Overall this is a good guide! Security best practices say you should use a unique certificate for each service to limit the spread of damage if it’s compromised, and you also lower the number of services that need to be refreshed at the same time when a single cert is renewed.