Managing SSL certificates is such a pain. I'm going to advocate to moving to all AWS-managed certificates in the future, now that they have wildcard certs.