ACM certificate in Pending Validation State

Question

Hello,
I am seeing requested certificate in Pending Validation state for more than 2 days.
I created a public hosted zone named test.tango.in and requested a certificate in ap-south-1 region with the same name test.tango.in post which I added required CNAME record in test.tango.in hosted zone, however I am still seeing certificate in 'Pending validation' state. 
I tried dig command for one of the 4 NS servers and I can see status as NOERROR , however I am still waiting for certificate to be in 'Issued' state.

I am seeking help as it is a blocker now.

Answer

Do you administer the test.tango.in domain? I've tried digging it and I don't see any nameservers.

The registrar of tango.in appears to be Dynadot, would that be correct? The NS records need to be updated with the registrar so that they have the value of the four AWS nameservers in the Route 53 public zone of the same name.

Answer

Hi,

If I right understood you created the public zone in Route53, but your domain registrar is not pointing to Route53

```
❯ whois test.tango.in
---cut---
nserver:      NS1.REGISTRY.IN 2001:dcd:1:0:0:0:0:12 37.209.192.12
nserver:      NS2.REGISTRY.IN 2001:dcd:2:0:0:0:0:12 37.209.194.12
nserver:      NS3.REGISTRY.IN 2001:dcd:3:0:0:0:0:12 37.209.196.12
nserver:      NS4.REGISTRY.IN 2001:dcd:4:0:0:0:0:12 37.209.198.12
nserver:      NS5.REGISTRY.IN 156.154.100.20 2001:502:2eda:0:0:0:0:20
nserver:      NS6.REGISTRY.IN 156.154.101.20 2001:502:ad09:0:0:0:0:20
---cut---
created:      1989-05-08
changed:      2023-07-25
source:       IANA
```

you need point NS to the ones you have in your Route53 https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/migrate-dns-domain-in-use.html

ACM certificate in Pending Validation State

Relevant content