AWS Certificate Renewal


I received the following email from AWS:

Greetings from Amazon Web Services,

You have an SSL/TLS certificate from AWS Certificate Manager in your AWS account that expires on Apr 06, 2023 at 23:59:59 UTC. This certificate includes the primary domain * and a total of 1 domains.

AWS account ID: AWS Region name: us-east-1 Certificate identifier: arn:aws:acm:us-east-1:663766182564:certificate/d19c3459-73b9-4495-96d6-790ef6c7f0f9

AWS Certificate Manager (ACM) was unable to renew the certificate automatically using DNS validation. You must take action to ensure that the renewal can be completed. If the certificate is not renewed and the current certificate expires, your website or application may become unreachable.

To renew this certificate, you must ensure that the proper CNAME records are present in your DNS configuration for each domain listed below. You can find the CNAME records for your domains by expanding your certificate and its domain entries in the ACM console. You can also use the DescribeCertificate command in the ACM API[1] or the describe-certificate operation in the ACM CLI[2] to find a certificate’s CNAME records. For more information, see Automatic Domain Validation Failure in the ACM troubleshooting guide[3]. The following 1 domains require validation: *

I logged in to my Certificate Manager and the domain listed above ( is not even listed in the Certificate Manager. I don't understand why the AWS message is asking for renewal of a certificate not listed in my AWS account. I did have one certificate for a different domain that was listed in the Manager, but it was ineligible for renewal.

My SSL certificates are automatically renewed by SiteGround for all of my domains and are free. I have never purchased an SSL from AWS. Can anyone assist?

asked a year ago333 views
1 Answer

Just to be sure, you're looking in the right region?

I've received similar e-mails and when I click the link it logs me into a cached session and I'm not looking in the right region. Is this even a domain that you own? I would try using the CLI to see if you can find it that way as well.

answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions