MTLS AWS with 4096 RSA imported key

Question

I have a 4096 imported key in ACM, but now I need create an API Gateway domain name with MTLS using that certificate.

For that i am using the Imported or private certificate option in the domain configuration.

I have created a certificate with the same domain in ACM to configure the Ownership verification certificate requested by AWS

But after that, the first error i got was:

error not dubjects covered

after create the wild card, and all subjects, now i am getting this error:

Aws error exist certificate with differnt issuer

But i don't use the certificate anywhere else.

I need create the MTLS with a imported certificate with 4096 RSA key size

Answer 1

I have solved the issue.

The problem was that i had in Aws Certificate Manager with Domain name:

1. the imported certificate (domain name xxxx.com)
2. The Ownership verification Certificate (domain name xxxx.com) -> Required by AWS for MTLS of a imported Certificate in ACM
3. Other certificate issued by AWS (domain name xxxx.com)

Then that was the message that AWS show me: conflict with certificate with differnt issuer, The isuue was generated for the certificate of point 3

When i deleted the certificate of the point 3, the problem was solved