Skip to content

SSL certificate is expired (Certificate managed by Amplify)

0

Hello,

the SSL certificate (managed by Amplify) expired today. But it seems it is not renewed. What can I do?

Issued On	Saturday 19 August 2023 at 02:00:00
Expires On	Wednesday 18 September 2024 at 01:59:59

asked 2 years ago869 views

3 Answers
3
Accepted Answer

Amplify can't renew the certificate if the CNAME verification record has been modified or deleted in the DNS settings with your domain provider. You must delete and add the domain again in the Amplify console.

The default certificate generated by AWS Certificate Manager (ACM) is valid for 13 months and renews automatically as long as your app is hosted with Amplify.

EXPERT

answered 2 years ago

EXPERT

reviewed 2 years ago

1

I do not have this option.

Enter image description here

answered 2 years ago

0

To get to the screen you provided you created a custom domain initially. When the app was deployed you had to create a few CNAMES in your DNS providers portal (Cloudflare, Azure DNS, Route 53, etc.) for your domain. After this was done, you navigated back to your Amplify dashboard. There you would then proceed to the next steps; this is where Amplify verifies everything & then creates a Certificate for the app. Currently you are in the Custom Domains "Domain Configuration" tab.

In order to resolve this issue, you will need to navigate to Hosting > Custom Domains > Actions > View DNS records.


Actions Menu>View DNS record


This is where you will find the DNS CNAME records needed to be verified/confirmed in your DNS providers portal. If for whatever reason they are absent from your DNS providers portal, then you will have to delete the Custom Domain and re-add it, following the same steps above in order to create a new certificate.

If the certificate failed to update there may have been an issue at some point causing the disconnect. I would recommend leveraging AWS Route53 to create a seamless experience when deploying apps and other projects in AWS. Keep in mind changing your DNS provider from a company like (Namescheap, GoDaddy, etc.) does not require you to transfer your domain. The domain is managed as a "Registrar", this is separate from DNS. This is the section where you can set "Name Servers". Hope that helps, best of luck!

Resources:

answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.