This script doesn't seem to have any provisions for detecting whether or not the SSL certificates are actually brand new and thus, replace the SSL certificates when it's time to do that... aside from a cron job?

If so, that should probably be integrated so we're not needlessly replacing...