I want to create one SSL certificate for three domains that should be handled by the same nginx webserver.
example.com cdn.example.com example.external.com
The first is our main domain name, the second is the CDN. They are both on Amazon Route 53, but the CDN forwards to AWS cloudfront. I can create a LetsEncrypt SSL certificate with the Route-53 plugin for the first two.
The third domain name is not under my control but a simple DNS A-record that forwards to our server. I can use an nginx challenge okay, but certbot does not seem to allow both an nginx and letsencrypt cert request.
Has anyone managed to do this for one certificate? I don't think I can bypass the route-53 challenge because of the CDN. Or should I give up on the one-server setup and simply define different nginx hosts?