@iliana yeah, and alternate cert names. it seems really handy, until you try to use ACM certs with something that doesn't support it, and discover it's not really possible to get the certs out of ACM for general usage.

but for inside of AWS with their services, it's pretty ok.