Managing SSL across multiple projects still feels more manual than it should be

For a single site, SSL is mostly solved.

But across multiple projects, domains, or environments, it still feels more manual than it should be — renewals, expiration tracking, validation, and general visibility.

I ran into this enough times that I ended up building a small tool for it.

Mostly posting because I’m curious how others handle this today:

certbot/acme.sh
Cloudflare
hosting-managed SSL
internal automation
Is this basically solved in your setup, or do you still run into annoying edge cases?

If anyone wants to try what I built, happy to share the link.