{"id":67149,"date":"2026-08-07T09:22:58","date_gmt":"2026-08-07T02:22:58","guid":{"rendered":"https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/"},"modified":"2026-08-07T14:31:26","modified_gmt":"2026-08-07T07:31:26","slug":"aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon","status":"publish","type":"post","link":"https:\/\/aws.cmctelecom.vn\/en\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/","title":{"rendered":"AWS Certificate Manager h\u1ed7 tr\u1ee3 ACME: T\u1ef1 \u0111\u1ed9ng h\u00f3a ch\u1ee9ng ch\u1ec9 TLS quy m\u00f4 l\u1edbn"},"content":{"rendered":"<p>AWS v\u1eeba c\u00f4ng b\u1ed1 h\u1ed7 tr\u1ee3 giao th\u1ee9c ACME (Automated Certificate Management Environment) trong d\u1ecbch v\u1ee5 AWS Certificate Manager (ACM). C\u1eadp nh\u1eadt n\u00e0y cho ph\u00e9p doanh nghi\u1ec7p t\u1ef1 \u0111\u1ed9ng h\u00f3a ho\u00e0n to\u00e0n vi\u1ec7c c\u1ea5p ph\u00e1t v\u00e0 gia h\u1ea1n ch\u1ee9ng ch\u1ec9 TLS c\u00f4ng c\u1ed9ng cho h\u1ea1 t\u1ea7ng c\u1ee7a m\u00ecnh, d\u00f9 \u0111ang ch\u1ea1y tr\u00ean AWS, t\u1ea1i ch\u1ed7 (on-premises) hay trong m\u00f4i tr\u01b0\u1eddng hybrid, b\u1eb1ng c\u00e1c c\u00f4ng c\u1ee5 m\u00e3 ngu\u1ed3n m\u1edf quen thu\u1ed9c.<\/p>\n<p>\u0110\u00e2y l\u00e0 gi\u1ea3i ph\u00e1p cho m\u1ed9t th\u00e1ch th\u1ee9c v\u1eadn h\u00e0nh l\u1edbn, khi th\u1eddi h\u1ea1n hi\u1ec7u l\u1ef1c t\u1ed1i \u0111a c\u1ee7a ch\u1ee9ng ch\u1ec9 TLS \u0111ang b\u1ecb r\u00fat ng\u1eafn \u0111\u00e1ng k\u1ec3 theo quy \u0111\u1ecbnh c\u1ee7a Di\u1ec5n \u0111\u00e0n CA\/Browser. Vi\u1ec7c t\u1ef1 \u0111\u1ed9ng h\u00f3a gi\u00fap lo\u1ea1i b\u1ecf c\u00e1c quy tr\u00ecnh th\u1ee7 c\u00f4ng, gi\u1ea3m thi\u1ec3u r\u1ee7i ro gi\u00e1n \u0111o\u1ea1n d\u1ecbch v\u1ee5 v\u00e0 t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt tr\u00ean quy m\u00f4 l\u1edbn.<\/p>\n<h2>B\u1ed1i c\u1ea3nh: Th\u00e1ch th\u1ee9c t\u1eeb vi\u1ec7c r\u00fat ng\u1eafn v\u00f2ng \u0111\u1eddi ch\u1ee9ng ch\u1ec9<\/h2>\n<p>Di\u1ec5n \u0111\u00e0n CA\/Browser \u0111\u00e3 \u0111\u01b0a ra l\u1ed9 tr\u00ecnh gi\u1ea3m d\u1ea7n th\u1eddi h\u1ea1n hi\u1ec7u l\u1ef1c c\u1ee7a ch\u1ee9ng ch\u1ec9 c\u00f4ng c\u1ed9ng. \u0110\u1ebfn th\u00e1ng 3\/2027, th\u1eddi h\u1ea1n t\u1ed1i \u0111a s\u1ebd gi\u1ea3m xu\u1ed1ng c\u00f2n 100 ng\u00e0y, v\u00e0 \u0111\u1ebfn th\u00e1ng 3\/2029 ch\u1ec9 c\u00f2n 47 ng\u00e0y. \u0110\u1ed1i v\u1edbi m\u1ed9t t\u1ed5 ch\u1ee9c qu\u1ea3n l\u00fd 1.000 ch\u1ee9ng ch\u1ec9, \u0111i\u1ec1u n\u00e0y c\u00f3 ngh\u0129a l\u00e0 ph\u1ea3i x\u1eed l\u00fd kho\u1ea3ng 30 s\u1ef1 ki\u1ec7n gia h\u1ea1n m\u1ed7i ng\u00e0y. C\u00e1c quy tr\u00ecnh th\u1ee7 c\u00f4ng ho\u1eb7c d\u1ef1a tr\u00ean ticket kh\u00f4ng th\u1ec3 \u0111\u00e1p \u1ee9ng t\u1ea7n su\u1ea5t n\u00e0y m\u1ed9t c\u00e1ch b\u1ec1n v\u1eefng.