CA Certificate Revoked

0

Hello, so i don't know when this issue is occurred. but previously between Mar 2023 the problem didn't happen at all. and suddenly this issue appears.

I already check on my Route53 the CAA record is exists and check on ACM the cert still valid

CA Cert Revoked CA Cert Revoked 2 CAA Record on route53 Certificate Status on ACM Certificate Status on ACM 2

Sorry of my language, because english is not my primary language

  • What type of certificate are you using? Does this occur on a specific subdomain?

3 Answers
0
Accepted Answer

This problem solved by request new public certificate

Abdilah
answered 10 months ago
profile picture
EXPERT
reviewed a month ago
0

Hello, could you confirm the URL you are using?

I see that you're using Route53

; <<>> DiG 9.10.6 <<>> NS abdilah.id ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22867 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;abdilah.id. IN NS

;; ANSWER SECTION: abdilah.id. 3600 IN NS ns-746.awsdns-29.net. abdilah.id. 3600 IN NS ns-441.awsdns-55.com. abdilah.id. 3600 IN NS ns-1430.awsdns-50.org. abdilah.id. 3600 IN NS ns-1554.awsdns-02.co.uk.

Have there been any changes since your posting?

I accessed the URL abdilah.id and was redirected to www.abdilah.id and looking at the certificate no problem was identified:

Common Name (CN) *.abdilah.id Organization (O) <Not Part Of Certificate> Organizational Unit (OU) <Not Part Of Certificate> Common Name (CN) Amazon RSA 2048 M02 Organization (O) Amazon Organizational Unit (OU) <Not Part Of Certificate> Issued On Sunday, June 4, 2023 at 9:00:00 PM Expires On Thursday, July 4, 2024 at 8:59:59 PM SHA-256 Fingerprint 0B 47 D3 03 60 6F 1E 2C 22 FA BF 2A C3 8F 27 9B FE 6D DF 42 2D 21 9B BC 94 5A DA F9 68 CF FB 8B SHA-1 Fingerprint 45 81 42 3B 35 52 87 C8 8B 30 02 0D EE 94 B6 FE 0D 84 93 DD

Below is a link that shows how to validate the ACM certificate on Route53

https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html

profile pictureAWS
answered a year ago
0

Hi Marcelo, the issue domain is cdn.abdilah.id which is using cloudfront to serving my s3 assets. and until now there's no changes occurs

Abdilah
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions