AWS Certificate Manager
User Guide (Version 1.0)

The AWS Documentation website is getting a new look!
Try it now and let us know what you think. Switch to the new look >>

You can return to the original look by selecting English in the language selector above.

Troubleshoot Certificate Pinning Problems

To renew a certificate, ACM generates a new public-private key pair. If your application uses Certificate Pinning, sometimes known as SSL pinning, to pin an ACM Certificate, the application might not be able to connect to your domain after AWS renews the certificate. For this reason, we recommend that you don't pin an ACM Certificate. If your application must pin a certificate, you can do the following:

  • Import your own certificate into ACM and then pin your application to the imported certificate. ACM doesn't provide managed renewal for imported certificates.

  • If you're using a public certificate, pin your application to all available Amazon root certificates. If you're using a private certificate, pin your application to the CA's root certificate.