<\/p>\n<p>Trong khi ACM t\u1eeb l\u00e2u \u0111\u00e3 cung c\u1ea5p t\u00ednh n\u0103ng c\u1ea5p ph\u00e1t v\u00e0 gia h\u1ea1n t\u1ef1 \u0111\u1ed9ng cho c\u00e1c d\u1ecbch v\u1ee5 t\u00edch h\u1ee3p c\u1ee7a AWS nh\u01b0 <strong>Elastic Load Balancing (ELB)<\/strong>, <strong>Amazon CloudFront<\/strong>, v\u00e0 <strong>Amazon API Gateway<\/strong>, nhi\u1ec1u kh\u00e1ch h\u00e0ng v\u1eabn c\u1ea7n t\u1ef1 \u0111\u1ed9ng h\u00f3a cho h\u1ea1 t\u1ea7ng do h\u1ecd t\u1ef1 qu\u1ea3n l\u00fd (m\u00e1y ch\u1ee7 trong trung t\u00e2m d\u1eef li\u1ec7u, c\u1ee5m Kubernetes, thi\u1ebft b\u1ecb IoT). Tr\u01b0\u1edbc \u0111\u00e2y, h\u1ecd ph\u1ea3i t\u00ecm \u0111\u1ebfn c\u00e1c nh\u00e0 cung c\u1ea5p b\u00ean ngo\u00e0i. V\u1edbi c\u00f4ng b\u1ed1 n\u00e0y, AWS mang m\u00f4 h\u00ecnh t\u1ef1 \u0111\u1ed9ng h\u00f3a c\u1ee7a ACM \u0111\u1ebfn v\u1edbi c\u00e1c h\u1ea1 t\u1ea7ng \u0111\u00f3 th\u00f4ng qua giao th\u1ee9c chu\u1ea9n ACME.<\/p>\n<h2>C\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng<\/h2>\n<p>T\u00ednh n\u0103ng m\u1edbi gi\u1edbi thi\u1ec7u m\u1ed9t lo\u1ea1i t\u00e0i nguy\u00ean \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd t\u1eadp trung l\u00e0 <strong>ACME endpoint<\/strong>. M\u1ed7i endpoint l\u00e0 m\u1ed9t t\u00e0i nguy\u00ean AWS v\u1edbi m\u1ed9t URL th\u01b0 m\u1ee5c ACME duy nh\u1ea5t v\u00e0 \u0111\u01b0\u1ee3c ki\u1ec3m so\u00e1t truy c\u1eadp d\u1ef1a tr\u00ean <strong>AWS Identity and Access Management (IAM)<\/strong>. Qu\u1ea3n tr\u1ecb vi\u00ean ch\u1ec9 c\u1ea7n t\u1ea1o endpoint v\u00e0 tr\u1ecf c\u00e1c ACME client hi\u1ec7n c\u00f3 (nh\u01b0 certbot, cert-manager, acme.sh) v\u00e0o URL n\u00e0y.<\/p>\n<p>Ki\u1ebfn tr\u00fac n\u00e0y t\u00e1ch bi\u1ec7t hai m\u1eb7t ph\u1eb3ng:<\/p>\n<ul>\n<li><strong>M\u1eb7t ph\u1eb3ng \u0111i\u1ec1u khi\u1ec3n (Control Plane):<\/strong> Qu\u1ea3n tr\u1ecb vi\u00ean h\u1ea1 t\u1ea7ng kh\u00f3a c\u00f4ng khai (PKI) s\u1eed d\u1ee5ng API c\u1ee7a ACM \u0111\u1ec3 t\u1ea1o ACME endpoint, ph\u00ea duy\u1ec7t tr\u01b0\u1edbc c\u00e1c t\u00ean mi\u1ec1n m\u00e0 endpoint \u0111\u01b0\u1ee3c ph\u00e9p c\u1ea5p ch\u1ee9ng ch\u1ec9, v\u00e0 t\u1ea1o th\u00f4ng tin x\u00e1c th\u1ef1c <em>External Account Binding (EAB)<\/em> (c\u01a1 ch\u1ebf x\u00e1c th\u1ef1c t\u00e0i kho\u1ea3n ngo\u00e0i).<\/li>\n<li><strong>M\u1eb7t ph\u1eb3ng d\u1eef li\u1ec7u (Data Plane):<\/strong> C\u00e1c ACME client s\u1eed d\u1ee5ng th\u00f4ng tin EAB \u0111\u1ec3 \u0111\u0103ng k\u00fd v\u1edbi endpoint v\u00e0 y\u00eau c\u1ea7u ch\u1ee9ng ch\u1ec9 cho c\u00e1c t\u00ean mi\u1ec1n \u0111\u00e3 \u0111\u01b0\u1ee3c qu\u1ea3n tr\u1ecb vi\u00ean x\u00e1c th\u1ef1c tr\u01b0\u1edbc. \u0110i\u1ec1u n\u00e0y cho ph\u00e9p c\u00e1c ch\u1ee7 s\u1edf h\u1eefu \u1ee9ng d\u1ee5ng c\u00f3 th\u1ec3 l\u1ea5y ch\u1ee9ng ch\u1ec9 m\u00e0 kh\u00f4ng c\u1ea7n quy\u1ec1n truy c\u1eadp v\u00e0o DNS.<\/li>\n<\/ul>\n<p>Th\u00f4ng tin x\u00e1c th\u1ef1c EAB ki\u1ec3m so\u00e1t quy\u1ec1n truy c\u1eadp c\u1ee7a client v\u00e0o c\u00e1c endpoint. M\u1ed9t client \u0111\u01b0\u1ee3c c\u1ea5p quy\u1ec1n cho endpoint m\u00f4i tr\u01b0\u1eddng development s\u1ebd kh\u00f4ng th\u1ec3 l\u1ea5y ch\u1ee9ng ch\u1ec9 t\u1eeb endpoint m\u00f4i tr\u01b0\u1eddng production, t\u1ea1o ra c\u00e1c ranh gi\u1edbi b\u1ea3o m\u1eadt r\u00f5 r\u00e0ng gi\u1eefa c\u00e1c m\u00f4i tr\u01b0\u1eddng.