Step 29: Now that you have registered a domain, you need to get a public certificate.
This is required because we are using CloudFront to enable HTTPS traffic. In the main
management console, type the word "Certificate" into the search box. You should see an option
appear for "Certificate Manager." Click that option. Note that these steps assume you
purchased the domain name in Route 53 and did not import it from another registrar.
If you imported it, you will need to create a Hosted Zone and modify the domain servers.
Doing this work is beyond the scope of this guide.
Step 30: On the Certificate Management homepage, you should see an option to "Request
a Certificate" on the right hand side. Click the "Request a Certificate" button.
Note: make sure you are in the US East (N. Virginia) Region.
Step 31: Ensure the "Request a public certificate" option is checked. Click the
"Next" button.
Step 32: Enter the fully qualified domain name you registered in the previous step.
You should also click the "Add another name to this certificate" button and add an entry
in the format of *.yourdomainname so that you have a wildcard certificate for all the
subdomains. For example, if you registered "abc.org", you would have two entries, "abc.org"
and "*.abc.org."
Step 33: Fill out the rest of the form. The author left the defaults as follows:
allow export = disable export, validation method = DNS Validation, Key algorithm = RSA 2048.
For Tags, click the "Add new tag" button and copy the key / value information you created earlier.
Click the "Request" button once done.
Step 34: You should be taken to a screen which has a message indicating your certificate
is in "pending validation." Note that the table at the bottom should contain both the domains
you requested. If you registered abc.org, you should see abc.org and
*.abc.org. Click the "Create records in Route 53" button.
Step 35: You should be taken to a screen where both records are listed and checked.
If not, ensure they are both checked, then click the "Create records" button.
Step 36: You should see a message indicating that the DNS records were created.
Step 37: It may take some time, but if you click the "List certificates" option, the
certificate should show as "Issued." Note the author has hidden another certificate that is
not relevant to this guide.
Step 38: You can click on the Certificate ID link to see both certificates with a
"Success" status.
