Here is the scenario, single domain
example.com, we have few web servers
web2.example.com and so on. We need SSL on all web servers (they are different servers).
- Do we need advanced certificate for each web server?
- How do we maintenance origin certificate on each server? It originally comes with
*.example.com, every time we have new web server in place, we need to keep updating by create CSR on new web server (ex: web5.example,com.), then update origin certificate on Cloudflare? Meaning once update origin certificate, we have to go over all existing web server and complete the certificate request again? I am kind of confused. In our previous experience, each web server create CSR, then generate certificate on the platform like Sectigo, afterward we import or complete the certificate request on the web server. Appreciated if you could give us some direction.