ALB SSL Certificate Reimport

Question

I have a certificate expiring soon, and an ALB that is using the certificate. The certificate is imported to ACM. The question is what happens if I reimport a new certificate to the existing ACM certificate? will the old certificate still supported (at least until it expires) when the reimport happens?

For context, the client is hardcoding the certificate.

iuurquiz · Accepted Answer

Hi Wendy,

https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html
> To renew an imported certificate, you can obtain a new certificate from your certificate issuer and then manually reimport it into ACM. *This action preserves the certificate's association and its Amazon Resource name (ARN).* Alternatively, you can import a completely new certificate. *Multiple certificates with the same domain name can be imported, but they must be imported one at a time.*

If you import the certificate to the same ACM certificate, you won't need to update anything in the ALB console as the ARN and association will remain the same. If you import it as new certificate you would have to update the certificate association of the ALB. The old certificate will be valid until it expires and any resources associated with it will reflect that.

Please let me know if this answers your question, or if I should provide clarification.

Thanks,
Israel.

ALB SSL Certificate Reimport

Relevant content