Certificate chain for AWS ACM using Cloudflare

I’m trying to Import a certificate from Cloudflare using the AWS Web UI and I’m stock in this page:

I read that the equivalent in Cloudflare to Certificate Chain is Origin Certificates (not 100% sure on this), so I created one and chose the RSA certificate and when I try to finish the import in AWS it says:

Could not validate the certificate with the certificate chain. Choose Previous button below and fix it.

Anyone knows what’s the problem?

Thanks

1 Like

Did you try one of these? (Root Cert)

Yep, I’ve been in that page for a little while, it suggests using the Origin CA. I tried using the Origin Certificate, not the private key and I get the error described above :confused:

You keep saying “Origin” certificate, but have yet to mention the Root cert I linked to.

Oh I see, I thought it was the same, so do I generate that root certificate or do I copy the one provided in that Doc? The Cloudflare Origin CA — RSA Root

EDIT: Even copy/pasting that root certificate from that documentation it says:
Could not validate the certificate with the certificate chain. Choose Previous button below and fix it.

Ok I found the issue, I had created a Client CE and that’s what I was using, I read on the description that it was the one used to authenticate APIs in clients so it made sence. Anyway, resolution:

All 3 CE has to be ORIGIN and the root is from this page

Thanks for all the help

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.