Amazon Certificate Manager

Easily provision, manage, and deploy public SSL/TLS certificates for use with Amazon services and your internal connected resources

Amazon Certificate Manager is a service that lets you easily provision, manage, and deploy public Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with v Web Services services and your internal connected resources. SSL/TLS certificates are used to secure network communications and establish the identity of websites over the Internet as well as resources on private networks. Amazon Certificate Manager removes the time-consuming manual process of purchasing, uploading, and renewing SSL/TLS certificates.

With Amazon Certificate Manager, you can quickly request a certificate, deploy it on ACM-integrated Amazon Web Services resources, such as Elastic Load Balancers, and APIs on API Gateway, and let Amazon Certificate Manager handle certificate renewals. Public certificates provisioned through Amazon Certificate Manager for use with ACM-integrated services are free.


Free public certificates for ACM-integrated services

With Amazon Certificate Manager, there is no additional charge for provisioning public SSL/TLS certificates you use with ACM-integrated services, such as Elastic Load Balancing and API Gateway. You pay for the Amazon Web Services resources you create to run your application. 

Managed certificate renewal

Amazon Certificate Manager manages the renewal process for the certificates managed in ACM and used with ACM-integrated services, such as Elastic Load Balancing and API Gateway. ACM can automate renewal and deployment of these certificates.

Get certificates easily

Amazon Certificate Manager removes many of the time-consuming and error-prone steps to acquire an SSL/TLS certificate for your website or application. There is no need to generate a key pair or certificate signing request (CSR), submit a CSR to a Certificate Authority, or upload and install the certificate once received. With a few clicks in the Amazon Web Services Management Console, you can request a trusted SSL/TLS certificate from Amazon Web Services. Once the certificate is created, Amazon Certificate Manager takes care of deploying certificates to help you enable SSL/TLS for your website or application.

Use cases

Protect and secure your website

SSL, and its successor TLS, are industry standard protocols for encrypting network communications and establishing the identity of websites over the Internet. SSL/TLS provides encryption for sensitive data in transit and authentication using SSL/TLS certificates to establish the identity of your site and secure connections between browsers and applications and your site. Amazon Certificate Manager provides an easy way to provision and manage these certificates so you can configure a website or application to use the SSL/TLS protocol.

Help meet compliance requirements

By making it easy to enable SSL/TLS, Amazon Certificate Manager can help your organization meet regulatory and compliance requirements for encryption of data in transit. For specific information about compliance, refer to the Amazon Web Services China region Compliance site.

Improved uptime

Amazon Certificate Manager helps manage the challenges of maintaining SSL/TLS certificates, including certificate renewals so you don’t have to worry about expiring certificates.

APN Partner

iTrus China

iTrus is a network security certification service provider, who has got the permission based on the Electronic Signature Law in People's Republic of China from the Ministry of Industry and Information Technology. iTrus aims to improve the security and credibility of cyberspace, provide identity authentication, behavior authentication for various types of network applications, so as to achieve the security, credibility, availability and traceability of electronic data in cyberspace. iTrus has provided electronic authentication services for nearly 500 million customers, covering industries including government, banking, securities, insurance, justice, bidding, and Fin-tech etc.

Learn more >>



TrustAsia is a well-known enterprise focusing on digital certificates and network security solutions. Established in 2005, it is one of the few Certification Authorities in China who have obtained the accreditation by both WebTrust and the Ministry of Industry and Information Technology of the Chinese government. After nearly 20 years of development, TrustAsia has formed a product matrix with cryptographic technology as its core and developed fully scalable and comprehensive solutions for digital certificates, automated certificate management, IoT security and products developed on Chinese commercial cryptographic algorithms. Based on its professional products and services, TrustAsia has accumulated a large user base and provided digital trust services for customers from a variety of industries, including government, finance, education, e-commerce, healthcare, transportation, etc.

learn more



Racent is a digital certificate and network security solutions company. In addition to the self-operated Racent series of digital certificate services, Racent's one-stop digital certificate platform also provides SSL certificates, code signing certificates, email security certificates, VMC certificates, Matter certificates, etc. from multiple trusted CAs. Since its establishment in 2011, Racent has provided digital certificate services to many enterprises and issued a large number of SSL certificates every year. The service industry includes intelligent manufacturing, telecommunications, new retail, government, finance, logistics, etc., effectively improving the security and trustworthiness of cyberspace.

learn more

Amazon Certificate Manager features
Explore Amazon Certificate Manager features

Learn more about provisioning, managing, and deploying public SSL/TLS certificates.

Learn more 
Request access to the Amazon Web Services Free Tier
Sign up for a free account

Instantly get access to the Amazon Web Services Free Tier.

Sign up 
Start building in the console
Start building in the console

Get started building with Amazon Certificate Manager in the Amazon Web Services Console.

Sign in 
Hot Contact Us

Hotline Contact Us

1010 0766
Beijing Region
Operated By Sinnet
1010 0966
Ningxia Region
Operated By NWCD