This is really interesting Sandeep. I am working on a side project kinda have same concept ( multi tenants have their own domain under same application) and this issue has been in my mind once it is in production. Locally I use docker with nginx-proxy lets encrypt companion container and been PIA for some time. I will definitely keep this post in my favs.