SSL Certificate not getting renewed

Steps to Troubleshoot and Resolve the Issue:

Check DNS Propagation:

Since you're using a DNS checker tool, verify that the CNAME record for _acme-challenge.terteel.com is correctly propagated globally, especially in the Turkey region. If there's a red cross, it indicates that the CNAME record hasn't propagated correctly to all DNS servers in that region.

Ensure Correct CNAME Record:

Double-check the CNAME record you added in your DNS provider. Ensure that the value matches exactly what ACM provided, including any trailing dots and avoiding any accidental spaces.

TTL Settings:

Review the Time-To-Live (TTL) settings for your DNS records. If the TTL is set too high, it might delay the propagation. Lowering the TTL (e.g., to 300 seconds) temporarily during this process might help speed up propagation.

Manual DNS Check:

Manually query the DNS record using tools like dig or nslookup to check from different geographical regions. This can help pinpoint if the issue is specific to Turkey or just a temporary DNS propagation delay.

Example using dig:

dig _acme-challenge.terteel.com CNAME +short

Compare the output with the expected ACM-provided CNAME target.

DNS Propagation Delays:

Sometimes, DNS propagation can take longer in specific regions due to various reasons like ISP caching or regional DNS server issues. If time permits, waiting a few more hours might resolve the issue.

Alternative Validation Methods:

If the DNS validation is taking too long or failing, you could consider switching to email validation or HTTP validation if your domain setup allows it.

ACM Support Contact:

Given that your SSL certificate is about to expire today, if the issue persists and you cannot resolve it, consider reaching out to AWS Support for urgent assistance. They might be able to provide insights or expedite the validation process.

Temporary SSL Certificate:

If the SSL certificate expires and the validation is still pending, consider using a temporary SSL certificate (e.g., from Let's Encrypt) to avoid downtime, while you continue resolving the ACM validation issue.