If you're using ACME to handle certificate rotation, can't you just configure multiple providers?
https://news.ycombinator.com/item?id=48071607