# AWS Certificate Manager (ACM)

* **ACM handles the complexity of creating, storing, and renewing public and private SSL/TLS X.509 certificates and keys** that protect your AWS websites and applications.\\

* You can **provide certificates for your integrated AWS services either by issuing them directly with ACM or by importing third-party certificates into the ACM management system**.\\

* ACM certificates can **secure singular domain names, multiple specific domain names, wildcard domains, or combinations of these**.\\

* ACM **wildcard certificates can protect an unlimited number of subdomains**.\\

* You can also **export ACM certificates signed by ACM Private CA for use anywhere in your internal PKI**.\\

* You can **optionally configure a Certification Authority Authorization (CAA) DNS record to specify that ACM is allowed to issue a certificate for your domain or subdomain**. After it validates your domain, **ACM checks for the presence of CAA records to make sure it can issue a certificate for you**. You can **choose to not configure a CAA record for your domain or leave the record blank if you do not want to enable CAA checking**.
