FTA:
ACM handles all aspects of SSL/TLS certificates for _custom domains_;
you no longer have to purchase certificates, or worry about their
expiration or renewal.