That's right, since it is based on the global load balancing tech, you get a single IP for all edge locations which means you can use your own custom SSL (without the need for SNI) at no extra cost (which would cost you $500/month on AWS CloudFront).
Regarding free SSL are we talking SNI here or is this free non SNI HTTPS hosting?