If You Want Managed Certificates for an Internal LB's HTTPS, the Domain Must Live in Public DNS

While designing a setup to secure internal VPC traffic (a call from one app to another app's internal API) with HTTPS, I wondered: 'Couldn't the certificate's domain just be a private domain handed ou...