We have a SAN cert that is used on multiple servers. Is it possible to have the cert re-keyed and only use the new private key on a particular server while keeping all of our other servers using the old private key?
I'm trying to think through this but I can't see a reason why this would not work as the other servers as far as they know they still have a matching key pair. It may not be the best practice, but I don't see why we can't. Looking for confirmation.