How Can I Identify the Validity Period of an SSL Root Certificate?

When you connect to an RDS MySQL DB instance using an SSL connection, run the following command to check whether the certificate has expired:

show status like '%ssl_server%';

Update the root certificate to the latest version before it expires:

1. In the DB Information area on the Basic Information page, click in the SSL field to download the new root certificate or certificate bundle.
2. Reboot the DB instance for the new certificate to take effect.
3. Connect to the DB instance using the new certificate or certificate bundle.
   • 

     If a certificate is about to expire, replace it with an officially issued certificate to improve system security.