AWS just announced Amazon Certificate Manager service, free SSL&#x2F;TLS certs for assets hosted on AWS[1]. It makes sense to ask trust roots to add Amazon own certs.<p>[1] <a href="https:&#x2F;&#x2F;aws.amazon.com&#x2F;blogs&#x2F;aws&#x2F;new-aws-certificate-manager-deploy-ssltls-based-apps-on-aws&#x2F;" rel="nofollow">https:&#x2F;&#x2F;aws.amazon.com&#x2F;blogs&#x2F;aws&#x2F;new-aws-certificate-manager...</a>