Despite of the CNAME being resolved correctly, we get no result back, and the certificate remains pending validation.

Question

All of the step for creating the certificate and updating the DNS records were already checked and no errors were found. Looking at the DNS validation troubleshoot documentation, I was not able to identify the issue. The certificate remains pending validation.

Answer

Hi,
You can check if the required CNAME record exists in the public DNS database. For example, if the certificate requires the following CNAME record:

```
_.example.com.
_.acm-validations.aws.
```

You can check if the command `dig _.example.com. +short` returns the required value. If the command returns nothing, the CNAME record does not exist in the public DNS database yet. More reference can be found in https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-DNS-validation.html.

Despite of the CNAME being resolved correctly, we get no result back, and the certificate remains pending validation.

Relevant content