aws免费域名证书生成，证书导出

aws 命令: https://awscli.amazonaws.com/v2/documentation/api/latest/index.html

aws windwos下载地址：https://awscli.amazonaws.com/AWSCLIV2.msi

CA 证书申请： AWS Certificate Manager

设置AWS环境：入门指南

https://aws.amazon.com/cn/getting-started/guides/setup-environment/

# 安装aws完成后执行 aws configure
aws configure
# region name 配置为证书下证书状态下ARN的值
# IAM -> 访问管理 -> 账户设置 下列出所有的终端节点信息
# 例如：arn:aws:acm:ca-central-1:593258984783:certificate/be09a8a9-9e5b-4f09-8d2e-5b4535c79ef6 取值为 ca-central-1
# 节点信息不对有可能查询不到证书信息
# https://ca-central-1.console.aws.amazon.com/acm/home?region=ca-central-1#/certificates/list

# 下载证书
aws acm  get-certificate --certificate-arn  arn:aws:acm:ca-central-1:593258984783:certificate/be09a8a9-9e5b-4f09-8d2e-5b4535c79ef6

# when calling the GetCertificate operation: Could not find Certificate for Account 593258984783
# 出现此问题原因为 Default region name 配置信息不正确

新增用户登录地址： https://deirzhang.signin.aws.amazon.com/console

#derizhang 授权信息 {user}/.aws/credentials
[default]
aws_access_key_id = AKIAYUIH5WVH553CT3PN
aws_secret_access_key = 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