Comment by diafygi

Plex does this by generating a private key at install then issuing a real ssl cert for it. That way the private key never is seen by Plex or anyone else. Really cool technique.

https://blog.filippo.io/how-plex-is-doing-https-for-all-its-...