4

I have a EV certificate for multiple subdomains for my website. The list of domains allowed are:

  • cdn.subdomain.mydomain.com
  • subdomain-staging.mydomain.com
  • subdomain.mydomain.com

I want to use a Cloudfront CDN with a custom CNAME as cdn.subdomain.mydomain.com and the EV ssl certificate. But whenever I am trying to import it in AWS Certificate manager, I am getting the following error.

enter image description here

Can anyone help me?

My certificate is like 

-----BEGIN CERTIFICATE-----
//CONTENT Intermediate CA Bundle
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
//CONTENT
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
//CONTENT
-----END CERTIFICATE-----
Amit Badheka
  • 2,677
  • 4
  • 19
  • 29

2 Answers2

2

Split your file into 3 files by the -----BEGIN/END CERTIFICATE----- lines. Every file should look like:

-----BEGIN CERTIFICATE-----
XXX a lot of base64 data here XXX
-----END CERTIFICATE-----

For each file use:

openssl x509 -in mycert.crt -text -noout

You should get a lot of details about each certificate, including which domains it covers, etc. Only one of those certificates should contain your domain. If you have only one, that's the one you should upload to ACM. If you have more than one with your domain, please put the output of the openssl command for them here so we can help you figure out why you have more than one. Don't forget to remove the private key, if it's displayed.

kichik
  • 33,220
  • 7
  • 94
  • 114
0

As per the error which you are facing is not because of you don't know about how to import SSL certificate in AWS certificate manager but due to you are entering more than one SSL certificate or using one/same EV SSL certificate for your multiple sub domains.

EV SSL certificate secures only single domain.

So, in this case you have two options:

  1. Either purchase separate EV SSL certificate for each domain.
  2. Or go with EV Multi Domain SSL certificate which provides green bar for all your multiple domains. It saves your time used for different certificate management & also money.

Or if you still have confusion about how to import SSL certificate in AWS manager then you should refer http://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html

Dana
  • 344
  • 1
  • 5
  • I have a EV multi Domain SSL only, but its 2 part certificate. That is why its creating an issue. – Amit Badheka Aug 08 '17 at 12:04
  • 2 part certificate, didn't get you. – Dana Aug 09 '17 at 06:11
  • I have updated the answer to include the format of my certificate. If this helps – Amit Badheka Aug 09 '17 at 14:18
  • As per this https://aws.amazon.com/blogs/aws/custom-ssl-domain-names-root-domain-hosting-for-amazon-cloudfront/ cloudfront supports multi domain ssl, wildcard ssl, ev ssl etc but not anywhere mentioned that they are supporting ev multi domain ssl certificate so you should have to contact them from here https://aws.amazon.com/contact-us/ – Dana Aug 11 '17 at 06:58