> For the complete documentation index, see [llms.txt](https://docs.happenn.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.happenn.com/for-dev/aws/request-aws-certificate.md).

# Request AWS Certificate

How to request public certificate from AWS console.

## Request a Public Certificate

1. Go to AWS console and select service **AWS Certificate Manager**.
2. Normally, it will automatically go to **Certificates** page.
   * On **AWS Certificate Manager** page, click **List certificates** on the left menu.
3. Click **Request** button.
4. Select **Request a public certificate**(default choice), then click **Next**.
5. Request public certificate
   * **Domain names**
     * Type the domain you want to request the certification.
     * Ex. for **happenn.com**. This will require to input 2 domain which is **happenn.com** and **[www.happenn.com](http://www.happenn.com)**.
     * Ex. if you want the certificate to handle as wildcard. Add **happenn.com** and **\*.happenn.com**.
   * **Select validation method**
     * DNS validation (default)
   * Then click **Request** button.

![example for sictas.org domain](https://2376894685-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MSQXJCCQc-y8i_IGNtw%2Fuploads%2F8FhhISsh7Ig4isE9mT41%2Faws-request-cert-1.png?alt=media\&token=cb05708c-e435-4657-86f1-f4ffe7c65d10)

### Setup DNS for AWS to Validate

![List certificates](https://2376894685-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MSQXJCCQc-y8i_IGNtw%2Fuploads%2FAqeby768Tkbzj9B34Fy9%2Fimage_2022-01-04_155511.png?alt=media\&token=6adfb09f-38a5-486e-8344-565db910c8f5)

After requesting the certificate, the requested domain will appear in **List certificates**. The **Status** will be **Pending validation**. To make the domain to be able to validate. You can setup **DNS records** on **Route 53** (manually) or you can automatically update it from the certificate page.

### Create DNS records in Route 53

1. Click on **Certificate ID**.
2. You will be in that **Certificate Page**.
3. On **Domains** group, click on **Create records in Route 53**.
   * If the **CNAME name** and **CNAME value** are blank. You will need a bit of time for it to appear before you able to **Create records in Route 53**.
   * If you click before those values show up, and click on **Create records** from below step. Nothing will happen.
4. It will show the domain that needs to be validate (has status as **Pending validation**).
5. Click **Create records**.
6. You should get a **Successfully created DNS records** message.
   * You can also check on **Route 53** if it has those values.
7. This process can takes up to 30 minutes (or more). You can check on **List certificates** for the status to update (also click the refresh button).

## Add Certificate to Load Balancer

1. Go to AWS console and select service **EC2**
2. Select **Load Balancing** > **Load Balancers** 
3. Select the Load Balancers that you want to assign certificate to.
4. Select **Listeners** tab
5. Select **View/edit certificates** on **HTTPS : 443** row
6. Click **+** tab at the top
7. Select the certificate(s) you want to add and click **Add**

This will bind certificate(s) to the load balancer and doesn't need to setup SSL on the server itself as the load balancers will handle it for you.