How do I add a SAN to an existing ACM certificate?

Resolution

After you submit a certificate request with ACM, you can't add a SAN. To add a SAN, you must request a new certificate.

You can use an asterisk (*) in the domain name to create an ACM certificate that contains a wildcard name. Multiple sites are then protected in the same domain name. For example, *.example.com protects www.example.com and images.example.com.

After your new certificate is issued, associate the certificate to the resources that you use with the previous certificate.

To identify the resources that the previous ACM certificate is associated with, see Describing ACM certificates.

To replace your ACM certificate on your load balancer or Amazon CloudFront distribution, take the following actions:

• Update an HTTPS listener for your Application Load Balancer.
• Replace the SSL certificate for your Classic Load Balancer.
• Update the TLS listener for your Network Load Balancer.
• Rotate the SSL/TLS certificates.

Related information

ACM certificate characteristics