That's an interesting implication. If they distribute the same cert so widely geographically, any host country could technically request it for "lawful intercepts".
You don't have to keep keys on boxes in random countries if you use a TLS oracle [1]. Another option is deploying the keys onto an HSM and pointing your frontends at that.