AWS Services are moving to Amazon's Certificate Authority! Read https://aws.amazon.com/blogs/security/how-to-prepare-for-aws-move-to-its-own-certificate-authority/?sc_channel=sm&sc_campaign=AWS_Security&sc_publisher=TWITTER&sc_country=Security%20&%20Identity&sc_geo=GLOBAL&sc_outcome=awareness&trk=_TWITTER&sc_content=awsmovetoitsownca&sc_category=AWS_Identity_and_Access_Management&linkId=44102564 … if you're pinning or using way out of date clients.