1 個回答
- 最新
- 最多得票
- 最多評論
0
You mention CNAME validation which suggests DNS validated certificate, and this should automatically renew 60 days before expiry https://docs.aws.amazon.com/acm/latest/userguide/dns-renewal-validation.html
If the cert isn't in-use then it won't be renewed, is this the situation here? In these circumatances, once the cert is expired it's not eligible for renewal https://docs.aws.amazon.com/acm/latest/userguide/managed-renewal.html
- NOT ELIGIBLE if already expired.
In this case it's best just to start again with a brand new certificate request.
相關內容
AWS 官方已更新 2 年前
Thank you for your response. I am looking for clarity on the process of requesting new certs after one or more have expired. Do I have to delete the previous CNAME validation in the Route 53 DNS before requesting a new one, and/or do I have to delete the expired SSL in Certificate Manager before requesting a new one for the same domains and ghost domains? Do I have to add the ghost names when i request the SSL or do i add the ghost domain after i request the SSL on the subdomain i need the SSL for?
You can raise a new request with the same Common Name and Subject Alternate Names as the expired cert, and both certs can exist at the same time (this is useful if you want to make sure the settings in the new cert are the same as the old cert).
When you delete a cert you can also safely delete the corresponding CNAME .txt records from Route 53. Be careful to delete only the records related to that cert.