Hi.

I'm running into this issue still.
Twice in a row, I've had a certificate take just above 10mn to validate, where the function is set to timeout after 9:30 (ironic).
When creating a DNS validated certificate via the console, there is a warning saying it can take 30mn, or more. I'm sure this would be an extreme case, but apparently, 10mn is not long enough.

Could we increase maxAttempts a tad more ?
(personally, I'd double go with 60 to match the console warning).

Cheers.

• CDK CLI Version: 1.19.0 (build 5597bbe)
• Module Version: "@aws-cdk/aws-certificatemanager@^1.21.0"
• OS: OSX Mojave
• Language: JS