AWS Certificate Manager
User Guide (Version 1.0)

Troubleshoot Managed Certificate Renewal Problems

Consult the following topics if you have troule with Managed Renewal for ACM's Amazon-Issued Certificates.

Domain Validation

Before renewing your certificate, ACM tries to automatically validate your domain names. In some cases, however, ACM needs you to take action to manually validate a domain. ACM renews a certificate only after all domain names in the certificate are validated automatically or manually. For more information, see How Domain Validation Works.

Asynchronous Process

Managed Renewal for ACM's Amazon-Issued Certificates is an asynchronous process. This means that the steps don't occur in immediate succession. After all domain names in an ACM Certificate have been validated, there might be a delay before ACM obtains the new certificate. An additional delay can occur between the time when ACM obtains the renewed certificate and the time when that certificate is deployed to the AWS resources that use it. Therefore, changes to the certificate status can take up to several hours to appear in the console.