Certificates at AWS Route 53 are very easy to set up. so you have two candidates, letsencrypt and Route53.