I have a certain workflow similar to this. 1. Let testing/staging environments present the same, valid certificates and keys as your production domain. Simply

I have a certain workflow similar to this. 1. Let testing/staging environments present the same, valid certificates and keys as your production domain. Simply keep a copy for your internal use. 2.1 modify /etc/hosts so that production aliases localhost or 2.2 let an internal DNS service do the spoofing work. You'll still need some action to switch between environments. Full ownership of certificates is a recommendation. At your own risk.