For TLS connection to an Elastic Beanstalk Environment an AWS issued certificate is attached to the load balancer listener.
I recently had to create a new certificate