Why would you PAY for a certificate? LetsEncrypt will give you as many as you want for free, and renew them automatically as often as needed. AWS certificate manager likewise. And I'm sure many other providers too.

If you don't automate your infrastructure you deserve the pain.