Lightsail distribution SSL/TLS certificates
You can create Amazon Lightsail TLS/SSL certificates for your Lightsail distributions. When you create a certificate, you specify the primary and alternate domain names for the certificate. When you enable custom domains for your distribution, and choose the certificate, those domains are added as the custom domains of your distribution. After you update the DNS record of your domains to point to your distribution, your distribution accepts the traffic and serves your content using HTTPS. There is a quota for the number of certificates that you can create. For more information, see Lightsail service quotas.
For more information about SSL/TLS certificates, see SSL/TLS certificates.
Important
The domain names you specify when creating an SSL/TLS certificate for your distribution cannot be in use by another distribution across all Amazon Web Services (AWS) accounts, including distributions on the Amazon CloudFront service. You will be able to create the certificate for the domains, but you will not be able to use the certificate with your distribution.
Prerequisite
Before you get started, you need to create a Lightsail distribution. For more information, see Create a distribution and Content delivery network distributions.
Create an SSL/TLS certificate for your distribution
Complete the following procedure to create an SSL/TLS certificate for your distribution.
-
Sign in to the Lightsail console
. -
On the Lightsail home page, choose the Networking tab.
-
Choose the name of the distribution for which want to create a certificate.
-
Choose the Custom domains tab on your distribution's management page.
-
Scroll down to the Attached certificates section of the page.
All of your distribution certificates are listed under the Attached certificates section of the page, including certificates created for other distributions, and certificates that are in use and not in use.
-
Choose Create certificate.
Enter a unique name in the Certificate name text box to identify your certificate. Then, choose Continue.
-
Enter the primary domain name (e.g.,
example.com) that you want to use with the certificate into the Specify up to 10 domains or subdomains field. -
(Optional) Enter alternate domain names (e.g.,
www.example.com) into the remaining Specify up to 10 domains or subdomains fields.You can add up to nine alternate domains to your certificate. You will be able to use all of your certificate's domains with your distribution after you enable custom domains and select the certificate for your distribution.
-
Choose Create.
Your certificate request is submitted, and the status of your new certificate is changed to Attempting to validate your certificate. During this time, Lightsail attempts to add the certificate's validation record to the DNS of the primary domain. After a while, the status will change to Valid.
If automatic validation fails, you will be required to validate the certificate with your domains before you can use it with your distribution. For more information, see Validate SSL/TLS certificates for your distribution.
Topics
