ACM certificate not validating

Question

I created a TLS certificate for mydomain.com and *.mydomain.com and as the domain is on route 53 I clicked the button to create the CNAME entries for validation.

It's been pending validation for many hours now. I read it can take up to 30 minutes but it's still not finished. Could something have gone wrong?

Running `dig +short _[long string of characters].mydomain.com` in bash doesn't return anything so I'm guessing the CNAME hasn't resolved yet?

Answer

Please note that DNS propagation could take 24-48 hours to propagate DNS records. If your certificate is still in **Pending Validation** state, you can confirm the CNAME record provided by by the AM was added to the correct DNS configuration by running the commands similar to the one below:

Linux and MacOS:
>dig NS example.com

Windows:
>nslookup -type=ns example.com\

*[Reference]*
* [ACM certificate pending validation](https://repost.aws/knowledge-center/acm-certificate-pending-validation)
* For information on adding CNAME records to your Amazon Route 53 Hosted Zone, see [Creating records by using the Route 53 console](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-creating.html).

ACM certificate not validating

Relevant content