Certificate renewal status is "Pending auto-renewal" but domain renewal status is "Success"

Question

I received this email: Greetings from Amazon Web Services,

You have an SSL/TLS certificate from AWS Certificate Manager in your AWS account that expires on Apr 09, 2024 at 23:59:59 UTC. This certificate includes the primary domain driversjobchoice.com and a total of 5 domains.

AWS Certificate Manager (ACM) was unable to renew the certificate automatically using DNS validation. You must take action to ensure that the renewal can be completed before Apr 09, 2024 at 23:59:59 UTC. If the certificate is not renewed and the current certificate expires, your website or application may become unreachable.

However, my renewal status is success, the regular status is success. Renewal Eligibility is Eligible.

Renewal status says pending auto renewal. We have added the CNAMES in route 53 and are still getting emails about this. Any help or ideas of what to do?

Answer

![Enter image description here](/media/postImages/original/IMG2p0BQtKRjqMIOGY29arMg)

Answer

Hi THere
Please double check that you do not have another zone in Route53 with the same name.  ENsure you are creating thr validation records in the zone that your domain NS records are pointing to.   Can you try using the automated "Create Records" button in ACM?

click 'Create records in Route53' on the certificate manager -> list records page. Make sure that it is pointed to the correct DNS and click on 'Create Records'

Answer

Checking for updates is irregular and may take a while.

Also, ensure the CNAME record is set correctly using the dig or nslookup command.

https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-renewal.html#troubleshooting-automatic-renewal

https://repost.aws/knowledge-center/acm-certificate-pending-validation

Certificate renewal status is "Pending auto-renewal" but domain renewal status is "Success"

相關內容