Separate some certs to make migration easier LetsEncrypt requires all domains on the cert to be accessible when renewing. If some migrated and some didn't then it won't work. Separating sites gives us more options for moving sites