<\/p>\n<figure class=\"wp-block-image size-large aligncenter\" style=\"text-align:center;margin:1.5em 0;\">\n<img decoding=\"async\" data-src=\"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2026\/08\/dc65e6c076.png\" alt=\"S\u01a1 \u0111\u1ed3 ki\u1ebfn tr\u00fac v\u00e0 lu\u1ed3ng ho\u1ea1t \u0111\u1ed9ng c\u1ee7a ACME trong ACM\" style=\"--smush-placeholder-width: 668px; --smush-placeholder-aspect-ratio: 668\/522;border-radius:8px;border:1px solid #e5e7eb;max-width:100%;max-height:560px;width:auto;height:auto;display:inline-block;\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\"><br \/>\n<\/figure>\n<h2>C\u00e1c ki\u1ec3m so\u00e1t d\u00e0nh cho doanh nghi\u1ec7p<\/h2>\n<p>Gi\u1ea3i ph\u00e1p ACME c\u1ee7a AWS cung c\u1ea5p c\u00e1c c\u01a1 ch\u1ebf qu\u1ea3n tr\u1ecb v\u00e0 ki\u1ec3m so\u00e1t ch\u1eb7t ch\u1ebd \u0111\u1ec3 doanh nghi\u1ec7p c\u00f3 th\u1ec3 m\u1edf r\u1ed9ng m\u00f4i tr\u01b0\u1eddng ch\u1ee9ng ch\u1ec9 m\u1ed9t c\u00e1ch an to\u00e0n.<\/p>\n<ul>\n<li><strong>X\u00e1c th\u1ef1c t\u00ean mi\u1ec1n (Domain Validation):<\/strong> Qu\u1ea3n tr\u1ecb vi\u00ean c\u00f3 th\u1ec3 ki\u1ec3m so\u00e1t ch\u00ednh x\u00e1c c\u00e1c m\u1eabu ch\u1ee9ng ch\u1ec9 \u0111\u01b0\u1ee3c ph\u00e9p c\u1ea5p cho m\u1ed7i t\u00ean mi\u1ec1n, bao g\u1ed3m t\u00ean mi\u1ec1n ch\u00ednh x\u00e1c (ExactDomain), t\u00ean mi\u1ec1n ph\u1ee5 (Subdomains), ho\u1eb7c k\u00fd t\u1ef1 \u0111\u1ea1i di\u1ec7n (Wildcards). \u0110i\u1ec1u n\u00e0y ng\u0103n ch\u1eb7n vi\u1ec7c c\u1ea5p ph\u00e1t ch\u1ee9ng ch\u1ec9 tr\u00e1i ph\u00e9p.<\/li>\n<li><strong>Hi\u1ec3n th\u1ecb t\u1eadp trung:<\/strong> T\u1ea5t c\u1ea3 ch\u1ee9ng ch\u1ec9 \u0111\u01b0\u1ee3c c\u1ea5p ph\u00e1t qua ACME endpoint \u0111\u1ec1u \u0111\u01b0\u1ee3c \u0111\u0103ng k\u00fd v\u1edbi ACM, cung c\u1ea5p m\u1ed9t kho qu\u1ea3n l\u00fd (inventory) h\u1ee3p nh\u1ea5t cho to\u00e0n b\u1ed9 ch\u1ee9ng ch\u1ec9 c\u1ee7a t\u1ed5 ch\u1ee9c.<\/li>\n<li><strong>Ph\u00e2n quy\u1ec1n IAM v\u00e0 ghi log CloudTrail:<\/strong> M\u1ecdi ho\u1ea1t \u0111\u1ed9ng qu\u1ea3n l\u00fd endpoint \u0111\u1ec1u \u0111\u01b0\u1ee3c ph\u00e2n quy\u1ec1n qua IAM v\u00e0 ghi l\u1ea1i trong AWS CloudTrail \u0111\u1ec3 ph\u1ee5c v\u1ee5 ki\u1ec3m to\u00e1n. Doanh nghi\u1ec7p c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng ch\u00ednh s\u00e1ch IAM \u0111\u1ec3 ki\u1ec3m so\u00e1t ai c\u00f3 th\u1ec3 t\u1ea1o endpoint, t\u1ea1o th\u00f4ng tin EAB, v\u00e0 qu\u1ea3n l\u00fd c\u00e1c r\u00e0ng bu\u1ed9c t\u00ean mi\u1ec1n.<\/li>\n<\/ul>\n<h2>C\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t (Best Practices)<\/h2>\n<p>\u0110\u1ec3 tri\u1ec3n khai ch\u1ee9ng ch\u1ec9 ACME hi\u1ec7u qu\u1ea3, AWS khuy\u1ebfn ngh\u1ecb c\u00e1c doanh nghi\u1ec7p n\u00ean c\u00e2n nh\u1eafc c\u00e1c ph\u01b0\u01a1ng ph\u00e1p sau:<\/p>\n<ul>\n<li><strong>Ph\u00e2n \u0111o\u1ea1n endpoint:<\/strong> T\u1ea1o c\u00e1c endpoint ri\u00eang bi\u1ec7t theo ranh gi\u1edbi t\u1ed5 ch\u1ee9c (\u0111\u01a1n v\u1ecb kinh doanh) ho\u1eb7c m\u00f4i tr\u01b0\u1eddng (dev, staging, prod) \u0111\u1ec3 c\u00f4 l\u1eadp r\u1ee7i ro. N\u1ebfu th\u00f4ng tin x\u00e1c th\u1ef1c \u1edf m\u1ed9t \u0111\u01a1n v\u1ecb b\u1ecb x\u00e2m ph\u1ea1m, n\u00f3 s\u1ebd kh\u00f4ng \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn c\u00e1c \u0111\u01a1n v\u1ecb kh\u00e1c.