Skip to content

How do I get the ssl certificates from AWS Certificate Manager

1

The docs say:

"Choose the link of the certificate that you want to export.

Choose Export."

But the only export button I see is to export the DNS in csv format. The status is currently "Issued"

asked 2 years ago2.8K views

2 Answers
1
Accepted Answer

I apologize, but there seems to be a misunderstanding in your question. AWS Certificate Manager (ACM) does not allow you to export SSL/TLS certificates that are publicly trusted or ACM-issued. The export functionality you're referring to is only available for private certificates issued by AWS Private Certificate Authority (AWS Private CA).

For publicly trusted certificates or those issued directly by ACM, there is no option to export the certificate or its private key. This is a security measure to protect the integrity of these certificates.

The "Export" option you're looking for would only be visible for private certificates. For public certificates with an "Issued" status, you won't see this export option.

Instead of exporting, you can retrieve the certificate and its certificate chain using the GetCertificate API action. This will provide you with the certificate and chain in base64 encoded format, which you can then use with other AWS services or decode using tools like OpenSSL to inspect individual fields.

If you need to use the certificate with non-AWS services or outside of AWS, you'll need to request a new certificate from a third-party Certificate Authority and import it into ACM, or use AWS Private CA to issue a private certificate that can be exported.

Remember, ACM is designed to work seamlessly with other AWS services. You can easily deploy your ACM-managed certificates with services like Elastic Load Balancer, Amazon CloudFront, and Amazon API Gateway without needing to export them.
Sources
Export an AWS Certificate Manager private certificate - AWS Certificate Manager
GetCertificate - AWS Certificate Manager
AWS Certificate Manager features - Amazon Web Services (AWS)

answered 2 years ago

EXPERT

reviewed 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.