[ajnin]

Which "compromises" the key, according to current Certificate Authorities policies. Once again the problem boils down to CAs being the sole "anchors of trust" in the current certificate system.

[progval]

Then they could have their server tunnel ACME challenges to the device, so the private key never leaves the device, but can still be signed.