Request Syntax Request Parameters Response Syntax Response Elements Errors Examples See Also

ListCertificateDomainValidations

Returns per-domain validation summaries for an ACM certificate. Each summary includes the domain name, the active validation configuration, and the requested validation configuration when a validation method migration is in progress. You can use the results to monitor the progress of an email-to-DNS validation migration and to retrieve the CNAME records required for DNS validation.

Request Syntax


{
   "CertificateArn": "string",
   "MaxItems": number,
   "NextToken": "string"
}

Request Parameters

For information about the parameters that are common to all actions, see Common Parameters.

The request accepts the following data in JSON format.

Note

In the following list, the required parameters are described first.

CertificateArn

The Amazon Resource Name (ARN) of the certificate for which to list domain validation summaries.

Type: String

Length Constraints: Minimum length of 20. Maximum length of 2048.

Pattern: arn:[\w+=/,.@-]+:acm:[\w+=/,.@-]*:[0-9]+:certificate/[\w+=,.@-]+.*

Required: Yes

MaxItems

The maximum number of domain validation summaries to return. If you don't specify a value, the default is 1000.

Type: Integer

Valid Range: Minimum value of 1. Maximum value of 1000.

Required: No

NextToken

A token returned by a previous call to ListCertificateDomainValidations. If the number of results exceeds MaxItems, use this token to retrieve the next page of results.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 10000.

Pattern: [\u0009\u000A\u000D\u0020-\u00FF]*

Required: No

Response Syntax


{
   "DomainValidationSummaryList": [ 
      { 
         "ActiveValidationConfiguration": { 
            "ValidationChallenge": { ... },
            "ValidationMethod": "string",
            "ValidationStatus": "string"
         },
         "DomainName": "string",
         "RequestedValidationConfiguration": { 
            "ValidationChallenge": { ... },
            "ValidationMethod": "string",
            "ValidationStatus": "string"
         }
      }
   ],
   "NextToken": "string"
}

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

DomainValidationSummaryList

A list of DomainValidationSummary objects, one for each domain on the certificate. Each object contains the domain name and its active and requested validation configurations.

Type: Array of DomainValidationSummary objects

NextToken

If the number of results exceeds MaxItems, this token is included in the response. Use this token in a subsequent ListCertificateDomainValidations request to retrieve the next page of results.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 10000.

Pattern: [\u0009\u000A\u000D\u0020-\u00FF]*

Errors

For information about the errors that are common to all actions, see Common Error Types.

AccessDeniedException

You do not have access required to perform this action.

HTTP Status Code: 400

InvalidArgsException

One or more of request parameters specified is not valid.

HTTP Status Code: 400

ResourceNotFoundException

The specified certificate cannot be found in the caller's account or the caller's account cannot be found.

HTTP Status Code: 400

ThrottlingException

The request was denied because it exceeded a quota.

throttlingReasons: One or more reasons why the request was throttled.

HTTP Status Code: 400

Examples

ListCertificateDomainValidations

This example illustrates one usage of ListCertificateDomainValidations.

Sample Request


POST / HTTP/1.1
Host: acm.us-east-1.amazonaws.com
Accept-Encoding: identity
Content-Length: 112
X-Amz-Target: CertificateManager.ListCertificateDomainValidations
X-Amz-Date: 20260520T153200Z
Content-Type: application/x-amz-json-1.1
Authorization: AWS4-HMAC-SHA256 Credential=AKIAIOSFODNN7EXAMPLE/20260520/us-east-1/acm/aws4_request,
SignedHeaders=content-type;host;x-amz-date;x-amz-target,
Signature=EXAMPLE

{
  "CertificateArn": "arn:aws:acm:us-east-1:111122223333:certificate/12345678-1234-1234-1234-123456789012",
  "MaxItems": 10
}

Example

This example illustrates one usage of ListCertificateDomainValidations.

Sample Response


HTTP/1.1 200 OK
x-amzn-RequestId: a1b2c3d4-5678-90ab-cdef-EXAMPLE22222
Content-Type: application/x-amz-json-1.1
Content-Length: 742
Date: Wed, 20 May 2026 15:32:00 GMT

{
  "DomainValidationSummaryList": [
    {
      "DomainName": "example.com",
      "ActiveValidationConfiguration": {
        "ValidationMethod": "EMAIL",
        "ValidationStatus": "SUCCESS",
        "ValidationChallenge": {
          "EmailValidationChallenge": {
            "ValidationDomain": "example.com",
            "ValidationEmails": [
              "admin@example.com",
              "postmaster@example.com"
            ]
          }
        }
      },
      "RequestedValidationConfiguration": {
        "ValidationMethod": "DNS",
        "ValidationStatus": "PENDING_VALIDATION",
        "ValidationChallenge": {
          "DnsValidationChallenge": {
            "ResourceRecord": {
              "Name": "_uoc1c1qsw7poexampleewjeno1pte3rw.example.com.",
              "Type": "CNAME",
              "Value": "_hc30uowyhpzoexample6jjr5.3ym756xh7yj.acm-validations.aws."
            }
          }
        }
      }
    },
    {
      "DomainName": "www.example.com",
      "ActiveValidationConfiguration": {
        "ValidationMethod": "EMAIL",
        "ValidationStatus": "SUCCESS",
        "ValidationChallenge": {
          "EmailValidationChallenge": {
            "ValidationDomain": "www.example.com",
            "ValidationEmails": [
              "admin@example.com"
            ]
          }
        }
      },
      "RequestedValidationConfiguration": {
        "ValidationMethod": "DNS",
        "ValidationStatus": "PENDING_VALIDATION",
        "ValidationChallenge": {
          "DnsValidationChallenge": {
            "ResourceRecord": {
              "Name": "_r4b8xf2q9kexamplep7o2n1v5m.www.example.com.",
              "Type": "CNAME",
              "Value": "_w3t9y1d6h2nexample8k4j0.q5m7v2x8r1p.acm-validations.aws."
            }
          }
        }
      }
    }
  ]
}