{"id":127,"date":"2019-07-09T07:21:08","date_gmt":"2019-07-09T07:21:08","guid":{"rendered":"https:\/\/www.ssls.com\/knowledgebase\/?p=127"},"modified":"2024-02-13T10:24:16","modified_gmt":"2024-02-13T10:24:16","slug":"how-to-install-an-ssl-certificate-on-aws","status":"publish","type":"post","link":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/","title":{"rendered":"How to install an SSL certificate on AWS"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">This article shows how an SSL certificate can be uploaded through AWS CLI (Command Line Interface) to the following services:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Identity and Access Manager (IAM)<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Amazon Certificate Manager (ACM)<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Elastic Load Balancing (ELB)<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">The necessary files you will need for a successful import are:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Certificate issued for a particular domain name<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">CA bundle of the issuing Certificate Authority<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Unencrypted (created without a password) <a href=\"https:\/\/www.ssls.com\/knowledgebase\/how-can-i-find-the-private-key-for-my-ssl-certificate\">private key<\/a>.<br \/>\n<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">To download the certificate and CA bundle from the user account panel, you can refer to <\/span><a href=\"https:\/\/www.ssls.com\/knowledgebase\/can-i-download-certificate-somewhere-on-your-site\"><span style=\"font-weight: 400;\">this guide<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The private key is always generated along with the CSR code, and consequently, it needs to be retrieved from that very place (server, web-hosting control panel, online generator, etc.) where the CSR was created.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The certificate, CA bundle and private key must be PEM-encoded, meaning that the code inside the files should resemble the examples on the pictures below:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Certificate:<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><img decoding=\"async\" src=\"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/ec952b0a5985728a4360723ad3239df5417e194dfd6c0d46b560db31675057dd.png\" \/><\/span><\/p>\n<p><span style=\"font-weight: 400;\">Private key:<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><img decoding=\"async\" src=\"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/88b3e10f01715c0c5efeb3ad265e6b06897abcba00e98e1138595941a1cdb0d7.png\" \/><\/span><\/p>\n<p><span style=\"font-weight: 400;\">CA bundle:<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><img decoding=\"async\" src=\"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/336e1562d1c6a7b01c4104f13d19b7da5690e8de4587c6bb4bd90a979cfc8015.png\" \/><\/span><\/p>\n<p><strong>NOTE:<\/strong><span style=\"font-weight: 400;\"> At the time of writing of this article, AWS services support only RSA-based 1024 or 2048-bit private keys. However, since 1024-bit keys are considered to be weak, and the trusted Certificate Authorities do not issue such certificates anymore, the certificate that is to be used with AWS must be issued based on the RSA algorithm with the 2048-bit key pair.<\/span><\/p>\n<p><span class=\"wysiwyg-font-size-large\"><strong><em>Identity and Access Manager (IAM)<\/em><\/strong><\/span><\/p>\n<p><span style=\"font-weight: 400;\">Although IAM provides an extensive scope of actions for AWS users access management, we will be describing the ones related to the certificate import process here.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To upload the certificate to IAM, use the following command:<\/span><\/p>\n<p><em><strong>aws iam upload-server-certificate <span class=\"wysiwyg-color-black\">&#8211;server-<\/span><span class=\"wysiwyg-color-red wysiwyg-color-black\"><span class=\"wysiwyg-color-black\">certificate-<\/span><\/span><\/strong><strong>name <span class=\"wysiwyg-color-red\">certificate-name<\/span><\/strong><strong> &#8211;certificate-body file:\/\/<\/strong><span class=\"wysiwyg-color-red\"><strong>example<\/strong><\/span><strong>.crt &#8211;certificate-chain file:\/\/<\/strong><span class=\"wysiwyg-color-red\"><strong>example-bundle<\/strong><\/span><strong>.crt &#8211;private-key file:\/\/<\/strong><span class=\"wysiwyg-color-red\"><strong>example<\/strong><\/span><strong>.key<\/strong><\/em><\/p>\n<p><span style=\"font-weight: 400;\">The <\/span><strong>certificate-name<\/strong><span style=\"font-weight: 400;\"> value should be replaced with the custom name that would help to identify the certificate in future. It cannot contain any spaces and should consist of upper- and lowercase alphanumeric characters. <\/span><span style=\"font-weight: 400;\">You can also include any of the following characters: =,.