This message was deleted.

I suspect those need to be

name=appcert.domain_validation_options[0]["resourceRecordName"],

(and similar for the other inputs to the resource).

Thanks that worked