What's the difference between ARN and certificateId here? ARN is an Amazon-specific term, not common across all providers.