Will an ACM certificate work if only some domains are successfully renewed?
We have an ACM certificate that was used for 4 different domains:
- myj... (primary)
- *.myj...
- hom...
- *.hom...
We no longer own myj and *.myj, and so do not care to renew them either. However, we very much want to continue using hom and *.hom which we seem to have successfully renewed them.
The overall renewal status for the certificate shows Pending Validation, and we also receive emails asking us to renew.
Will this certificate continue to work for hom and *.hom after expiry of myj? Or do we need to create a new certificate only for these two?
- Newest
- Most votes
- Most comments
Hello.
If the certificate is pending validation, it will not be possible to select the certificate in ALB etc.
I tried it with my AWS account, but when creating an ALB, I couldn't select a certificate that hadn't been verified.
Therefore, I think it would be better to issue another certificate.
https://repost.aws/knowledge-center/associate-acm-certificate-alb-nlb
If the certificate is issued for the same domain in the same region, the CNAME record value will be the same, so verification should be possible without adding a new DNS record for verification.
Hello,
If you don't renew the 'myj' domains, the entire ACM certificate will not work, including for 'hom' and '.hom'*. To keep using the 'hom' domains, you should issue a new ACM certificate specifically for them. https://repost.aws/knowledge-center/associate-acm-certificate-alb-nlb
Thank you.
Hello,
An ACM certificate can be issued successfully only when all the domains and sub-domains included in the certificate are validated. If anyone of the domains fails the validation, the certificate will be stuck in Pending Validation and it cannot be used anywhere. Having said that, you must create a new certificate with the domains - hom and *.hom to be able to use the certificate.
answered 2 years ago
Thank you.
Thank you.