Cloudfront Alternate Domain Name Not Working

Your SSL certificates domain name must be added as an alternate domain name CNAME in your CloudFront distributions. First add an Alternate Domain Name then select Custom SSL Certificate and select the certificate created in the last step.

Problem Associating Cloudfront Distribution With Route 53 Domain Stack Overflow

No action is needed to maintain your existing traffic as it is today.

Cloudfront alternate domain name not working. Under SSL Certificate you should now be able to select Custom SSL Certificate This is disabled if you have not generated a cert Select your cert from the drop down box. No clients need them and using them is extremely expensive. CloudFront configs allow for alternate domain names if youd like to use a custom domain for your CDN distribution.

All alternate domain names already added to a CloudFront distribution before this change will continue to work as they were before. Make sure to select the SNI option and not use dedicated IPs. The domain name of the SSL certificate must be consistent with the domain name associated.

Add a new CNAME or alternate domain CloudFront entry pointing towards your CloudFront domain. Choose Create record. Go to the Cloudfront console click your distribution click edit on the general tab.

Issue a certificate from a trusted CA for CloudFront to allow you to use an alternate domain name CNAME. If you are having problem with Amazon CloudFront not working on your site with HTTPSSSL move away from Cloudflare SSL if that is what you are using or use an alternative CDN service with less stringent SSL rule like KeyCDN. Choose the name of the hosted zone for the domain that you want to use to route traffic to your CloudFront distribution.

Add a custom domain to CloudFront. You should also modify the SSL Certificate option to Custom SSL Certificate and then choose the previously created certificate from a drop-down list. This error message indicates that the certificate wasnt issued by a trusted certificate authority CA.

As per the error message the certificate that you have does not cover the alternative domain name. These validation checks come into effect each time you add a new alternate domain name to your distribution. You likely want that.

This error can indicate that one of the following issues must be resolved before you can successfully add the alternate domain name. If you use the default CloudFront distribution domain name in your URLs for example Using Alternate Domain Names and HTTPS - Amazon CloudFront AWS Documentation Amazon CloudFront Developer Guide. Update the DNS records for your domain to point your websites CNAME to your CloudFront distributions domain name.

So please make sure that you have a certificate with a wildcard to cover multiple subdomains. And only then update your distribution to add an alternate domain name. To resolve problems with accessing your domain name over HTTPS check the following.

Separate CNAMEs with commas or put each on a new line. Choose the ID for the distribution that you want to update. With a certificate issued the next step is to add it to the distribution.

Note the unique CloudFront URL and then log into the DNS control panel. If CloudFront returns an InvalidViewerCertificate error when you try to add an alternate domain name CNAME to your distribution review the following information to help troubleshoot the problem. Wait for your DNS changes to propagate and for the previous DNS entries to expire.

Add a certificate from an authorized certificate authority CA to CloudFront that covers the domain name you plan to use with the distribution to validate that you are authorized to use the domain. On the General tab choose Edit. For more information see Requirements for Using Alternate Domain Names.

If your current CA doesnt support this you can use ACM to issue a free valid certificate. The alternate domain CloudFront is also known as CNAMEs. In the navigation pane choose Hosted zones.

Open Amazon CloudFront console - General view - Edit - Alternate Domain Names CNAMEs - enter the CNAME that you want to associate with the CloudFront distribution for example www or home. Register the domain name with Route 53 or another domain provider.

Mx Tool For Website Viability Solving Dns Online