Using the CLI tool is the quickest and easiest way to create a certificate request. Create the certificate in the region you plan to use it in; that is where your ELB(s) are located.
If you plan to use your certificate with CloudFront, you must create it in the us-east-1 region.
After the request has been created, AWS will confirm the request is valid by sending approval e-mails to various standard e-mail addresses, based on conventions and the WHOIS information for your domain. Approval e-mails will be sent to the following:
- The domain registrant
- The technical contact
- The administrative contact
- And the following addresses:
- administrator@<your-domain>
- hostmaster@<your-domain>
- postmaster@<your-domain>
- webmaster@<your-domain> ...
