InvalidViewerCertificate

╷
│ Error: error creating CloudFront Distribution: InvalidViewerCertificate: The specified SSL certificate doesn't exist, isn't in us-east-1 region, isn't valid, or doesn't include a valid certificate chain.
│       status code: 400, request id: 08cbb95c-7431-4443-897f-394b6e8386c3
│
│   with module.cdn.aws_cloudfront_distribution.this,
│   on .terraform/modules/pathtofile.tf line 8, in resource "aws_cloudfront_distribution" "this":
│    8: resource "aws_cloudfront_distribution" "this" {
│
╵

https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-invalid-viewer-certificate/

• The certificate must be imported in the US East (N. Virginia) Region.
• The certificate must be 2048 bits or smaller.
• The certificate must not be password-protected.
• The certificate must be PEM encoded.

See also

• AWS CloudFront, distributions, Invalidations, Amazon CloudFront Ready, aws cloudfront, CloudFront Functions, Lambda@Edge, Origin Shield, Signed URL, OAI, Origin Access Control (OAC), Amazon CloudFront edge locations, cloudfront.net, invalidations, CloudFront Security Savings Bundle (CFSSB)
• Terraform AWS CloudFront: provider aws_cloudfront_distribution, aws_cloudfront_origin_access_identity, aws_cloudfront_origin_access_control, Terraform module: cloudfront