Is it possible to use a custom certificate issued by a private certificate authority with custom origin behind CloudFront?

One day an engineer in my team came up with this question. There was no quick answer available, so I started digging and here's what I found. CloudFront's docs on CNAMEs and HTTPS requirements say: CloudFront supports all types of certificates issue...