---
type: resource-type
title: AcmCertificate
description: aws resource type AWS::CertificateManager::Certificate
name: AcmCertificate
lexicon: aws
resource_type: AWS::CertificateManager::Certificate
---
`AWS::CertificateManager::Certificate`, a resource type of the aws lexicon.

## Properties

- `DomainName` (`string`, required): The fully qualified domain name (FQDN), such as www.example.com, with which you want to secure an ACM certificate
- `CertificateArn` (`string`, optional): The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate.
- `CertificateAuthorityArn` (`string`, optional): The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate.
- `CertificateExport` (`"DISABLED" | "ENABLED"`, optional): Specifies whether the certificate can be exported. ENABLED allows the certificate to be exported, DISABLED prevents export.
- `CertificateTransparencyLoggingPreference` (`"DISABLED" | "ENABLED"`, optional): You can opt out of certificate transparency logging by specifying the DISABLED option. Opt in by specifying ENABLED.
- `DomainValidationOptions` (`AcmCertificate_DomainValidationOption[]`, optional): Domain information that domain name registrars use to verify your identity.
- `KeyAlgorithm` (`string`, optional): Specifies the algorithm of the public and private key pair that your certificate uses to encrypt data.
- `SubjectAlternativeNames` (`string[]`, optional): Additional FQDNs to be included in the Subject Alternative Name extension of the ACM certificate.
- `Tags` (`AcmCertificate_Tag[]`, optional): Key-value pairs that can identify the certificate.
- `ValidationMethod` (`string`, optional): The method you want to use to validate that you own or control the domain associated with a public certificate. Valid values are DNS, EMAIL or HTTP

## Attributes

- `CertificateArn`