I have created this as i run lots of saas and have been burn by ssl and domain renewal in the past. Even using let's encrypt with acme didn't help, i had a ssl cert for a domain and a subdomain done at the same time, the domain passed and the subdomain not, so the cert never renewed. Looking forward to any feedback.