- Newest
- Most votes
- Most comments
It appears you've created a distribution for your Lightsail WordPress instance and are now trying to set up an SSL/TLS certificate for it. The process you're experiencing is normal, but there are a few steps you need to complete to successfully validate and use your SSL/TLS certificate with your distribution.
When you first create an SSL/TLS certificate for your distribution, Lightsail attempts to automatically validate it. The initial "SUCCESS" status you saw for the CNAME records is a good sign, but it doesn't mean the certificate is fully validated yet.
The "Failed" status you're seeing now indicates that the automatic validation was not successful. This is common and doesn't mean there's a problem with your certificate. It simply means you need to manually validate the certificate by adding the provided CNAME records to your domain's DNS settings.
To resolve this and get your SSL/TLS certificate working:
-
Go to your domain registrar or DNS provider's website.
-
Add the CNAME records that Lightsail provided when you created the certificate. You should add two records:
- One for safetypedia.com
- One for www.safetypedia.com
-
After adding these CNAME records, wait for them to propagate. This can take anywhere from a few minutes to 48 hours, depending on your DNS provider.
-
Once the DNS changes have propagated, Lightsail will attempt to re-validate your certificate. You can check the status in the Lightsail console.
-
If the certificate status changes to "Valid," you can then enable custom domains for your distribution and attach the validated certificate.
-
Finally, make sure to update your domain's DNS settings to point to your Lightsail distribution.
Remember, your SSL/TLS certificates are valid for 13 months from the date of validation. Lightsail will attempt to automatically re-validate them, so it's important to keep the CNAME records in your DNS settings even after the initial validation.
If you continue to have issues after following these steps, double-check that all DNS records are correct and give it some time for changes to propagate before contacting AWS support for further assistance.
Sources
Validate SSL/TLS certificates for Lightsail distributions - Amazon Lightsail
Secure Lightsail CDN distributions with SSL/TLS certificates - Amazon Lightsail
SSL/TLS certificates in Lightsail - Amazon Lightsail
