Correct. The solution I suggested above is for home/personal use. But if you're doing anything for production, you really shouldn't be using LB ssl termination

Correct. The solution I suggested above is for home/personal use. But if you're doing anything for production, you really shouldn't be using LB ssl termination anyway, and might even benefit from running your own internal CA service.