When buying an SSL certificate the interface has a checkbox for auto-renewing your certificate. However, this does not work in practice with CloudSites. Instead there is still a manual process to update the cert. This should be fully automated.