- Newest
- Most votes
- Most comments
I apologize, but there seems to be a misunderstanding in your question. AWS Certificate Manager (ACM) does not allow you to export SSL/TLS certificates that are publicly trusted or ACM-issued. The export functionality you're referring to is only available for private certificates issued by AWS Private Certificate Authority (AWS Private CA).
For publicly trusted certificates or those issued directly by ACM, there is no option to export the certificate or its private key. This is a security measure to protect the integrity of these certificates.
The "Export" option you're looking for would only be visible for private certificates. For public certificates with an "Issued" status, you won't see this export option.
Instead of exporting, you can retrieve the certificate and its certificate chain using the GetCertificate API action. This will provide you with the certificate and chain in base64 encoded format, which you can then use with other AWS services or decode using tools like OpenSSL to inspect individual fields.
If you need to use the certificate with non-AWS services or outside of AWS, you'll need to request a new certificate from a third-party Certificate Authority and import it into ACM, or use AWS Private CA to issue a private certificate that can be exported.
Remember, ACM is designed to work seamlessly with other AWS services. You can easily deploy your ACM-managed certificates with services like Elastic Load Balancer, Amazon CloudFront, and Amazon API Gateway without needing to export them.
Sources
Export an AWS Certificate Manager private certificate - AWS Certificate Manager
GetCertificate - AWS Certificate Manager
AWS Certificate Manager features - Amazon Web Services (AWS)
Relevant content
- AWS OFFICIALUpdated a year ago

Exports a private certificate issued by a private certificate authority (CA) for use anywhere. The exported file contains the certificate, the certificate chain, and the encrypted private 2048-bit RSA key associated with the public key that is embedded in the certificate. For security, you must assign a passphrase for the private key when exporting it. https://docs.aws.amazon.com/acm/latest/APIReference/API_ExportCertificate.html