diff --git a/acmpca/README.md b/acmpca/README.md
index 51f9aed..db97ae6 100644
--- a/acmpca/README.md
+++ b/acmpca/README.md
@@ -36,6 +36,7 @@ the ARN if completed.   You'll use the ARN for an AWS LB Listener.
 | <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 5.0 |
 | <a name="requirement_local"></a> [local](#requirement\_local) | >= 2.1.0 |
 | <a name="requirement_null"></a> [null](#requirement\_null) | >= 3.1.0 |
+| <a name="requirement_random"></a> [random](#requirement\_random) | >= 3.6.0 |
 | <a name="requirement_tls"></a> [tls](#requirement\_tls) | >= 3.1.0 |
 
 ## Providers
@@ -45,7 +46,7 @@ the ARN if completed.   You'll use the ARN for an AWS LB Listener.
 | <a name="provider_aws"></a> [aws](#provider\_aws) | >= 5.0 |
 | <a name="provider_local"></a> [local](#provider\_local) | >= 2.1.0 |
 | <a name="provider_null"></a> [null](#provider\_null) | >= 3.1.0 |
-| <a name="provider_random"></a> [random](#provider\_random) | n/a |
+| <a name="provider_random"></a> [random](#provider\_random) | >= 3.6.0 |
 | <a name="provider_tls"></a> [tls](#provider\_tls) | >= 3.1.0 |
 
 ## Modules
diff --git a/acmpca/certificate.tf b/acmpca/certificate.tf
index f988749..08daca0 100644
--- a/acmpca/certificate.tf
+++ b/acmpca/certificate.tf
@@ -8,7 +8,7 @@ locals {
 
   output_file_directory  = var.output_file_directory != null ? var.output_file_directory : format("%v/%v", path.root, "certs")
   _cert_filename         = coalesce(var.certificate_cn, local.cert_dns)
-  generate_cert_filename = try(regex("[^a-zA-Z0-9_\\.-]", local._cert_filename), "") != ""
+  generate_cert_filename = try(regex("[^a-zA-Z0-9_\\.-]", local._cert_filename), "") != "" && var.create_files
   cert_filename          = local.generate_cert_filename ? random_uuid.filename[0].result : local._cert_filename
 }