ACM certificate DNS validation does not validate my certificate

Question

Hello,
I have an issue with ACM certificate validation (DNS based) in the eu-north-1 region (Stockholm). Yesterday I have created two regional certificates, both in the same eu-north-1 region. They both are using the same CDK script to create them. One of them is validated, while the second one is not. It's already 12 hours since I created the certificate and valid CNAME records, but the certificate still remains in the "Pending validation" state.

I tried to follow this guides:
- https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html
- https://aws.amazon.com/premiumsupport/knowledge-center/acm-certificate-pending-validation/
but unfortunately all of these guidelines do not apply in my case. I confirmed the following:
- CNAME record and its value exist
- CNAME record value is exactly the one pointed in ACM (no additional chars, no whitespaces etc.)
- no TXT record of the same name as the CNAME

At the same time, I don't see any issues with ACM/Route53 in the eu-north-1 region in my Health Dashboard. What else can I do to make my certificate validated?

I'm not able to create a support case, as my organization has a basic plan only, that's why I'm looking for help here.

Chethan SE · Answer

Hello Michal,

If you added the CNAME record correctly and still not verified then I would suggest to check if the record is able to resolve or not. To check run a dig and see the response. If there is no response then it might be the case where you have added to the wrong hosted zone (meaning you might have multiple hosted zones).

Check your hosted zone NS server records where you have added the CNAME record are matching to the below set or not.

%dig NS domainname.com

Regards,
CK

rePost-User-5260061 · Answer

I experience similar issue, request ACM certificates via Console, added Route53 CNAME record, Status:  Pending validation until timeout.

ACM certificate DNS validation does not validate my certificate

Relevant content