I have a React app that pings a Node Express server (REST api, HTTP) running on an EC2 instance for data services. I want to support HTTPS, so I was hoping to get a certificate installed on an Elastic Load Balancer and use that for SSL termination. So the React app would ping the ELB on HTTPS, which would forward and talk to the Express server on HTTP.
The issue: what domain should I make the certificate on? The public DNS of the ELB? Amazon says I can't get an SSL cert on an Amazon-owned DNS: https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-requests.html#failed-additional-verification-required
If I can't get an SSL cert on the ELB's public DNS... how can it support internet-facing HTTPS? Is there something I'm not understanding?