Can’t resend validation email from ACM? We can help you.

As a part of our AWS Support Services, we often receive similar requests from our AWS customers.

Today, let’s see the steps followed by our Support Techs to help our customers.

Can’t resend validation email from ACM

If you use email to validate domain ownership, then ACM sends emails to the three contact addresses listed in WHOIS.

And to the five common system addresses for the domains specified in the certificate request.

If the certificate’s renewal status is pending validation, you can request a domain validation email for certificate renewal.

Some of the causes for the issue are as follows:

• Firstly, the certificate renewal status isn’t pending validation.
• The certificate renewal status is pending validation, and the subject alternative name (SAN) doesn’t have the domain validation status as pending validation.
• Then, the domain was validated using DNS.

Today, let us see the steps followed by our Support Techs to resolve it.

The certificate renewal status isn’t pending validation

Check the certificate’s renewal status.

If the certificate renewal status isn’t pending validation.

Then the option to resend the validation email is unavailable, or you receive the following error message:

Certificate arn:aws:acm:region:123456789012:certificate/97b4deb6-8983-4e39-918e-ef1378924e1e is not using EMAIL validation for domain example.com.

If the certificate’s renewal status is pending validation, then resend the validation email.

If the certificate’s renewal status fails, then you can’t request to resend the validation email. Instead, you must request a public certificate.

The certificate renewal status is pending validation, and the SAN doesn’t have the domain validation status as pending validation

During the renewal process, if at least one of your domains is automatically validated and you attempt to resend validation emails for the same domains.

Then you receive the following error:

Certificate arn:aws:acm:region:123456789012:certificate/97b4deb6-8983-4e39-918e-ef1378924e1e is not using EMAIL validation for domain example.com.

To confirm which domains must validated, use the AWS CLI command for describe-certificate.

You can use the AWS CLI to specify the base validation domain for the email that isn’t validate.

The domain was validate using DNS

If you use DNS to validate domain ownership, the validation email can’t send again, and the option to resend the validation isn’t available in the ACM console.

If you’re using the AWS CLI, you might receive the following error message:

An error occurred (InvalidStateException) when calling the ResendValidationEmail operation: Certificate arn:aws:acm:us-arn:aws:acm:region:123456789012:certificate/97b4deb6-8983-4e39-918e-ef1378924e1e is not using EMAIL validation for domain example.com.

[Need help with more AWS queries? We’d be happy to assist]

Conclusion

To conclude, today we discussed the steps followed by our Support Engineers to resolve can’t resend validation email from ACM.