AWS Certificate Manager
User Guide (Version 1.0)

Troubleshoot Certificate Pinning Problems

To renew a certificate, ACM generates a new public-private key pair. If your application uses Certificate Pinning, sometimes known as SSL pinning, to pin an ACM Certificate, the application might not be able to connect to your domain after AWS renews the certificate. For this reason, we recommend that you don't pin an ACM Certificate. If your application must pin a certificate, you can do the following: