diff --git a/.changelog/3564.txt b/.changelog/3564.txt
new file mode 100644
index 0000000000..0d683b1260
--- /dev/null
+++ b/.changelog/3564.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/tencentcloud_gaap_layer7_listener: fix certificate_id was not updated successfully
+```
diff --git a/tencentcloud/services/gaap/resource_tc_gaap_layer7_listener.go b/tencentcloud/services/gaap/resource_tc_gaap_layer7_listener.go
index a24e482fd7..077cbd91f6 100644
--- a/tencentcloud/services/gaap/resource_tc_gaap_layer7_listener.go
+++ b/tencentcloud/services/gaap/resource_tc_gaap_layer7_listener.go
@@ -440,7 +440,10 @@ func resourceTencentCloudGaapLayer7ListenerUpdate(d *schema.ResourceData, m inte
 		)
 
 		name = helper.String(d.Get("name").(string))
-		certificateId = helper.String(d.Get("certificate_id").(string))
+		if d.HasChange("certificate_id") {
+			certificateId = helper.String(d.Get("certificate_id").(string))
+			isModifyHTTPSListener = true
+		}
 		forwardProtocol = helper.String(d.Get("forward_protocol").(string))
 		if d.HasChange("client_certificate_id") {
 			if raw, ok := d.GetOk("client_certificate_id"); ok {