AWS Certificate Manager sets 2027 end date for email-validated certificate renewals
AWS Certificate Manager will phase out email validation for public certificates during 2027, requiring migration to DNS validation before September 30, 2027.
AWS Certificate Manager will stop offering email validation in new Regions on January 1, 2027, discontinue it for new certificate requests on March 31, 2027, and stop renewing email-validated certificates on September 30, 2027. This precedes the CA/Browser Forum's March 15, 2028 deadline ending email-based domain validation for publicly trusted certificates. AWS is updating the UpdateCertificateOptions API so customers can switch to DNS validation in place while retaining the certificate ARN, with Route 53 support for creating required CNAME records.
- Email-validated certificates stop renewing on September 30, 2027.
- UpdateCertificateOptions API enables in-place switching to DNS validation.
- After switching, customers must add a CNAME record within 72 hours.
- CA/B Forum bans email-based domain validation from March 15, 2028.
- Vendors
- Amazon Web Services
- Organizations
- CA/Browser Forum
From the original article
2 min read at helpnetsecurity.com
AWS Certificate Manager (ACM) will phase out email validation for public certificates throughout 2027, ahead of the Certification Authority/Browser (CA/B) Forum’s March 15, 2028 deadline for ending email-based domain validation. The CA/B Forum sets standards that browsers and certificate authorities follow for publicly trusted certificates .
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.