Amazon Cetrificate Manager seems to do this, but it's only available in one region right now.