@-<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The parameters <strong>&#8211;certificate-body<\/strong>, <strong>&#8211;certificate-chain <\/strong>and <strong>&#8211;private-key<\/strong> refer to the names of the certificate, CA bundle and private key files respectively.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">As a result of successful uploading, you will see the table in the command prompt containing the server certificate metadata: its path on the server, name, <a href=\"https:\/\/docs.aws.amazon.com\/IAM\/latest\/UserGuide\/reference_identifiers.html#identifiers-unique-ids\">ID<\/a>, ARN (<a href=\"https:\/\/docs.aws.amazon.com\/general\/latest\/gr\/aws-arns-and-namespaces.html\">Amazon Resource Name<\/a>), upload and expiration date.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><img decoding=\"async\" src=\"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/f21920dd640cc4d088b289fc18f669ca287fef567737304b6dbd5c3eaf89da54.png\" \/><\/span><\/p>\n<p><span style=\"font-weight: 400;\">The <\/span><a href=\"https:\/\/docs.aws.amazon.com\/cli\/latest\/reference\/iam\/upload-server-certificate.html\"><span style=\"font-weight: 400;\">corresponding page<\/span><\/a><span style=\"font-weight: 400;\"> on the AWS CLI command reference portal describes the full list of options that can be used with the command described above.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">There is also the command that allows retrieving and viewing the uploaded certificate. It should be run with the name of the certificate we would like to check:<\/span><\/p>\n<p><em><strong>aws iam get-server-certificate &#8211;server-certificate-name <\/strong><span class=\"wysiwyg-color-red\"><strong>certificate-name<\/strong><\/span><\/em><\/p>\n<p><span style=\"font-weight: 400;\">The result will be the PEM-encoded certificate, CA bundle, and the certificate\u2019s metadata in the command line output.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The complete description of this command on the AWS CLI command reference portal can be checked <\/span><a href=\"https:\/\/docs.aws.amazon.com\/cli\/latest\/reference\/iam\/get-server-certificate.html\"><span style=\"font-weight: 400;\">here<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Also, there is an <\/span><a href=\"https:\/\/docs.aws.amazon.com\/IAM\/latest\/UserGuide\/id_credentials_server-certs.html\"><span style=\"font-weight: 400;\">article in the AWS documentation<\/span><\/a><span style=\"font-weight: 400;\"> dedicated to such operations like listing, renaming, deleting and troubleshooting server certificates.<\/span><\/p>\n<p><span class=\"wysiwyg-font-size-large\"><strong><em>Amazon Certificate Manager (ACM)<\/em><\/strong><\/span><\/p>\n<p><span style=\"font-weight: 400;\">To import the certificate to ACM, run the following command in the command prompt adding the actual names of the certificate files to the example below:<\/span><\/p>\n<p><em><strong>aws acm import-certificate &#8211;certificate file:\/\/<\/strong><span class=\"wysiwyg-color-red\"><strong>example<\/strong><\/span><strong>.crt &#8211;private-key file:\/\/<\/strong><span class=\"wysiwyg-color-red\"><strong>example<\/strong><\/span><strong>.key &#8211;certificate-chain file:\/\/<\/strong><span class=\"wysiwyg-color-red\"><strong>example-bundle<\/strong><\/span><strong>.crt<\/strong><\/em><\/p>\n<p><strong><img decoding=\"async\" src=\"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/438a0604a1b033f2fbd2df9c2821279577bd1f91be721d997c912a6fe445a9a1.png\" \/><\/strong><\/p>\n<p><span style=\"font-weight: 400;\">If the import is successful, the command prompt will return the certificate ARN, a unique identifier used for further certificate management.