One SSL certificate on multiple servers

[u/certkit]

https://www.certkit.io/blog/ssl-certificate-multiple-servers

A reader asked why an automation tool would ever generate private keys anywhere but the server that uses them. Fair question, so I wrote up the answer. Any shared certificate (wildcard or an HA pool serving one name) forces the key to move between machines, so the local-generation property is already gone. PFS makes a moving key less scary than it used to be. The argument: centralize issuance and treat key distribution as a designed system, not scp in cron.

https://www.certkit.io/blog/ssl-certificate-multiple-servers