Best practice for single cert covering multiple subdomains on different servers?

correct. It is already in some of the alternative clients though. I’m not fully sure which of the clients include the DNS option, but certainly https://github.com/lukas2511/letsencrypt.sh and https://github.com/srvrco/getssl do.