Using the CLI tool is the quickest and easiest way to create a certificate request. Create the certificate in the region you plan to use it in; that is where your ELB(s) are located.
If you plan to use your certificate with CloudFront, you must create it in the us-east-1 region.
After the request has been created, AWS will confirm the request is valid by sending approval e-mails to various standard e-mail addresses, based on conventions and the WHOIS information for your domain. Approval e-mails will be sent to the following:
- The domain registrant
- The technical contact
- The administrative contact
- And the following addresses:
- administrator@<your-domain>
- hostmaster@<your-domain>
- postmaster@<your-domain>
- webmaster@<your-domain>
- admin@<your-domain>
You must accept at least one of the approvals before you can use your certificate.
Once approved, you can use the Identifier value in the configuration of your other resources, such as EC2 ELB(s) and CloudFront distributions.