<\/li>\n<li><strong>Qu\u1ea3n l\u00fd th\u00f4ng tin EAB an to\u00e0n:<\/strong> Coi th\u00f4ng tin EAB (KeyId v\u00e0 MacKey) nh\u01b0 m\u1ed9t access key. L\u01b0u tr\u1eef ch\u00fang trong c\u00e1c kho b\u00ed m\u1eadt nh\u01b0 <strong>AWS Secrets Manager<\/strong>, tu\u00e2n th\u1ee7 nguy\u00ean t\u1eafc \u0111\u1eb7c quy\u1ec1n t\u1ed1i thi\u1ec3u (least privilege) b\u1eb1ng c\u00e1ch t\u1ea1o vai tr\u00f2 IAM ri\u00eang cho m\u1ed7i EAB.<\/li>\n<li><strong>T\u1ef1 \u0111\u1ed9ng h\u00f3a vi\u1ec7c li\u00ean k\u1ebft EAB v\u1edbi client:<\/strong> T\u00edch h\u1ee3p vi\u1ec7c c\u1ea5p ph\u00e1t th\u00f4ng tin EAB v\u00e0o c\u00e1c pipeline CI\/CD ho\u1eb7c h\u1ea1 t\u1ea7ng d\u01b0\u1edbi d\u1ea1ng m\u00e3 (infrastructure-as-code) thay v\u00ec th\u1ef1c hi\u1ec7n th\u1ee7 c\u00f4ng. \u0110i\u1ec1u n\u00e0y \u0111\u1ea3m b\u1ea3o v\u00f2ng \u0111\u1eddi c\u1ee7a th\u00f4ng tin x\u00e1c th\u1ef1c kh\u1edbp v\u1edbi v\u00f2ng \u0111\u1eddi c\u1ee7a h\u1ea1 t\u1ea7ng.<\/li>\n<li><strong>Gi\u00e1m s\u00e1t tri\u1ec3n khai ACME:<\/strong> Thi\u1ebft l\u1eadp c\u1ea3nh b\u00e1o cho c\u00e1c l\u1ea7n c\u1ea5p ph\u00e1t th\u1ea5t b\u1ea1i. Vi\u1ec7c gia h\u1ea1n kh\u00f4ng th\u00e0nh c\u00f4ng c\u1ea7n \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n v\u00e0 x\u1eed l\u00fd nhanh ch\u00f3ng, \u0111\u1eb7c bi\u1ec7t khi th\u1eddi h\u1ea1n ch\u1ee9ng ch\u1ec9 ch\u1ec9 c\u00f2n 45 ng\u00e0y.<\/li>\n<\/ul>\n<h2>T\u00ednh s\u1eb5n s\u00e0ng v\u00e0 gi\u00e1 c\u1ea3<\/h2>\n<p>H\u1ed7 tr\u1ee3 ACME trong AWS Certificate Manager \u0111\u00e3 kh\u1ea3 d\u1ee5ng t\u1ea1i t\u1ea5t c\u1ea3 c\u00e1c Region th\u01b0\u01a1ng m\u1ea1i c\u1ee7a AWS. T\u00ednh n\u0103ng n\u00e0y s\u1ebd \u0111\u01b0\u1ee3c tri\u1ec3n khai t\u1ea1i AWS GovCloud (US), c\u00e1c Region t\u1ea1i Trung Qu\u1ed1c v\u00e0 AWS European Sovereign Cloud trong t\u01b0\u01a1ng lai. Th\u00f4ng tin chi ti\u1ebft v\u1ec1 gi\u00e1 c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c t\u00ecm th\u1ea5y tr\u00ean trang gi\u00e1 c\u1ee7a ACM.<\/p>","protected":false},"excerpt":{"rendered":"<p>AWS v\u1eeba c\u00f4ng b\u1ed1 h\u1ed7 tr\u1ee3 giao th\u1ee9c ACME (Automated Certificate Management Environment) trong d\u1ecbch v\u1ee5 AWS Certificate Manager (ACM). C\u1eadp nh\u1eadt n\u00e0y cho ph\u00e9p doanh nghi\u1ec7p t\u1ef1 \u0111\u1ed9ng h\u00f3a ho\u00e0n to\u00e0n vi\u1ec7c c\u1ea5p ph\u00e1t v\u00e0 gia h\u1ea1n ch\u1ee9ng ch\u1ec9 TLS c\u00f4ng c\u1ed9ng cho h\u1ea1 t\u1ea7ng c\u1ee7a m\u00ecnh, d\u00f9 \u0111ang ch\u1ea1y tr\u00ean AWS, t\u1ea1i ch\u1ed7&#8230;<\/p>","protected":false},"author":22,"featured_media":67147,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-67149","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ctelers-blogs"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AWS Certificate Manager h\u1ed7 tr\u1ee3 ACME: T\u1ef1 \u0111\u1ed9ng h\u00f3a ch\u1ee9ng ch\u1ec9 TLS quy m\u00f4 l\u1edbn | CMC Telecom<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/aws.cmctelecom.vn\/en\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AWS