How Etsy Manages HTTPS and SSL Certificates for Custom Domains on Pattern - Code as Craft

Two engineers at Etsy recently shared how they offer their merchants TLS-certificates for their custom domains on the Etsy-platform. The tricky part here is scale: How to store the massive amount of certificates in a secure way? How to negotiate the connection?