I would suggest checking WP Encrypt, a WordPress plugin that handles certificate origination and renewal and even works on multi-site installations (although not with domain mapping). You will need to add the recommended conf additions during their setup to your site's nginx setup (usually under site.com/conf/nginx/ssl.conf) and reload nginx, but this provides a great solution for many sites that need this built in.
↧