Step 1. Buy ssl certificate from a vendor. I bought from godaddy because my domain was from godaddy.com
Step2. Create your .key and then a .csr from the .key on the EC2 instance
Step3. The vendor (godaddy in my case) will take the .csr file and give 2 .cert files. These two files will be .csr and bundle*.csr . Combine these as shown here
Step 4. Copy the files in a secure location and use as described here
That’s how I made https://www.gogameserver.com work.
Currently FreakBall uses that as backend.