US 12,132,722 B1
Certificate management system with forced certificate renewal
Todd Cignetti, Ashburn, VA (US); Michael S. Slaughter, Seattle, WA (US); and Dayong Hao, Mercer Island, WA (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Jun. 28, 2019, as Appl. No. 16/457,478.
Claims priority of provisional application 62/818,007, filed on Mar. 13, 2019.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/0823 (2013.01) [H04L 63/108 (2013.01); H04L 63/164 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A system, comprising:
one or more processors and one or more memories to store computer-executable instructions that, if executed, cause the one or more processors to implement a certificate management system on a service provider network that provides compute and storage services for clients external to the service provider network, the certificate management system distinct from a certificate authority, the certificate management system to:
store, on behalf of the clients, automatic renewal dates for automatic renewals of certificates;
provide, to clients, a client-facing interface for receiving requests from the clients to force renewals of certificates prior to the stored automatic renewal dates of the certificates, wherein forcing renewal of a certificate bypasses the automatic renewal according to the stored automatic renewal date;
prior to the automatic renewal date for a first of the certificates,
receive, from a client via the client-facing interface of the certificate management system, a request to force renewal of the first certificate prior to the automatic renewal date of the first certificate, wherein the request to force renewal indicates when to force the renewal of the first certificate;
obtain, based at least in part on the request that indicates when to force renewal of the first certificate, a renewed certificate from the certificate authority distinct from the certificate management system, wherein the renewed certificate is obtained from the certificate authority prior to when the renewed certificate would have been obtained based on the automatic renewal date of the first certificate, bypassing the automatic renewal for the first certificate to happen prior to the stored automatic renewal date of the first certificate; and
send, to the client, a notification of the renewed certificate, wherein the renewed certificate is exported from the certificate management system prior to the automatic renewal date for the first certificate based at least in part on the notification, and wherein the renewed certificate is bound to an application server prior to the automatic renewal date for the first certificate using program code operated by the client.