I wrote a script to share letsencrypt wildcards to internal hosts: https://github.com/bartsmit/distcertsBart...