Certificate renewal - Removing old Domains/SANs?

Hello John,

As of Now Unfortunately, there's no direct way to remove domains from an existing AWS certificate.

The only method is to:

• Create a new certificate with the domains you need.
• Replace the old certificate with the new one in your services.

Create a New Certificate:

• Identify Active Domains: Make a comprehensive list of all domains you currently use that require SSL/TLS protection.
• Request a New Certificate: Use the AWS Management Console or the AWS CLI to request a new certificate, including only the active domains in the Subject Alternative Names (SANs) list.
• Validate Domain Ownership: Follow the validation process as instructed by AWS. This typically involves adding specific DNS records or email verification.
• Replace Old Certificate: Once the new certificate is issued and validated, replace the old certificate with the new one in your application or service configurations.

Documentation: https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting.html