I'd like to be able to create that certificate then add the validation requirements into route53 dns, but this doesn't work.