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To replace the imported certificate with a new one, the command above should be invoked with the <\/span><strong>&#8211;certificate-arn<\/strong> <span style=\"font-weight: 400;\">parameter following the ARN<\/span> <span style=\"font-weight: 400;\">value of the <\/span><span style=\"font-weight: 400;\">certificate which is to be replaced<\/span><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To display the list of the imported certificates\u2019 domain names and the corresponding ARNs, there is the following command:<\/span><\/p>\n<p><strong>aws acm list-certificates<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">The complete list of currently available ACM commands and parameters can be checked on the related <\/span><a href=\"https:\/\/docs.aws.amazon.com\/cli\/latest\/reference\/acm\/index.html#cli-aws-acm\"><span style=\"font-weight: 400;\">AWS CLI command reference page<\/span><\/a><span style=\"font-weight: 400;\">. <\/span><\/p>\n<p><span class=\"wysiwyg-font-size-large\"><strong><em>Elastic Load Balancing (ELB)<\/em><\/strong><\/span><\/p>\n<p><span style=\"font-weight: 400;\">This section mainly describes the process of creating HTTPS listeners on the existing classic and application load balancers and updating an SSL certificate on a previously created HTTPS listener.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To proceed further, the certificate must be uploaded either to IAM or ACM already so that we can use the certificate\u2019s ARN and the existing load balancer\u2019s ARN in the process.<\/span><\/p>\n<p><strong>Classic load balancer<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">To allow the classic load balancer listening to the HTTPS traffic, we need to create the HTTPS listener and assign the SSL certificate to it. It can be done with the command below:<\/span><\/p>\n<p><em><span style=\"font-weight: 400;\"><strong>aws elb create-load-balancer-listeners &#8211;load-balancer-name <\/strong><span class=\"wysiwyg-color-red\"><strong>my-load-balancer<\/strong><\/span><strong> &#8211;listeners \u201cProtocol=HTTPS,LoadBalancerPort=443,InstanceProtocol=HTTP,InstancePort=80,SSLCertificateId=<\/strong><span class=\"wysiwyg-color-red\"><strong>ARN<\/strong><\/span><strong>\u201d<\/strong><\/span><\/em><\/p>\n<p><span style=\"font-weight: 400;\">If you need to update the certificate on the already running HTTPS listener, use the following command:<\/span><\/p>\n<p><em><strong>aws elb set-load-balancer-listener-ssl-certificate &#8211;load-balancer-name <\/strong><span class=\"wysiwyg-color-red\"><strong>my-load-balancer<\/strong><\/span><strong> &#8211;load-balancer-port 443 &#8211;ssl-certificate-id <\/strong><span class=\"wysiwyg-color-red\"><strong>NewARN<\/strong><\/span><\/em><\/p>\n<p><span style=\"font-weight: 400;\">The <\/span><strong>NewARN <\/strong><span style=\"font-weight: 400;\">value refers to the ARN of the new certificate that is required to be assigned to the listener instead of the previous one.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To get more information about the available commands, parameters and values available for the classic load balancer management, you can refer to the <\/span><a href=\"https:\/\/docs.aws.amazon.com\/cli\/latest\/reference\/elb\/index.html\"><span style=\"font-weight: 400;\">page<\/span><\/a><span style=\"font-weight: 400;\"> on the AWS CLI command reference portal.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Also, the <\/span><a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/classic\/elb-add-or-delete-listeners.html\"><span style=\"font-weight: 400;\">following article<\/span><\/a><span style=\"font-weight: 400;\"> provides with additional steps and workarounds for the successful HTTPS listener creation and management.<\/span><\/p>\n<p><strong>Application load balancer<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">To create an HTTPS listener on the application load balancer, one would need to invoke the following command:<\/span><\/p>\n<p><em><span style=\"font-weight: 400;\"><strong>aws elbv2 create-listener &#8211;load-balancer-arn <\/strong><span class=\"wysiwyg-color-red\"><strong>my-load-balancer-arn<\/strong><\/span><strong> &#8211;protocol HTTPS &#8211;port 443 &#8211;certificates CertificateArn=<\/strong><span class=\"wysiwyg-color-red\"><strong>my-certificate-arn<\/strong><\/span><strong> &#8211;ssl-policy ELBSecurityPolicy-2015-05 &#8211;default-actions Type=forward,TargetGroupArn=<\/strong><span class=\"wysiwyg-color-red\"><strong>my-target-group-arn<\/strong><\/span><\/span><\/em><\/p>\n<p><span style=\"font-weight: 400;\">The <\/span><strong>my-load-balancer-arn<\/strong><span style=\"font-weight: 400;\"> and <\/span><strong>my-target-group-arn<\/strong><span style=\"font-weight: 400;\"> values can be obtained from running the \u201c<\/span><em><strong>aws elbv2 describe-target-groups<\/strong><\/em><span style=\"font-weight: 400;\">\u201d command, which will return the information about existing load balancers and target groups in your AWS infrastructure.