[wichert]

You can only configure a single SSL listener per load balancer, and that listener can only use a single certificate. That means you do indeed still need to use either wildcard certs or certs with multiple hostnames. Luckily you can very easily create those through the AWS certificate manager for free.

[statictype]

Wait - AWS has a service to generate wild card Certs that can be attached to ELB?

Did not realise this was a thing

[zwily]

Yes, and they automatically renew. It's fantastic. If you're using ELB/ALB, it's by far the easiest way to do SSL.

The only downside is that initial setup of a certificate requires email confirmation, so if you need to provision a lot, LE may still win.

[zob_cloud]

And they're free! Although only can be used on AWS services, currently ELB and CloudFront. https://aws.amazon.com/certificate-manager/