title: CloudFront distribution and AWS issued certificate gives SSL_ERROR_NO_CYPHER_OVERLAP
body: <p>I can't get the Internet &lt;-&gt; CloudFront &lt;-&gt; S3 Bucket working, using an AWS certificate. This is what I did:</p>
  <ol>
  <li>Created a certificate, a wildcard one, like: <code>*.mydomain.example</code>.</li>
  <li>Created a S3 bucket, no fiddeling with properties.</li>
  <li>Creating a CloudFront distribution, using the created S3 bucket URL as origin, selecting my certificate from step 1, choosing HTTP/2, HTTP/1.1, HTTP/1.0, and choosing HTTP to HTTPS redirect.</li>
  <li>Created an A alias in my hosted zone for the domain the certificate is issued for, pointing at my distribution URL.</li>
  </ol>
  <p>After the distribution is created, my browsers all tell me this:</p>
  <ul>
  <li>Firefox: SSL_ERROR_NO_CYPHER_OVERLAP</li>
  <li>Chrome: ERR_SSL_VERSION_OR_CIPHER_MISMATCH</li>
  <li>Safari: Can't establish a secure connection.</li>
  </ul>
  <p>I'm not sure if I've missed a step in the process of setting this up, I've tried fiddling with various parameters but nothing lets me through.</p>
  <p>I read <a href="https://blog.nikitaog.me/2016/02/12/how-to-setup-ssl-on-amazon-web-services-with-nginx/" rel="nofollow noreferrer">this blog post</a>, saying that I might have forgotten adding alternate CNAMEs. This confuses me a bit, should I? In Route 53 I configured my full domain using <code>something.mydomain.example</code> and the certificate is a wildcard one.</p>
  <p>Other blog posts and question answers indicates I should not, just use the A record and the CloudFront distribution URL/endpoint, as I have done.</p>