Updated:
I found that I can submit the same CSR for both dev and production when creating certs for iOS push notification.
For a single app I need to create 2 certs (dev/production), so for 10 app, I need to create 20 certs - which is a nightmare for certs management and pollute my keychains, so I am thinking by submitting the same CSR (hence same private key)..just more easy to maintain the stuffs.
I want to know if any drawbacks and are you also doing the same way to reduce the effort in keys/certs management?