Certificate not getting issued

Question

Hi,
I want to issue a certificate for my domain something.com. I registered a domain on Route 53, created a hosted zone. Following Riku_Kobayashi's advice I added a new certificate resource to my cloudformation template:

```
"MonSiteVitrineCertificate": {
      "Type" : "AWS::CertificateManager::Certificate",
      "Properties" : {
        "DomainName" : "xxxxxx.com",
        "DomainValidationOptions" : [
          {
            "DomainName": "xxxxxxx.com",
            "HostedZoneId": "XXXXXXXXXXXX"
          }],
        "ValidationMethod" : "DNS"
      }
    },
```
The certificate was issued on first attempts but my geographic areas were misconfigured so I deleted them and started all over again  and now the certificates won't get issued, they get stuck in PENDING_VALIDATION and the stack won't deploy. Please help!

Accepted Answer

Hi,

With the [AWS::CertificateManager::Certificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-certificatemanager-certificate.html) Cloudformation resource, the domain validation should be automatic if certificate domain is hosted in Amazon Route 53, the domain resides in your AWS account, and you are using DNS validation. - it looks like your use-case meets all three requirements.

You mentioned your initial attempt was successful - which means the CNAME record was added into your Route53 hosted zone. Are you using the same R53 zone or a different one? 
You can perform a DNS query for the CNAME to validate record was added into the zone and is propagated. You may just need to wait some time.

Also, have you seen this repost article? - [Why is the CNAME record not resolving for my ACM issued certificate and the DNS validation status is still pending validation?](https://repost.aws/knowledge-center/acm-certificate-pending-validation)

Certificate not getting issued

相關內容