I had been a loyal ssls.com user for years until I am an obsessive AWS user. AWS has a service called AWS Certificate Manager, which allows you to maintain your SSL certificates and also you can create a new one for FREE. Yes! For FREE! (but we can only use it in the AWS ecosystem, but still, it is free). Not just one domain SSL Certificate that is free. A Wildcard Certificate that usually costs about $100/year now you can find it FREE in AWS Certificate Manager. How awesome is that? I would give a brief tutorial how to create an SSL certificate through AWS that later on you could deploy it into Elastic Load Balancers, Cloudfront, API Gateway and other supporting AWS products.

AWS Certificate Manager

I assume you have an AWS account and have logged in. Now go to the Certificate Manager page.

AWS Certificate Manager

I recommend using the AWS Certificate Manager under the US EAST (N. Virginia) region. Some services can only support AWS Certificate under that region. Click “Get Started” for Provision certificates.

AWS Certificate Manager

Select “Request a public certificate” then proceed.

AWS Certificate Manager

In this section, fill your domain name and wildcard domain name, e.g. yourdomain.com and *.yourdomain.com. 

AWS Certificate Manager

There are two options to check that you own the domain name are by DNS validation and email validation. Choosing DNS validation will require you to add CNAME record in DNS. Honestly, I never choose email validation, but I bet it will send a verification to email address that domain has been registered to.