The load balancer uses X.509 certificate Certificates can be managed via ACM or can be manually uploaded
Optional list of certs can be provided Clients can send the host name with SNI (antony) so that the load balnacer knows which cert to provide
SSL termination