Certificate Manager h\u1ed7 tr\u1ee3 ACME: T\u1ef1 \u0111\u1ed9ng h\u00f3a ch\u1ee9ng ch\u1ec9 TLS quy m\u00f4 l\u1edbn | CMC Telecom\" \/>\n<meta property=\"og:description\" content=\"AWS v\u1eeba c\u00f4ng b\u1ed1 h\u1ed7 tr\u1ee3 giao th\u1ee9c ACME (Automated Certificate Management Environment) trong d\u1ecbch v\u1ee5 AWS Certificate Manager (ACM). C\u1eadp nh\u1eadt n\u00e0y cho ph\u00e9p doanh nghi\u1ec7p t\u1ef1 \u0111\u1ed9ng h\u00f3a ho\u00e0n to\u00e0n vi\u1ec7c c\u1ea5p ph\u00e1t v\u00e0 gia h\u1ea1n ch\u1ee9ng ch\u1ec9 TLS c\u00f4ng c\u1ed9ng cho h\u1ea1 t\u1ea7ng c\u1ee7a m\u00ecnh, d\u00f9 \u0111ang ch\u1ea1y tr\u00ean AWS, t\u1ea1i ch\u1ed7...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/aws.cmctelecom.vn\/en\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/\" \/>\n<meta property=\"og:site_name\" content=\"CMC Telecom\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/CMCTelecomOfficial\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-07T02:22:58+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-07T07:31:26+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2026\/08\/automate-certificates-with-acme-support-in-aws-certificate-manager.thumbnail.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"731\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Son Tran\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Son Tran\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/2026\\\/08\\\/07\\\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/2026\\\/08\\\/07\\\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\\\/\"},\"author\":{\"name\":\"Son Tran\",\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/#\\\/schema\\\/person\\\/630c0582c38b5246ea44d055155d721e\"},\"headline\":\"AWS Certificate Manager h\u1ed7 tr\u1ee3 ACME: T\u1ef1 \u0111\u1ed9ng h\u00f3a ch\u1ee9ng ch\u1ec9 TLS quy m\u00f4 l\u1edbn\",\"datePublished\":\"2026-08-07T02:22:58+00:00\",\"dateModified\":\"2026-08-07T07:31:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/2026\\\/08\\\/07\\\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\\\/\"},\"wordCount\":1605,\"publisher\":{\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/2026\\\/08\\\/07\\\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/automate-certificates-with-acme-support-in-aws-certificate-manager.thumbnail.jpg\",\"articleSection\":[\"Blogs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/2026\\\/08\\\/07\\\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\\\/\",\"url\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/2026\\\/08\\\/07\\\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\\\/\",\"name\":\"AWS Certificate Manager h\u1ed7 tr\u1ee3 ACME: T\u1ef1 \u0111\u1ed9ng h\u00f3a ch\u1ee9ng ch\u1ec9 TLS quy m\u00f4 l\u1edbn | CMC