So thru my network I see 278 servers I need to patch. This will take forever, or couple days of work. Next time I will simply spend few bucks on an annual certificate instead.
If you'd be replacing everything with a wildcard because it's easier, you can get a free wildcard from Let's Encrypt too.