName: nome do site.

  • ClientCertificateName: nome do certificado.

  • CACertificateId: ID do certificado da CA.

  • Issuer: autoridade certificadora que emitiu o certificado.

  • PubkeyAlgorithm: algoritmo de chave pública do certificado.

  • CreateTime: hora de criação do certificado.

  • SignatureAlgorithm: algoritmo de assinatura do certificado.

  • ClientCertId: ID do certificado.

  • NotAfter: data de expiração do certificado.

  • Type: tipo do certificado.

  • UpdateTime: hora da última atualização do certificado.

  • NotBefore: data a partir da qual o certificado se torna válido.

  • Certificate: conteúdo do certificado.

  • CommonName: nome comum do certificado.

Exemplos

ROSTemplateFormatVersion: '2015-09-01'
Parameters:
  SiteId:
    Type: Number
    Description:
      en: The site ID.
    Required: true
  ValidityDays:
    Type: Number
    Description:
      en: The certificate validity period.
    Required: true
Resources:
  ExtensionResource:
    Type: ALIYUN::ESA::ClientCertificate
    Properties:
      SiteId:
        Ref: SiteId
      ValidityDays:
        Ref: ValidityDays
Outputs:
  SAN:
    Description: The subject alternative name (SAN) of the certificate.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - SAN
  SiteId:
    Description: The site ID.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - SiteId
  SiteName:
    Description: The site name.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - SiteName
  ClientCertificateName:
    Description: The certificate name.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - ClientCertificateName
  CACertificateId:
    Description: The ID of the CA certificate.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - CACertificateId
  Issuer:
    Description: The certification authority (CA) that issued the certificate.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - Issuer
  PubkeyAlgorithm:
    Description: The public key algorithm of the certificate.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - PubkeyAlgorithm
  CreateTime:
    Description: The time when the certificate was created.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - CreateTime
  SignatureAlgorithm:
    Description: The signature algorithm of the certificate.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - SignatureAlgorithm
  ClientCertId:
    Description: The client certificate ID.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - ClientCertId
  NotAfter:
    Description: The time when the certificate expires.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - NotAfter
  Type:
    Description: The certificate type.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - Type
  UpdateTime:
    Description: The time when the certificate was updated.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - UpdateTime
  NotBefore:
    Description: The time when the certificate becomes valid.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - NotBefore
  Certificate:
    Description: The certificate content.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - Certificate
  CommonName:
    Description: The common name of the certificate.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - CommonName
{
  "ROSTemplateFormatVersion": "2015-09-01",
  "Parameters": {
    "SiteId": {
      "Type": "Number",
      "Description": {
        "en": "The site ID."
      },
      "Required": true
    },
    "ValidityDays": {
      "Type": "Number",
      "Description": {
        "en": "The certificate validity period."
      },
      "Required": true
    }
  },
  "Resources": {
    "ExtensionResource": {
      "Type": "ALIYUN::ESA::ClientCertificate",
      "Properties": {
        "SiteId": {
          "Ref": "SiteId"
        },
        "ValidityDays": {
          "Ref": "ValidityDays"
        }
      }
    }
  },
  "Outputs": {
    "SAN": {
      "Description": "The subject alternative name (SAN) of the certificate.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "SAN"
        ]
      }
    },
    "SiteId": {
      "Description": "The site ID.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "SiteId"
        ]
      }
    },
    "SiteName": {
      "Description": "The site name.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "SiteName"
        ]
      }
    },
    "ClientCertificateName": {
      "Description": "The certificate name.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "ClientCertificateName"
        ]
      }
    },
    "CACertificateId": {
      "Description": "The ID of the CA certificate.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "CACertificateId"
        ]
      }
    },
    "Issuer": {
      "Description": "The certification authority (CA) that issued the certificate.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "Issuer"
        ]
      }
    },
    "PubkeyAlgorithm": {
      "Description": "The public key algorithm of the certificate.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "PubkeyAlgorithm"
        ]
      }
    },
    "CreateTime": {
      "Description": "The time when the certificate was created.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "CreateTime"
        ]
      }
    },
    "SignatureAlgorithm": {
      "Description": "The signature algorithm of the certificate.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "SignatureAlgorithm"
        ]
      }
    },
    "ClientCertId": {
      "Description": "The client certificate ID.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "ClientCertId"
        ]
      }
    },
    "NotAfter": {
      "Description": "The time when the certificate expires.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "NotAfter"
        ]
      }
    },
    "Type": {
      "Description": "The certificate type.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "Type"
        ]
      }
    },
    "UpdateTime": {
      "Description": "The time when the certificate was updated.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "UpdateTime"
        ]
      }
    },
    "NotBefore": {
      "Description": "The time when the certificate becomes valid.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "NotBefore"
        ]
      }
    },
    "Certificate": {
      "Description": "The certificate content.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "Certificate"
        ]
      }
    },
    "CommonName": {
      "Description": "The common name of the certificate.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "CommonName"
        ]
      }
    }
  }
}