?
"You cannot install certificates with 4096-bit RSA keys or EC keys on your load balancer through integration with ACM. You must upload certificates with 4096-bit RSA keys or EC keys to IAM in order to use them with your load balancer."
but
why ?!
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html