Expiration date issue for Amazon RDS SSL certificate

Question

Today i get an email from AWS that says "Update Your Amazon RDS and Amazon Aurora SSL/TLS Certificates by August 22, 2024". So after that i changed the certificate from rds-ca-2019 to rds-ca-rsa4096-g1 via CLI. But DB instance certificate expiration date doesn't change.

Command : aws rds modify-db-instance --db-instance-identifier <db_instance_identifier> --ca-certificate-identifier rds-ca-rsa4096-g1 --apply-immediately

Am i missing something ? Thanks in advance

Answer 1

Sign in to the AWS Management Console: https://console.aws.amazon.com/rds/.

Choose Databases, and then choose the DB instance that you want to modify.

Choose Modify. The Modify DB instance page appears.

In Connectivity section -> Certificate authority: I changed to rds-ca-ecc384-g1 and expiration date will be increase.