thank you @rg305
For the point 1> Have each server get its own cert In this case how to use wildcard certs ??