I received the below email about renewing an SSL/TLS certificate. I attempted to renew it on my own but was unsuccessful.
You have an SSL/TLS certificate from AWS Certificate Manager in your AWS account that expires on Jul 29, 2022 at 23:59:59 UTC. This certificate includes the primary domain nooneleft.org and a total of 2 domains.
AWS account ID: 598766462222
AWS Region name: us-east-1
Certificate identifier: arn:aws:acm:us-east-1:598766462222:certificate/ffbd4fc1-16b6-4a9c-8729-671ff8ab6301
AWS Certificate Manager (ACM) was unable to renew the certificate automatically using DNS validation. You must take action to ensure that the renewal can be completed before Jul 29, 2022 at 23:59:59 UTC. If the certificate is not renewed and the current certificate expires, your website or application may become unreachable.
To renew this certificate, you must ensure that the proper CNAME records are present in your DNS configuration for each domain listed below. You can find the CNAME records for your domains by expanding your certificate and its domain entries in the ACM console. You can also use the DescribeCertificate command in the ACM API[1] or the describe-certificate operation in the ACM CLI[2] to find a certificate’s CNAME records. For more information, see Automatic Domain Validation Failure in the ACM troubleshooting guide[3].
The following 2 domains require validation:
nooneleft.org, www.nooneleft.org
My customer followed the instructions from this ticket and can see that all certificates have been successfully validated and are showing "Eligible" for the renewal eligibility. Does that mean that are all set?