<\/span><\/p>\n<p><strong>NOTE:<\/strong><span style=\"font-weight: 400;\"> The <\/span><strong>ELBSecurityPolicy-2015-05 <\/strong><span style=\"font-weight: 400;\">value for <\/span><strong>&#8211;ssl-policy<\/strong><span style=\"font-weight: 400;\"> parameter is predefined by default. <\/span><span style=\"font-weight: 400;\">I<\/span><span style=\"font-weight: 400;\">t is the security policy that defines which ciphers and protocols are supported.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To re-assign the new certificate to the existing HTTPS listener, the following command should be used:<\/span><\/p>\n<p><em><span style=\"font-weight: 400;\"><strong>aws elbv2 modify-listener &#8211;listener-arn <\/strong><span class=\"wysiwyg-color-red\"><strong>my-https-listener-arn<\/strong><\/span><strong> &#8211;certificates CertificateArn=<\/strong><span class=\"wysiwyg-color-red\"><strong>my-new-certificate-arn<\/strong><\/span><\/span><\/em><\/p>\n<p><span style=\"font-weight: 400;\">The value that should be put instead of <\/span><strong>my-https-listener-arn <\/strong>to the command can be retrieved by running the<strong> \u201c<em>aws elbv2 describe-listeners &#8211;load-balancer-arn my-load-balancer-arn<\/em>\u201d <\/strong><span style=\"font-weight: 400;\">command.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For more information on the application load balancer management, you can check <\/span><a href=\"https:\/\/docs.aws.amazon.com\/cli\/latest\/reference\/elbv2\/index.html\"><span style=\"font-weight: 400;\">this AWS CLI command reference page<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You can check how to create an HTTPS listener on the application load balancer in <\/span><a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/application\/create-https-listener.html\"><span style=\"font-weight: 400;\">this article<\/span><\/a><span style=\"font-weight: 400;\"> from the official AWS documentation.<\/span><\/p>\n<p><span class=\"wysiwyg-font-size-large\"><strong><em>Checking the SSL installation on the load balancers<\/em><\/strong><\/span><\/p>\n<p><span style=\"font-weight: 400;\">When the HTTPS listener is successfully created or updated with the new SSL certificate, it is a good idea to check the configuration using available tools. Since Amazon\u2019s elastic load balancing implies having several instances running simultaneously (with different IP addresses), it is convenient to use the <\/span><a href=\"https:\/\/www.ssllabs.com\/ssltest\/\"><span style=\"font-weight: 400;\">SSLLabs server test<\/span><\/a><span style=\"font-weight: 400;\"> to check all of them at once just by specifying the domain name and waiting a couple of minutes.\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This article shows how an SSL certificate can be uploaded through AWS CLI (Command Line Interface) to the following services: Identity and Access Manager (IAM) Amazon Certificate Manager (ACM) Elastic Load Balancing (ELB) The necessary files you will need for a successful import are: Certificate issued for a particular domain name CA bundle of the ..<\/p>\n<div class=\"clear-fix\"><\/div>\n<p><a href=\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/\" title=\"read more...\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-127","post","type-post","status-publish","format-standard","hentry","category-ssl-installation-instructions"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to install an SSL certificate on AWS \u2013 HelpDesk | SSLs.com<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to install an SSL certificate on AWS \u2013 HelpDesk | SSLs.com\" \/>\n<meta property=\"og:description\" content=\"This article shows how an SSL certificate can be uploaded through AWS CLI (Command Line Interface) to the following services: Identity and Access Manager (IAM) Amazon Certificate Manager (ACM) Elastic Load Balancing (ELB) The necessary files you will need for a successful import are: Certificate issued for a particular domain name CA bundle of the ..Read more\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/\" \/>\n<meta property=\"og:site_name\" content=\"SSL Certificate Knowledgebase | SSLs.com\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/SSLsCom\" \/>\n<meta property=\"article:published_time\" content=\"2019-07-09T07:21:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-13T10:24:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/ec952b0a5985728a4360723ad3239df5417e194dfd6c0d46b560db31675057dd.png\" \/>\n<meta