:_mod-docs-content-type: ASSEMBLY
[id="cloud-experts-dynamic-certificate-custom-domain"]
= Tutorial: Dynamically issuing certificates using the cert-manager Operator on {product-title}

include::_attributes/attributes-openshift-dedicated.adoc[]
:context: cloud-experts-dynamic-certificate-custom-domain

toc::[]

[role="_abstract"]
While wildcard certificates provide simplicity by securing all first-level subdomains of a given domain with a single certificate, other use cases can require the use of individual certificates per domain.

Learn how to use the link:https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html[cert-manager Operator for Red{nbsp}Hat OpenShift] and link:https://letsencrypt.org/[Let's Encrypt] to dynamically issue certificates for routes created using a custom domain.

[id="cloud-experts-dynamic-certificate-custom-domain-prerequisites"]
== Prerequisites

* A {product-title} cluster
* A user account with `cluster-admin` privileges
* The OpenShift CLI (`oc`)
* The Amazon Web Services (AWS) CLI (`aws`)
* A unique domain, such as `*.apps.example.com`
* An Amazon Route 53 public hosted zone for the above domain

include::modules/cloud-experts-dynamic-certificate-custom-domain-environment-setup.adoc[leveloffset=+1]
include::modules/cloud-experts-dynamic-certificate-custom-domain-prep-aws.adoc[leveloffset=+1]
include::modules/cloud-experts-dynamic-certificate-custom-domain-install-cert-man-op.adoc[leveloffset=+1]
include::modules/cloud-experts-dynamic-certificate-custom-domain-create-cd-ingress-con.adoc[leveloffset=+1]
include::modules/cloud-experts-dynamic-certificate-custom-domain-config-dynamic-cert.adoc[leveloffset=+1]
include::modules/cloud-experts-dynamic-certificate-custom-domain-config-deploy-sample-app.adoc[leveloffset=+1]
include::modules/cloud-experts-dynamic-certificate-custom-domain-troubleshoot.adoc[leveloffset=+1]