Renew ACM public certificates
When issuing a managed, publicly trusted certificate, AWS Certificate Manager requires you to prove that you are the domain owner. This happens by means of DNS validation. Email validation is being deprecated; for certificates already validated by email, see Renewal for email-validated domains. When a certificate comes up for renewal, ACM uses the same method that you chose earlier to re-validate your ownership. The following topics describe how the renewal process works in each case.