name=\"author\" content=\"sslbizdev\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@SSLscom\" \/>\n<meta name=\"twitter:site\" content=\"@SSLscom\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"sslbizdev\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/\"},\"author\":{\"name\":\"sslbizdev\",\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/#\/schema\/person\/7e29a188929740c7a59d9a1c15c18806\"},\"headline\":\"How to install an SSL certificate on AWS\",\"datePublished\":\"2019-07-09T07:21:08+00:00\",\"dateModified\":\"2024-02-13T10:24:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/\"},\"wordCount\":1106,\"publisher\":{\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/ec952b0a5985728a4360723ad3239df5417e194dfd6c0d46b560db31675057dd.png\",\"articleSection\":[\"SSL Installation instructions\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/\",\"url\":\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/\",\"name\":\"How to install an SSL certificate on AWS \u2013 HelpDesk | SSLs.com\",\"isPartOf\":{\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/ec952b0a5985728a4360723ad3239df5417e194dfd6c0d46b560db31675057dd.png\",\"datePublished\":\"2019-07-09T07:21:08+00:00\",\"dateModified\":\"2024-02-13T10:24:16+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#primaryimage\",\"url\":\"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/ec952b0a5985728a4360723ad3239df5417e194dfd6c0d46b560db31675057dd.png\",\"contentUrl\":\"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/ec952b0a5985728a4360723ad3239df5417e194dfd6c0d46b560db31675057dd.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.ssls.com\/knowledgebase\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to install an SSL certificate on AWS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/#website\",\"url\":\"https:\/\/www.ssls.com\/knowledgebase\/\",\"name\":\"SSL Certificate Knowledgebase | SSLs.com\",\"description\":\"SSL Knowledgebase | SSLs.com\",\"publisher\":{\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.ssls.com\/knowledgebase\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/#organization\",\"name\":\"SSLs.com\",\"url\":\"https:\/\/www.ssls.com\/knowledgebase\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/8WCg7Uph_400x400-1.png\",\"contentUrl\":\"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/8WCg7Uph_400x400-1.png\",\"width\":400,\"height\":400,\"caption\":\"SSLs.com\"},\"image\":{\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/SSLsCom\",\"https:\/\/x.com\/SSLscom\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.ssls.com\/knowledgebase\/#\/schema\/person\/7e29a188929740c7a59d9a1c15c18806\",\"name\":\"sslbizdev\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/b43c2e48b8cf4c353e91aa8232dac0c56e490f3f1eff58a7652c7d9a866e3f66?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b43c2e48b8cf4c353e91aa8232dac0c56e490f3f1eff58a7652c7d9a866e3f66?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b43c2e48b8cf4c353e91aa8232dac0c56e490f3f1eff58a7652c7d9a866e3f66?s=96&d=mm&r=g\",\"caption\":\"sslbizdev\"},\"url\":\"https:\/\/www.ssls.com\/knowledgebase\/author\/sslbizdev\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to install an SSL certificate on AWS \u2013 HelpDesk | SSLs.com","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/","og_locale":"en_US","og_type":"article","og_title":"How to install an SSL certificate on AWS \u2013 HelpDesk | SSLs.com","og_description":"This article shows how an SSL certificate can be uploaded through AWS CLI (Command Line Interface) to the following services: Identity and Access Manager (IAM) Amazon Certificate Manager (ACM) Elastic Load Balancing (ELB) The necessary files you will need for a successful import are: Certificate issued for a particular domain name CA bundle of the ..Read more","og_url":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/","og_site_name":"SSL Certificate Knowledgebase | SSLs.com","article_publisher":"https:\/\/www.facebook.com\/SSLsCom","article_published_time":"2019-07-09T07:21:08+00:00","article_modified_time":"2024-02-13T10:24:16+00:00","og_image":[{"url":"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/ec952b0a5985728a4360723ad3239df5417e194dfd6c0d46b560db31675057dd.png","type":"","width":"","height":""}],"author":"sslbizdev","twitter_card":"summary_large_image","twitter_creator":"@SSLscom","twitter_site":"@SSLscom","twitter_misc":{"Written