I am trying to enable HTTPS connections to a website hosted through IIS on an Amazon EC2 instance. The instance is running Windows Server 2012. I do not have a wildcard certificate.
The EC2 instance is running under the VPC - it has a VPC ID.
When viewing the instance through the AWS console I see a public IP displayed, but I do not see a public DNS record. However, if I tracert to the public IP, I see the following DNS:
I am not confident that this DNS record is static.
When generating a CRS through IIS I need to provide a 'Common Name' for the cert. I believe that this should be the DNS record mentioned above.
- Should I be using the aforementioned amazonaws subdomain as the Common Name for my SSL certificate?
- If yes, is it safe to assume that the aforementioned DNS name, which is derived from my public IP, will not change on me? If the public IP address changes then I assume the DNS changes as well, which would invalidate my SSL certificate.
- If either answer is no, what are the correct steps to create a valid Common Name for an EC2 instance?