Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

Certificate failure after pending

0

Attempting to get a certificate for this site - ec2-load-balancer-1740072273.us-west-1.elb.amazonaws.com - but it is failing again and again after notification of pending. Wonder why?

Topics
Security, Identity, & Compliance
Tags
AWS Certificate Manager
Language
English

asked 2 years ago199 views

1 Answer
0

Hello.

"amazonaws.com" is a domain managed by AWS, so ACM cannot issue an SSL certificate.
If you want to issue an SSL certificate with ACM, you will need to purchase and issue your own domain from Route53 or a domain provider.
https://docs.aws.amazon.com/acm/latest/userguide/acm-certificate-characteristics.html

You cannot request certificates for Amazon-owned domain names such as those ending in amazonaws.com, cloudfront.net, or elasticbeanstalk.com.

After purchasing a custom domain and issuing an SSL certificate with ACM, you can use it by performing domain verification, email verification, etc. according to the steps described in the document below.
https://docs.aws.amazon.com/acm/latest/userguide/domain-ownership-validation.html

EXPERT

answered 2 years ago

EXPERT

reviewed 2 years ago

  • Moti
    2 years ago

    I need a certificate to a subdomain of the hacknot.net website, http://cloud-service.hacknot.net. I have one for hacknot.net but it is not useful for the http://cloud-service.hacknot.net. Is there a way to get a certificate for this subdomain?

  • Riku_Kobayashi EXPERT
    2 years ago

    All you need to do is issue a certificate for the subdomain at the same time. For example, if you want to issue a certificate for "example.com" and its subdomains, you can also issue a wildcard certificate as shown below, and the certificate will be issued for the subdomain as well. a

    https://docs.aws.amazon.com/acm/latest/userguide/acm-overview.html

    AWS Certificate Manager (ACM) handles the complexity of creating, storing, and renewing public and private SSL/TLS X.509 certificates and keys that protect your AWS websites and applications. You can provide certificates for your integrated AWS services either by issuing them directly with ACM or by importing third-party certificates into the ACM management system. ACM certificates can secure singular domain names, multiple specific domain names, wildcard domains, or combinations of these. ACM wildcard certificates can protect an unlimited number of subdomains. You can also export ACM certificates signed by AWS Private CA for use anywhere in your internal PKI.

    So, in your case, if you issue "hacknot.net" and "*.hacknot.net", a certificate will be issued for the subdomain as well.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content