title: Amazon Certificate Manager: My Shortest Possible Domain Name Is Too Long
body: <p>I'm trying to request a certificate for <code>my.super.long.delegated.domain.com</code> through the AWS console. I have control over <code>long.delegated.domain.com</code> but not over <code>domain.com</code> - it's someone else's and they've delegated <code>long.delegated.domain.com</code> to me. I know from <a href="https://docs.aws.amazon.com/acm/latest/APIReference/API_RequestCertificate.html#ACM-RequestCertificate-request-DomainName" rel="nofollow noreferrer">the docs</a> that: </p>
  
  <blockquote>
    <p>The first domain name you enter cannot exceed 64 octets, including periods. Each subsequent Subject Alternative Name (SAN), however, can be up to 253 octets in length. </p>
  </blockquote>
  
  <p>I want a certificate for <code>my.super.long.delegated.domain.com</code>, but it is longer than 64 octets (but shorter than 253 octets). The shortest domain I have control over is <code>long.delegated.domain.com</code> which is still longer than 64 octets.</p>
  
  <p>How can I get a certificate covering <code>my.super.long.delegated.domain.com</code>, which doesn't prevent me from making another certificate in another AWS account for <code>my-other.super.long.delegated.domain.com</code>?</p>