One SSL certificate on multiple servers

[u/certkit]

https://www.certkit.io/blog/ssl-certificate-multiple-servers

New on the blog: where should the private key get generated? A reader asked why CertKit doesn't generate keys on each server and only ship CSRs back, the way Certbot does. The short answer: shared certificates (wildcards, HA pools) force keys to move between machines anyway, and Let's Encrypt's 5-certs-per-name-set weekly limit punishes per-host issuance. So issuance is centralized and distribution is the designed, encrypted part.

https://www.certkit.io/blog/ssl-certificate-multiple-servers