Foo! Okay, I thought they were doing LE certs for every dyno's name. One wildcard makes a lot more sense.
ACM handles all aspects of SSL/TLS certificates for _custom domains_;
you no longer have to purchase certificates, or worry about their
expiration or renewal.