Is there a way to use separate production and staging SSL certificates when deploying to AWS via Boxfuse?

One solution is to include one key store per environment (you can select the correct one at runtime based on the BOXFUSE_ENV environment variable) and pass the keystore password as an environment variable on instance startup. See https://cloudcaptain.sh/docs/commandline/run#envvars