An international company has a subdomain for each country that the company operates in. The subdomains are formatted as example.com, country1.example.com, and country2.example.com. The company's workloads are behind an Application Load Balancer. The company wants to encrypt the website data that is in transit. Which combination of steps will meet these requirements? (Choose two.)
AUse the AWS Certificate Manager (ACM) console to request a public certificate for the apex top domain example com and a wildcard certificate for *.example.com.
BUse the AWS Certificate Manager (ACM) console to request a private certificate for the apex top domain example.com and a wildcard certificate for *.example.com.
CUse the AWS Certificate Manager (ACM) console to request a public and private certificate for the apex top domain example.com.
DValidate domain ownership by email address. Switch to DNS validation by adding the required DNS records to the DNS provider.
EValidate domain ownership for the domain by adding the required DNS records to the DNS provider.