API Gateway uses wrong certificate

Hey,

thanks for help!

I am using serverless-domain-manager to manage custom domains for my serverless app. I believe I have set up everything according to the examples, but I still get the wrong cert.

custom:
  ...,
  customDomain:
    domainName: '${self:provider.stage}.${self:service}.ASD.MYDOMAIN.com'
    stage: ${self:provider.stage}
    certificateName: '*.ASD.MYDOMAIN.com'
    createRoute53Record: true
    endpointType: 'regional'
    certificateArn: 'CERTIFICATE ARN'

after running

sls create_domain --stage production
sls deploy --stage production

I expected to see my certificate *.MYDOMAIN.com, but instead I see one from AWS: *.execute-api.eu-west-1.amazonaws.com

I also checked in the AWS console > API Gateway > Custom Domains > MY_API > ACM Certifiate and they have my *.MYDOMAIN.com certificate there.

Any ideas? Thx for your help.

[ankitkatiyar91]

We had the same problem and the issue was that the DNS record was pointing to the API Gateway endpoint. Not to the Target Domain Name endpoint of the Custom Domain Names. Because of this the cert was coming for *.execute-<api-region>.amazonaws.com.

[nziehn]

I found the issue: I was using a regional custom domain, but not a regional api gateway.

Surprising that this works without throwing an error.