Azurerm_api_management resource keeps reapplying a field over and over

I’m using Terraform to deploy my API Management infra in Azure. However, for a specific field, Terraform keeps trying to reapply the changes over and over, although the deployment worked just fine in the first attempt.

Specifically, it’s the following field:
hostname_configuration block > developer_portal block > certificate

How can I debug this?