Telecom\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/2026\\\/08\\\/07\\\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/2026\\\/08\\\/07\\\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/automate-certificates-with-acme-support-in-aws-certificate-manager.thumbnail.jpg\",\"datePublished\":\"2026-08-07T02:22:58+00:00\",\"dateModified\":\"2026-08-07T07:31:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/2026\\\/08\\\/07\\\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/aws.cmctelecom.vn\\\/2026\\\/08\\\/07\\\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/2026\\\/08\\\/07\\\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\\\/#primaryimage\",\"url\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/automate-certificates-with-acme-support-in-aws-certificate-manager.thumbnail.jpg\",\"contentUrl\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/automate-certificates-with-acme-support-in-aws-certificate-manager.thumbnail.jpg\",\"width\":1280,\"height\":731},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/2026\\\/08\\\/07\\\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Trang ch\u1ee7\",\"item\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blogs\",\"item\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/danh-muc-tin-tuc\\\/ctelers-blogs\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"AWS Certificate Manager h\u1ed7 tr\u1ee3 ACME: T\u1ef1 \u0111\u1ed9ng h\u00f3a ch\u1ee9ng ch\u1ec9 TLS quy m\u00f4 l\u1edbn\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/#website\",\"url\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/\",\"name\":\"CMC Telecom\",\"description\":\"\u0110\u1ed1i t\u00e1c D\u1ecbch v\u1ee5 C\u1ea5p cao c\u1ee7a AWS t\u1ea1i Vi\u1ec7t Nam\",\"publisher\":{\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/#organization\"},\"alternateName\":\"AWS Advanced Partner in Vietnam\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/#organization\",\"name\":\"CMC Telecom\",\"alternateName\":\"CMC Telecom\",\"url\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/cmc-telecom-logo.png\",\"contentUrl\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/cmc-telecom-logo.png\",\"width\":400,\"height\":96,\"caption\":\"CMC Telecom\"},\"image\":{\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/CMCTelecomOfficial\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/#\\\/schema\\\/person\\\/630c0582c38b5246ea44d055155d721e\",\"name\":\"Son Tran\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/83ecf50e74202a2c7d2e2c924c1d66b874db607a909c8236b74cc4fb96581a00?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/83ecf50e74202a2c7d2e2c924c1d66b874db607a909c8236b74cc4fb96581a00?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/83ecf50e74202a2c7d2e2c924c1d66b874db607a909c8236b74cc4fb96581a00?s=96&d=mm&r=g\",\"caption\":\"Son Tran\"},\"url\":\"https:\\\/\\\/aws.cmctelecom.vn\\\/en\\\/author\\\/publisher-bot\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AWS Certificate Manager h\u1ed7 tr\u1ee3 ACME: T\u1ef1 \u0111\u1ed9ng h\u00f3a ch\u1ee9ng ch\u1ec9 TLS quy m\u00f4 l\u1edbn | CMC Telecom","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/aws.cmctelecom.vn\/en\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/","og_locale":"en_US","og_type":"article","og_title":"AWS Certificate Manager h\u1ed7 tr\u1ee3 ACME: T\u1ef1 \u0111\u1ed9ng h\u00f3a ch\u1ee9ng ch\u1ec9 TLS quy m\u00f4 l\u1edbn | CMC Telecom","og_description":"AWS