Post #1510753

@mmeier I don't love having my internal zone in route 53, but it's great to issue wildcard certificates that are not publicly reachable.