title: AWS CloudFront Custom SSL Certificate disabled
body: <p>I have seen many posts on this topic, but I have not been able to resolve the issue, so I am posting my setup in case anyone knows what needs to be changed?</p>
  
  <ol>
  <li><p>I have a domain purchased through Namecheap. I have set custom DNS and added 4 name servers generated by the hosted zone in AWS Route 53. DNS lookup through whois.net shows the correct values.</p></li>
  <li><p>In Route 53, I have added an A record to the Alias Target <code>xxxxxxxxxxxxxx.cloudfront.net.</code> So the traffic hits Route 53 and goes to CloudFront.</p></li>
  <li><p>In CloudFront, I have one distribution. As Alternate Domain Names (CNAMEs), I have the following values:</p>
  
  <ul>
  <li>*.domain.com</li>
  <li>www.domain.com</li>
  <li>domain.com</li>
  </ul></li>
  <li><p>Under origins, I have one record with the following Origin Domain Name:</p>
  
  <ul>
  <li>domain.com.s3-website.az-name-1.amazonaws.com</li>
  </ul></li>
  <li><p>I am hosting website in an S3 bucket. All HTTP requests are set to redirect to HTTPS.</p></li>
  <li><p>Lastly, I have created and verified a single certificate for the following domain names: <code>domain.com, www.domain.com, *.domain.com</code></p></li>
  </ol>
  
  <p>I have read some answers that I should just wait and the custom SSL certificate option will become enabled. It's been more than day now, however, and there is no sign of that happening.</p>
  
  <p>My website works, but the misconfigured certificate (using the default <code>*.cloudfront.net</code>) throws a warning popup in Safari, and worse, a warning page in Chrome which most people are not going to bypass.</p>