Do certificate providers allow you to have multiple certificates with the same common name but different CSRs from different private keys, all operating at the same time? At first glance, it's the same question asked here, but my context is different.
My plan is to have two web servers--one that supports only modern ciphers and one that gives a nice error message if your browser doesn't support one of those. A load balancer will read the Client Hello message and if the browser supports one of the ciphers in the list, they get sent to the real site; if they don't, they get sent to the site that gives them the error and a suggested course of action.
However, I would prefer to not have the same private key on both of these sites--the "error message" site being more prone to getting owned because of the old ciphers.
Perhaps some certificate authorities will issue two certs with the same CN and different CSRs and some won't. Thoughts?