by":"sslbizdev","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#article","isPartOf":{"@id":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/"},"author":{"name":"sslbizdev","@id":"https:\/\/www.ssls.com\/knowledgebase\/#\/schema\/person\/7e29a188929740c7a59d9a1c15c18806"},"headline":"How to install an SSL certificate on AWS","datePublished":"2019-07-09T07:21:08+00:00","dateModified":"2024-02-13T10:24:16+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/"},"wordCount":1106,"publisher":{"@id":"https:\/\/www.ssls.com\/knowledgebase\/#organization"},"image":{"@id":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/ec952b0a5985728a4360723ad3239df5417e194dfd6c0d46b560db31675057dd.png","articleSection":["SSL Installation instructions"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/","url":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/","name":"How to install an SSL certificate on AWS \u2013 HelpDesk | SSLs.com","isPartOf":{"@id":"https:\/\/www.ssls.com\/knowledgebase\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#primaryimage"},"image":{"@id":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/ec952b0a5985728a4360723ad3239df5417e194dfd6c0d46b560db31675057dd.png","datePublished":"2019-07-09T07:21:08+00:00","dateModified":"2024-02-13T10:24:16+00:00","breadcrumb":{"@id":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#primaryimage","url":"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/ec952b0a5985728a4360723ad3239df5417e194dfd6c0d46b560db31675057dd.png","contentUrl":"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/ec952b0a5985728a4360723ad3239df5417e194dfd6c0d46b560db31675057dd.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.ssls.com\/knowledgebase\/how-to-install-an-ssl-certificate-on-aws\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ssls.com\/knowledgebase\/"},{"@type":"ListItem","position":2,"name":"How to install an SSL certificate on AWS"}]},{"@type":"WebSite","@id":"https:\/\/www.ssls.com\/knowledgebase\/#website","url":"https:\/\/www.ssls.com\/knowledgebase\/","name":"SSL Certificate Knowledgebase | SSLs.com","description":"SSL Knowledgebase | SSLs.com","publisher":{"@id":"https:\/\/www.ssls.com\/knowledgebase\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ssls.com\/knowledgebase\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.ssls.com\/knowledgebase\/#organization","name":"SSLs.com","url":"https:\/\/www.ssls.com\/knowledgebase\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ssls.com\/knowledgebase\/#\/schema\/logo\/image\/","url":"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/8WCg7Uph_400x400-1.png","contentUrl":"https:\/\/www.ssls.com\/knowledgebase\/wp-content\/uploads\/2019\/07\/8WCg7Uph_400x400-1.png","width":400,"height":400,"caption":"SSLs.com"},"image":{"@id":"https:\/\/www.ssls.com\/knowledgebase\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/SSLsCom","https:\/\/x.com\/SSLscom"]},{"@type":"Person","@id":"https:\/\/www.ssls.com\/knowledgebase\/#\/schema\/person\/7e29a188929740c7a59d9a1c15c18806","name":"sslbizdev","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/b43c2e48b8cf4c353e91aa8232dac0c56e490f3f1eff58a7652c7d9a866e3f66?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/b43c2e48b8cf4c353e91aa8232dac0c56e490f3f1eff58a7652c7d9a866e3f66?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b43c2e48b8cf4c353e91aa8232dac0c56e490f3f1eff58a7652c7d9a866e3f66?s=96&d=mm&r=g","caption":"sslbizdev"},"url":"https:\/\/www.ssls.com\/knowledgebase\/author\/sslbizdev\/"}]}},"publishpress_future_action":{"enabled":false,"date":"2026-04-12 10:57:17","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.ssls.com\/knowledgebase\/wp-json\/wp\/v2\/posts\/127","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ssls.com\/knowledgebase\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ssls.com\/knowledgebase\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ssls.com\/knowledgebase\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ssls.com\/knowledgebase\/wp-json\/wp\/v2\/comments?post=127"}],"version-history":[{"count":6,"href":"https:\/\/www.ssls.com\/knowledgebase\/wp-json\/wp\/v2\/posts\/127\/revisions"}],"predecessor-version":[{"id":7707,"href":"https:\/\/www.ssls.com\/knowledgebase\/wp-json\/wp\/v2\/posts\/127\/revisions\/7707"}],"wp:attachment":[{"href":"https:\/\/www.ssls.com\/knowledgebase\/wp-json\/wp\/v2\/media?parent=127"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ssls.com\/knowledgebase\/wp-json\/wp\/v2\/categories?post=127"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ssls.com\/knowledgebase\/wp-json\/wp\/v2\/tags?post=127"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}