Not Add CNAME in Route53

[pilchita]

Hello, I am creating a certificate for a subdomain and see that the CNAME record is not added to route53.

Can it be a mistake of mine when using the script?

./acme.sh --issue --dns dns_aws -d testing4-certbot.kiusys.com -m [email protected]

Here the log:

[mar jun 28 21:08:51 UTC 2022] Using CA: https://acme.zerossl.com/v2/DV90
[mar jun 28 21:08:51 UTC 2022] Creating domain key
[mar jun 28 21:08:51 UTC 2022] The domain key is here: /home/ec2-user/.acme.sh/testing4-certbot.kiusys.com/testing4-certbot.kiusys.com.key
[mar jun 28 21:08:51 UTC 2022] Single domain='testing4-certbot.kiusys.com'
[mar jun 28 21:08:51 UTC 2022] Getting domain auth token for each domain
[mar jun 28 21:08:55 UTC 2022] Getting webroot for domain='testing4-certbot.kiusys.com'
[mar jun 28 21:08:55 UTC 2022] Adding txt value: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx for domain:  _acme-challenge.testing4-certbot.kiusys.com
[mar jun 28 21:08:56 UTC 2022] Getting existing records for _acme-challenge.testing4-certbot.kiusys.com
[mar jun 28 21:08:57 UTC 2022] TXT record updated successfully.
[mar jun 28 21:08:59 UTC 2022] The txt record is added: Success.
[mar jun 28 21:08:59 UTC 2022] Let's check each DNS record now. Sleep 20 seconds first.
[mar jun 28 21:09:20 UTC 2022] You can use '--dnssleep' to disable public dns checks.
[mar jun 28 21:09:20 UTC 2022] See: https://github.com/acmesh-official/acme.sh/wiki/dnscheck
[mar jun 28 21:09:20 UTC 2022] Checking testing4-certbot.kiusys.com for _acme-challenge.testing4-certbot.kiusys.com
[mar jun 28 21:09:20 UTC 2022] Domain testing4-certbot.kiusys.com '_acme-challenge.testing4-certbot.kiusys.com' success.
[mar jun 28 21:09:20 UTC 2022] All success, let's return
[mar jun 28 21:09:20 UTC 2022] Verifying: testing4-certbot.kiusys.com
[mar jun 28 21:09:25 UTC 2022] Processing, The CA is processing your order, please just wait. (1/30)
[mar jun 28 21:09:31 UTC 2022] Success
[mar jun 28 21:09:31 UTC 2022] Removing DNS records.
[mar jun 28 21:09:31 UTC 2022] Removing txt: pX2pfyHWCwGuayU5gsKf0tqolhxjDjPxP8qYrb3-Sfo for domain: _acme-challenge.testing4-certbot.kiusys.com
[mar jun 28 21:09:31 UTC 2022] Getting existing records for _acme-challenge.testing4-certbot.kiusys.com
[mar jun 28 21:09:33 UTC 2022] TXT record deleted successfully.
[mar jun 28 21:09:35 UTC 2022] Removed: Success
[mar jun 28 21:09:35 UTC 2022] Verify finished, start to sign.
[mar jun 28 21:09:35 UTC 2022] Lets finalize the order.
[mar jun 28 21:09:35 UTC 2022] Le_OrderFinalize='https://acme.zerossl.com/v2/DV90/order/8dlwMrO-GMrBjOOTbte8iQ/finalize'
[mar jun 28 21:09:38 UTC 2022] Order status is processing, lets sleep and retry.
[mar jun 28 21:09:38 UTC 2022] Retry after: 15
[mar jun 28 21:09:54 UTC 2022] Polling order status: https://acme.zerossl.com/v2/DV90/order/8dlwMrO-GMrBjOOTbte8iQ
[mar jun 28 21:09:56 UTC 2022] Downloading cert.
[mar jun 28 21:09:56 UTC 2022] Le_LinkCert='https://acme.zerossl.com/v2/DV90/cert/6nS4mUYCb-JTsVcjLyx3Iw'
[mar jun 28 21:10:01 UTC 2022] Cert success.

Thanks for the help.

[Neilpang]

why does it need a cname?