How to enforce DNS name constraints in AWS Private CA

In March 2022, AWS announced support for custom certificate extensions, including name constraints, using AWS Certificate Manager (ACM) Private Certificate Authority (CA). Defining DNS name constraints with your subordinate CA can help establish guardrails to improve public key infrastructure (PKI) security and mitigate certificate misuse. For example, you can set a DNS name constraint that […]

acm authority aws aws certificate manager aws private ca aws private certificate authority certificate certificate authority certificate management certificates compliance constraints dns extensions identity infrastructure intermediate (200) key manager march name pki private public public key security security blog support technical how-to