v\u1eeba c\u00f4ng b\u1ed1 h\u1ed7 tr\u1ee3 giao th\u1ee9c ACME (Automated Certificate Management Environment) trong d\u1ecbch v\u1ee5 AWS Certificate Manager (ACM). C\u1eadp nh\u1eadt n\u00e0y cho ph\u00e9p doanh nghi\u1ec7p t\u1ef1 \u0111\u1ed9ng h\u00f3a ho\u00e0n to\u00e0n vi\u1ec7c c\u1ea5p ph\u00e1t v\u00e0 gia h\u1ea1n ch\u1ee9ng ch\u1ec9 TLS c\u00f4ng c\u1ed9ng cho h\u1ea1 t\u1ea7ng c\u1ee7a m\u00ecnh, d\u00f9 \u0111ang ch\u1ea1y tr\u00ean AWS, t\u1ea1i ch\u1ed7...","og_url":"https:\/\/aws.cmctelecom.vn\/en\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/","og_site_name":"CMC Telecom","article_publisher":"https:\/\/www.facebook.com\/CMCTelecomOfficial","article_published_time":"2026-08-07T02:22:58+00:00","article_modified_time":"2026-08-07T07:31:26+00:00","og_image":[{"width":1280,"height":731,"url":"http:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2026\/08\/automate-certificates-with-acme-support-in-aws-certificate-manager.thumbnail.jpg","type":"image\/jpeg"}],"author":"Son Tran","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Son Tran","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/#article","isPartOf":{"@id":"https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/"},"author":{"name":"Son Tran","@id":"https:\/\/aws.cmctelecom.vn\/#\/schema\/person\/630c0582c38b5246ea44d055155d721e"},"headline":"AWS Certificate Manager h\u1ed7 tr\u1ee3 ACME: T\u1ef1 \u0111\u1ed9ng h\u00f3a ch\u1ee9ng ch\u1ec9 TLS quy m\u00f4 l\u1edbn","datePublished":"2026-08-07T02:22:58+00:00","dateModified":"2026-08-07T07:31:26+00:00","mainEntityOfPage":{"@id":"https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/"},"wordCount":1605,"publisher":{"@id":"https:\/\/aws.cmctelecom.vn\/#organization"},"image":{"@id":"https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/#primaryimage"},"thumbnailUrl":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2026\/08\/automate-certificates-with-acme-support-in-aws-certificate-manager.thumbnail.jpg","articleSection":["Blogs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/","url":"https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/","name":"AWS Certificate Manager h\u1ed7 tr\u1ee3 ACME: T\u1ef1 \u0111\u1ed9ng h\u00f3a ch\u1ee9ng ch\u1ec9 TLS quy m\u00f4 l\u1edbn | CMC Telecom","isPartOf":{"@id":"https:\/\/aws.cmctelecom.vn\/#website"},"primaryImageOfPage":{"@id":"https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/#primaryimage"},"image":{"@id":"https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/#primaryimage"},"thumbnailUrl":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2026\/08\/automate-certificates-with-acme-support-in-aws-certificate-manager.thumbnail.jpg","datePublished":"2026-08-07T02:22:58+00:00","dateModified":"2026-08-07T07:31:26+00:00","breadcrumb":{"@id":"https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/#primaryimage","url":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2026\/08\/automate-certificates-with-acme-support-in-aws-certificate-manager.thumbnail.jpg","contentUrl":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2026\/08\/automate-certificates-with-acme-support-in-aws-certificate-manager.thumbnail.jpg","width":1280,"height":731},{"@type":"BreadcrumbList","@id":"https:\/\/aws.cmctelecom.vn\/2026\/08\/07\/aws-certificate-manager-ho-tro-acme-tu-dong-hoa-chung-chi-tls-quy-mo-lon\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Trang