Have you heard about the new and totally free Certificate Authority Let's Encrypt? If you are using an AWS region where Certificate Manager is supported, then you should probably use that instead. If not, you might be interested in using Let's Encrypt to get