Nameservers in R53?

I recently successfully transferred a domain into R53 from another registrar.

Then I went in a created a new hosted zone for the domain (it's a .org domain).

Next, I attempted to create a cert using ACM. The CNAME records were created successfully in the hosted zone, but the cert remains in a pending state, after several hours.

Then, I noticed that the nameservers specified in the register domain were different to those in the NS record in the hosted zone. All the NS entries (in both locations) are AWS. There was never an active site/host for this domain, so there's no existing IP address/hostname to preserve.

Could that be why the cert is pending?

Which set of nameservers is correct?

I am intending on hosting a website at this domain within AWS, hence the need for a cert.

Suggestions on troubleshooting steps, or a solution?

AnAdminUser
3년 전
Made sure that the nameservers in the registrar entry matches the NS record in the hosted zone (all 4).

Cert is still pending.

Should I removed the created CNAME records, and re-create the cert?

주제: 네트워킹 및 콘텐츠 전송 보안, 신원 및 규정 준수
태그: 아마존 루트 53 AWS 자격증 관리자
언어: English

AnAdminUser

질문됨 3년 전400회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

이 답변이 도움이 되었나요?커뮤니티가 여러분의 지식을 활용할 수 있도록 정답을 찬성하세요.

The name servers in the registar need to point to the hosted zone name servers. This is why your cert is not being issued as ACM is unable to resolve the CNAME record. You should update the registar with the new name servers from the hosted zone, then ACM will retry and the cert will be issued eventually.

전문가

Jimmy Dahlqvist

답변함 3년 전

AnAdminUser
3년 전
I neglected to say that when I noticed the difference in the NS records between the registrar entry and the zone entry, I did copy the zone NS record values into the registrar record.

Cert is still pending, even thought the validation CNAME records were correctly auto-created.
Steve_M 전문가
3년 전
Have the updated NS records on the registrar's side propagated yet - this may take a while if the TTL is a large figure.

Check the status of the NS field at https://toolbox.googleapps.com/apps/dig/

Nameservers in R53?

답변 추가

관련 콘텐츠