ch\u1ee7","item":"https:\/\/aws.cmctelecom.vn\/"},{"@type":"ListItem","position":2,"name":"Blogs","item":"https:\/\/aws.cmctelecom.vn\/danh-muc-tin-tuc\/ctelers-blogs\/"},{"@type":"ListItem","position":3,"name":"AWS Certificate Manager h\u1ed7 tr\u1ee3 ACME: T\u1ef1 \u0111\u1ed9ng h\u00f3a ch\u1ee9ng ch\u1ec9 TLS quy m\u00f4 l\u1edbn"}]},{"@type":"WebSite","@id":"https:\/\/aws.cmctelecom.vn\/#website","url":"https:\/\/aws.cmctelecom.vn\/","name":"CMC Telecom","description":"CMC Telecom holds the position of a Advanced Tier Service Partner of AWS in Vietnam and has closely","publisher":{"@id":"https:\/\/aws.cmctelecom.vn\/#organization"},"alternateName":"AWS Advanced Partner in Vietnam","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/aws.cmctelecom.vn\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/aws.cmctelecom.vn\/#organization","name":"CMC Telecom","alternateName":"CMC Telecom","url":"https:\/\/aws.cmctelecom.vn\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/aws.cmctelecom.vn\/#\/schema\/logo\/image\/","url":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/07\/cmc-telecom-logo.png","contentUrl":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/07\/cmc-telecom-logo.png","width":400,"height":96,"caption":"CMC Telecom"},"image":{"@id":"https:\/\/aws.cmctelecom.vn\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/CMCTelecomOfficial"]},{"@type":"Person","@id":"https:\/\/aws.cmctelecom.vn\/#\/schema\/person\/630c0582c38b5246ea44d055155d721e","name":"Son Tran","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/83ecf50e74202a2c7d2e2c924c1d66b874db607a909c8236b74cc4fb96581a00?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/83ecf50e74202a2c7d2e2c924c1d66b874db607a909c8236b74cc4fb96581a00?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/83ecf50e74202a2c7d2e2c924c1d66b874db607a909c8236b74cc4fb96581a00?s=96&d=mm&r=g","caption":"Son Tran"},"url":"https:\/\/aws.cmctelecom.vn\/en\/author\/publisher-bot\/"}]}},"_links":{"self":[{"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/posts\/67149","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/users\/22"}],"replies":[{"embeddable":true,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/comments?post=67149"}],"version-history":[{"count":1,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/posts\/67149\/revisions"}],"predecessor-version":[{"id":67154,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/posts\/67149\/revisions\/67154"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/media\/67147"}],"wp:attachment":[{"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/media?parent=67149"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/categories?post=67149"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/tags?post=67149"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}